GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css
200 OK 6.0 kB URL GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 25cfe48e07622a00154b677afcbaeb47
23e3ae1bd04ad1d00d25d30e39815104ceeae52f
709debbdebf13d8d6c85571caee6e44629142518e9336ed1aa01d6e94ab4d056
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1783"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET theharityhild.buzz/am9yOW0RTQFOMh8dHhtXSAcGTR0ZVV0WAA8IE0wdRAEXTUIZGFxTHkhDUEoADE1ICEFIHB9PT1BNRhdeSENQTQwNMBtdT1BNSgpfXFxBG0FIHAdbMgMLQBtXSAlKCl4JX0ZbQFwKQltAXgsQCUBTW0oOQAxZF1wICQoRWg4JClBE
0 B URL GET theharityhild.buzz/am9yOW0RTQFOMh8dHhtXSAcGTR0ZVV0WAA8IE0wdRAEXTUIZGFxTHkhDUEoADE1ICEFIHB9PT1BNRhdeSENQTQwNMBtdT1BNSgpfXFxBG0FIHAdbMgMLQBtXSAlKCl4JX0ZbQFwKQltAXgsQCUBTW0oOQAxZF1wICQoRWg4JClBE
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /am9yOW0RTQFOMh8dHhtXSAcGTR0ZVV0WAA8IE0wdRAEXTUIZGFxTHkhDUEoADE1ICEFIHB9PT1BNRhdeSENQTQwNMBtdT1BNSgpfXFxBG0FIHAdbMgMLQBtXSAlKCl4JX0ZbQFwKQltAXgsQCUBTW0oOQAxZF1wICQoRWg4JClBE HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET ukankingwithea.com/asd100.bin
404 Not Found 159 B URL GET ukankingwithea.com/asd100.bin
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash fb9666f93e418b95fea8fdbc20e80af9
d4eefca1b299cc266a80e83c9e39c4261cb87583
c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 22 Jun 2025 15:48:45 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=KKKY4OFHGEW%2F9afJFiZY7jVgusmldT%2F444qG2v3wCkPNUOEEnywMRBI4Y0xj8xs4hunUxMjhy1aKU1WumhaGTV9OUjcR3dyuEsAaJ%2FlYbBU%3D"}]}
content-encoding: br
cf-ray: 953ce44a6a5d56b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET click.directrankcl.com/thumbnail?i=5gE3KXRk3uY_0&imgt=icon
0 B URL GET click.directrankcl.com/thumbnail?i=5gE3KXRk3uY_0&imgt=icon
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=5gE3KXRk3uY_0&imgt=icon HTTP/1.1
Host: click.directrankcl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET megaup.net/themes/spirit/assets/frontend/css/socicon.css
200 OK 9.8 kB URL GET megaup.net/themes/spirit/assets/frontend/css/socicon.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 910a42ce112991b31b30a735f1006a5f
6c8b4769270f1c86bb1c7a6b54325465395ba614
010e6ffb18715ededb10c4ae5a8518475c138fb63b83ec1c125d09b714ccdd8b
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-266e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET undefined/ZmFVamgHAzYHVwdcN0wdFA1oT1ogRGcsDFUOMlIcV1lmA1kQAzJECwoOIA4OFA47HkYIBCFPWiAJNgEyIgNmLzotMmUgPAE4IyBZLCgHBFFRNgA8PSgLECEuVlknIA8BMBcQMhIgBzsvPyI+CSAOFmcMDxVXGDspEDEXMwwFJgAIKx47YglYDQUQEw8NNDkJMC0iFzk5IDA7IB9XLAcHKVQlPh0OLTU+LSA0VTswBFZSB1gAHDI+JCsECwQtIB44JSQqHjQEIjESJmQ4KQIPHwwwVis/CStXNAQiMVYjPVMtBQwPCSVXBWUJEAIpBwcmES0DOCkCC3gvMjAkECILChkTMiA8EAYBJiUoBjMlIQlkAAs1DRE7BgIbDVoqJQVnMAw3MwQcJTcODSI8UwwNPgwiBQ0OKjc3BBAOClVzABsJDyVXDC0iEwY7AQ5j
0 B URL GET undefined/ZmFVamgHAzYHVwdcN0wdFA1oT1ogRGcsDFUOMlIcV1lmA1kQAzJECwoOIA4OFA47HkYIBCFPWiAJNgEyIgNmLzotMmUgPAE4IyBZLCgHBFFRNgA8PSgLECEuVlknIA8BMBcQMhIgBzsvPyI+CSAOFmcMDxVXGDspEDEXMwwFJgAIKx47YglYDQUQEw8NNDkJMC0iFzk5IDA7IB9XLAcHKVQlPh0OLTU+LSA0VTswBFZSB1gAHDI+JCsECwQtIB44JSQqHjQEIjESJmQ4KQIPHwwwVis/CStXNAQiMVYjPVMtBQwPCSVXBWUJEAIpBwcmES0DOCkCC3gvMjAkECILChkTMiA8EAYBJiUoBjMlIQlkAAs1DRE7BgIbDVoqJQVnMAw3MwQcJTcODSI8UwwNPgwiBQ0OKjc3BBAOClVzABsJDyVXDC0iEwY7AQ5j
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ZmFVamgHAzYHVwdcN0wdFA1oT1ogRGcsDFUOMlIcV1lmA1kQAzJECwoOIA4OFA47HkYIBCFPWiAJNgEyIgNmLzotMmUgPAE4IyBZLCgHBFFRNgA8PSgLECEuVlknIA8BMBcQMhIgBzsvPyI+CSAOFmcMDxVXGDspEDEXMwwFJgAIKx47YglYDQUQEw8NNDkJMC0iFzk5IDA7IB9XLAcHKVQlPh0OLTU+LSA0VTswBFZSB1gAHDI+JCsECwQtIB44JSQqHjQEIjESJmQ4KQIPHwwwVis/CStXNAQiMVYjPVMtBQwPCSVXBWUJEAIpBwcmES0DOCkCC3gvMjAkECILChkTMiA8EAYBJiUoBjMlIQlkAAs1DRE7BgIbDVoqJQVnMAw3MwQcJTcODSI8UwwNPgwiBQ0OKjc3BBAOClVzABsJDyVXDC0iEwY7AQ5j HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET c.mgid.com/c?pv=2&v=0|0|0|wmx00Kgqfgzfj2ATbUAL3rXlHjhKQV0yTKofq505aIR7wMK5DpiY2eDPeB59by9Irfk7oeaZwwoo0_7J_qv1gvYL5sJ4VvdqXh4Tdb7Yo3k*&cid=1639519&f=1&h2=McWJCZZsM7jqXO6rYqITMd0xPCfiiJZxN8kmZh0t15z0mDM9CYlp2kbSGKovxaxF&rid=620d536a-4f80-11f0-8fa8-d404e6f9f440&psid=820036&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzIzMzcyNzE2LzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjSE02THk5cGJXZG9iM04wY3k1amIyMHZkQzh5TURJMUxUQXpMekV3TVRreU5DOWxZMlE1TmpobVltVTVZalExWkdGbVptWm1NVGd6WVRVM05UaGhOamM1WWk1d2JtYy53ZWJwP3Y9MTc1MDYwNzMyNi1KdmNObV9HUWNxY2lHS3F5N0xmVE9Od1UyckEyNVpWaGtRX0V3X2ZUSG8w
301 Moved Permanently 16 kB URL GET c.mgid.com/c?pv=2&v=0|0|0|wmx00Kgqfgzfj2ATbUAL3rXlHjhKQV0yTKofq505aIR7wMK5DpiY2eDPeB59by9Irfk7oeaZwwoo0_7J_qv1gvYL5sJ4VvdqXh4Tdb7Yo3k*&cid=1639519&f=1&h2=McWJCZZsM7jqXO6rYqITMd0xPCfiiJZxN8kmZh0t15z0mDM9CYlp2kbSGKovxaxF&rid=620d536a-4f80-11f0-8fa8-d404e6f9f440&psid=820036&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzIzMzcyNzE2LzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjSE02THk5cGJXZG9iM04wY3k1amIyMHZkQzh5TURJMUxUQXpMekV3TVRreU5DOWxZMlE1TmpobVltVTVZalExWkdGbVptWm1NVGd6WVRVM05UaGhOamM1WWk1d2JtYy53ZWJwP3Y9MTc1MDYwNzMyNi1KdmNObV9HUWNxY2lHS3F5N0xmVE9Od1UyckEyNVpWaGtRX0V3X2ZUSG8w
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectmgid.com
FingerprintA4:77:28:56:3D:B9:7B:24:26:51:DE:A6:D0:EA:FE:84:9B:83:A6:68
ValidityMon, 28 Apr 2025 02:54:55 GMT - Sun, 27 Jul 2025 03:54:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c?pv=2&v=0|0|0|wmx00Kgqfgzfj2ATbUAL3rXlHjhKQV0yTKofq505aIR7wMK5DpiY2eDPeB59by9Irfk7oeaZwwoo0_7J_qv1gvYL5sJ4VvdqXh4Tdb7Yo3k*&cid=1639519&f=1&h2=McWJCZZsM7jqXO6rYqITMd0xPCfiiJZxN8kmZh0t15z0mDM9CYlp2kbSGKovxaxF&rid=620d536a-4f80-11f0-8fa8-d404e6f9f440&psid=820036&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzIzMzcyNzE2LzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjSE02THk5cGJXZG9iM04wY3k1amIyMHZkQzh5TURJMUxUQXpMekV3TVRreU5DOWxZMlE1TmpobVltVTVZalExWkdGbVptWm1NVGd6WVRVM05UaGhOamM1WWk1d2JtYy53ZWJwP3Y9MTc1MDYwNzMyNi1KdmNObV9HUWNxY2lHS3F5N0xmVE9Od1UyckEyNVpWaGtRX0V3X2ZUSG8w HTTP/1.1
Host: c.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sun, 22 Jun 2025 15:48:49 GMT
content-length: 0
location: https://s-img.mgid.com/g/23372716/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cHM6Ly9pbWdob3N0cy5jb20vdC8yMDI1LTAzLzEwMTkyNC9lY2Q5NjhmYmU5YjQ1ZGFmZmZmMTgzYTU3NThhNjc5Yi5wbmc.webp?v=1750607326-JvcNm_GQcqciGKqy7LfTONwU2rA25ZVhkQ_Ew_fTHo0
x-mg-request-uuid: 451436a0-7374-4a06-92f8-bfccc8a4b5d2
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
x-robots-tag: noindex
server: cloudflare
cf-ray: 953ce463b85b5695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST region1.google-analytics.com/g/collect?v=2&tid=G-Z9TE2LW16Q>m=45je56g0v9124836801za200&_p=1750607325079&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766473~104766475~104791498~104791500&cid=1415943781.1750607326&ul=en-us&sr=1280x1024&ir=1&frm=0&pscdl=noapi&_eu=EAAI&_s=1&sid=1750607326&sct=1&seg=0&dl=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&dt=Date.Everything-TENOKE.rar%20-%20MegaUp&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2152
204 No Content 0 B URL POST region1.google-analytics.com/g/collect?v=2&tid=G-Z9TE2LW16Q>m=45je56g0v9124836801za200&_p=1750607325079&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766473~104766475~104791498~104791500&cid=1415943781.1750607326&ul=en-us&sr=1280x1024&ir=1&frm=0&pscdl=noapi&_eu=EAAI&_s=1&sid=1750607326&sct=1&seg=0&dl=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&dt=Date.Everything-TENOKE.rar%20-%20MegaUp&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2152
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-Z9TE2LW16Q>m=45je56g0v9124836801za200&_p=1750607325079&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766473~104766475~104791498~104791500&cid=1415943781.1750607326&ul=en-us&sr=1280x1024&ir=1&frm=0&pscdl=noapi&_eu=EAAI&_s=1&sid=1750607326&sct=1&seg=0&dl=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&dt=Date.Everything-TENOKE.rar%20-%20MegaUp&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2152 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://megaup.net
date: Sun, 22 Jun 2025 15:48:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:102:0
report-to: {"group":"ascnsrsggc:102:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:102:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/scripts.js
200 OK 115 kB URL GET megaup.net/themes/spirit/assets/frontend/js/scripts.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (914), with CRLF line terminators
Size 115 kB (114862 bytes)
Hash ce260d2170faf98639ab8e0e3758f1e2
32eeb82a44bf0bce2df78eafae9f2e9ff8d72e1f
ac331833ebf1c06b0f8565caaeb4760c2184bd89d1cb5574c3947a8d0b6dca1c
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1c0ae"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
Hash 5734e133a619a6ae6ee21a6c00a95eba
57c0ac17302d07bd4f968240098afe5ed53d4ad2
d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 10:45:25 GMT
expires: Fri, 19 Jun 2026 10:45:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
age: 277400
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ukankingwithea.com/
200 OK 26 B IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 4e9b1477616a8e329cbdc74c5f747e6f
e251e7093582ac5d4b526f448b8664c152b7f7ab
b1852fdc3219ac036a2a038441d310320ec2c249655c931a24a6be455858fa49
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Jun 2025 15:48:45 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=c%2FhQIF9fJw1zvLKAmfaFLvaysG4VJjEA5Py6Ii4sKdjTIRyutcpM1eBc4aGDWKt7G9yMyxgTejtF1xGu1jD2LYrEr0k9zyxqbzBz%2FF54Fac%3D"}]}
content-encoding: br
set-cookie: csu=481417110074463@1@1750607325; SameSite=None; Secure; Max-Age=31104000
cf-ray: 953ce449488056b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET smyinteukrestina.org/floater?cs=cHR3MGtEQUIBWEVHRAdcSUVPBV4&abt=0&red=1&sm=83&k=date%20everything%20tenoke&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1880464507430500&agec=1750607325&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_MmdH=1750607326544&crc=1
200 OK 6.6 kB URL GET smyinteukrestina.org/floater?cs=cHR3MGtEQUIBWEVHRAdcSUVPBV4&abt=0&red=1&sm=83&k=date%20everything%20tenoke&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1880464507430500&agec=1750607325&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_MmdH=1750607326544&crc=1
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerAmazon
Subjectsmyinteukrestina.org
FingerprintA5:56:A5:93:4F:01:05:C4:49:34:26:AC:D6:9F:E7:50:91:9F:42:31
ValidityWed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
File type ASCII text, with very long lines (6618), with no line terminators
Hash c3f8b78abdbbbe5935b9c78340e6c0ee
4a4f7d6dd6f79dbe1a88f852bb1374b37a8dd167
cae8786177baae7593edc6a861b59b3c7d32b1f9e093b7e6f29e038473873ae1
GET /floater?cs=cHR3MGtEQUIBWEVHRAdcSUVPBV4&abt=0&red=1&sm=83&k=date%20everything%20tenoke&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1880464507430500&agec=1750607325&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_MmdH=1750607326544&crc=1 HTTP/1.1
Host: smyinteukrestina.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 3864
date: Sun, 22 Jun 2025 15:48:47 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=VTisjSVitbM7xiNKMBDcOPz9PWic1dE/cjknkoW8nkSBOiGNJdT6TLQFKWNsEU5oHx6cQLbtQhSCwurHgmdmA6+mZYfW9SsCnqpDK3idNGIKv/+6ecmoR/SuZMUL; Expires=Sun, 29 Jun 2025 15:48:46 GMT; Path=/
AWSALBCORS=VTisjSVitbM7xiNKMBDcOPz9PWic1dE/cjknkoW8nkSBOiGNJdT6TLQFKWNsEU5oHx6cQLbtQhSCwurHgmdmA6+mZYfW9SsCnqpDK3idNGIKv/+6ecmoR/SuZMUL; Expires=Sun, 29 Jun 2025 15:48:46 GMT; Path=/; SameSite=None
csu=5631102d-cb85-491b-b11c-2dc948cdd8fd
csu=1880464507430500
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VX3dhmXyz7jeaTMhiEKDy4OWLhf_59tCN3oh_fnurWXJExMyfJmcLg==
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css
200 OK 103 kB URL GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Size 103 kB (102727 bytes)
Hash c9b1c618a7b12bd7ecf6034164b29164
f7a4a8bbc3aab1d7bb44659c40a8702f3aa56c99
fc190f724340fc20fd1d175f49c70e70f4acfdd9303ae4f68d9765a2a5958d9b
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-19147"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/icon?family=Material+Icons
200 OK 565 B URL GET fonts.googleapis.com/icon?family=Material+Icons
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
Hash 736c83e15fc300de505f6ce9762a9396
31c0f11ada78e92970ff42d990116d77c169c6d7
c31266310101d0b1607937a7baf07f1601b7637bd2373176696488a07d7b4302
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 22 Jun 2025 15:48:44 GMT
date: Sun, 22 Jun 2025 15:48:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js
200 OK 54 kB URL GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators
Hash 8c1e666176ac7bdce67d58b45823ffac
75947e4316427ce0c5e33300aeb4dc4d7d54dd09
c0b706b9b1ca12b631496228a0eb0fe15ccb14f21ab554f6c4b4f20474e4d3a6
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-d271"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js
200 OK 21 kB URL GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (12692), with CRLF line terminators
Hash 8cfe207a6a21c7495cfb751c761217a6
35d686a6c4ecc9946c35444ce93e110cb0e1611c
804e3c2608de23694fa71684178e2f9815115d56ee022ec770e1fcb208847acc
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-51ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
200 OK 536 B URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 57 x 57, 8-bit colormap, non-interlaced
Hash 0019444f6b6df5b4b5ed32b6b469caab
4232370d10ab54ef9bda57aa9dcb813036047b35
0509f6df067face535f028cd86200748952227161f8f244aa7864e7848553562
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s; _ga_Z9TE2LW16Q=GS2.1.s1750607326$o1$g0$t1750607326$j60$l0$h0; _ga=GA1.2.1415943781.1750607326; _gid=GA1.2.303214050.1750607326; _gat_gtag_UA_108868042_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:47 GMT
content-type: image/png
content-length: 536
last-modified: Thu, 13 Feb 2025 17:40:08 GMT
vary: Accept-Encoding
etag: "67ae2e78-218"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
POST stachedstimaa.com/UTRHY3p+CyQQRwVaCTo0F3ZxMRdhch5QDhBVMC0UNQQNBDsGYWEXEzUJf1FPaAV2RQo4UHpQSHdHMwIOJEd6UUphA2EKFDdbelFcJwl3TUN/BmlVXCQJdltCYQBxV09hA3NQSmQEd0UOIVUgXkt3RDMXFmwFcFZKZwRwUEhnAXNT
204 No Content 0 B URL POST stachedstimaa.com/UTRHY3p+CyQQRwVaCTo0F3ZxMRdhch5QDhBVMC0UNQQNBDsGYWEXEzUJf1FPaAV2RQo4UHpQSHdHMwIOJEd6UUphA2EKFDdbelFcJwl3TUN/BmlVXCQJdltCYQBxV09hA3NQSmQEd0UOIVUgXkt3RDMXFmwFcFZKZwRwUEhnAXNT
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectstachedstimaa.com
Fingerprint12:AD:B7:AA:16:39:CA:1D:5C:8F:D4:4E:CA:74:C6:E5:CD:8B:42:27
ValidityWed, 11 Jun 2025 06:23:35 GMT - Tue, 09 Sep 2025 07:21:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /UTRHY3p+CyQQRwVaCTo0F3ZxMRdhch5QDhBVMC0UNQQNBDsGYWEXEzUJf1FPaAV2RQo4UHpQSHdHMwIOJEd6UUphA2EKFDdbelFcJwl3TUN/BmlVXCQJdltCYQBxV09hA3NQSmQEd0UOIVUgXkt3RDMXFmwFcFZKZwRwUEhnAXNT HTTP/1.1
Host: stachedstimaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sun, 22 Jun 2025 15:48:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=johup7gu0ZcnQUPISzlYSN%2F8n7%2F6HAKNtbecinT2lIOj9DvKWheGigHG5p5oni7jXCUF6odc5nUagE0gW%2FFlSMEIPoHvaktMXZ7Sw%2FVG2FlIURcYygnnXduz8Qzl6%2FWdxyqdvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 953ce44efc8e56a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4528&min_rtt=564&rtt_var=3234&sent=103&recv=133&lost=0&retrans=0&sent_bytes=9396&recv_bytes=8028&delivery_rate=272202&ss_exit_cwnd=14925&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=5c2364342be51fd7&ts=680&inflight_dur=74&x=44"
GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
200 OK 590 B URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Hash ed3d11830b3e136b384f2a0b8082f235
3b75f2a64d528165f108d62e8c30d464b76945d7
1aef6752088fe69a166d3a84375431e1041dde8fa3f9ccbde26accb220feb4a5
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s; _ga_Z9TE2LW16Q=GS2.1.s1750607326$o1$g0$t1750607326$j60$l0$h0; _ga=GA1.2.1415943781.1750607326; _gid=GA1.2.303214050.1750607326; _gat_gtag_UA_108868042_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:47 GMT
content-type: image/png
content-length: 590
last-modified: Thu, 13 Feb 2025 17:42:00 GMT
vary: Accept-Encoding
etag: "67ae2ee8-24e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
POST stachedstimaa.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
204 No Content 0 B URL POST stachedstimaa.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
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectstachedstimaa.com
Fingerprint12:AD:B7:AA:16:39:CA:1D:5C:8F:D4:4E:CA:74:C6:E5:CD:8B:42:27
ValidityWed, 11 Jun 2025 06:23:35 GMT - Tue, 09 Sep 2025 07:21:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST 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 HTTP/1.1
Host: stachedstimaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sun, 22 Jun 2025 15:48:53 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=onoFbNi3wW3i0fSVg4q%2FDeMUFDEABEKDBwGk8Xvmn7nR%2FaMqwzTq%2FQEfK6Btgx0kdtBRp8sr4F%2F3%2FXTyAul1SIstd4FIP%2BWF0%2FMnwfSObAL%2BiC83LZG2Xl1bppfmsJ4r01QvSw%3D%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 953ce4797e6a56a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4278&min_rtt=564&rtt_var=2276&sent=107&recv=137&lost=0&retrans=0&sent_bytes=10673&recv_bytes=9642&delivery_rate=272202&ss_exit_cwnd=14925&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=5c2364342be51fd7&ts=7488&inflight_dur=121&x=44"
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
Hash 5734e133a619a6ae6ee21a6c00a95eba
57c0ac17302d07bd4f968240098afe5ed53d4ad2
d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 10:45:25 GMT
expires: Fri, 19 Jun 2026 10:45:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
age: 277400
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
200 OK 19 kB URL GET fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 19276, version 1.0
Hash 266d9ceb5c3c51971e2a9e13b7ec5883
091a3b35321cb3e7b11034a091964e795c4b74ac
f93e2585efd0318f328e3431482382c66dfe89ac387060e88116cdd18a18b933
GET /s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 10:47:54 GMT
expires: Fri, 19 Jun 2026 10:47:54 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 17:52:30 GMT
content-type: font/woff2
age: 277250
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 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
0 B URL GET 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
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dFR0ZmUVNhcLWhVpFkAQBjhJQ1cycUYgAUc7E14RRWxHD1QCNhNIBhg7AQIDBjsaEksaMQBDVzJlJzM/OjEfKxQ/BzkFAzBkAi0wEGMSCCdRZjY1VgAiOgxdEh4sNxc/FkQPNTAOHiAmLW0tJQY+GDcFVxcVOVYsDgExLQsXYz4yFTs3GV4cOixBQ1c2MSMnDTMtRBMARicSKjYEYxIgEh0YJzQSIDkhXysdHSYADzk8PTcoGxgeJw0yAAAQKA0sPCoMLWw+JDwCHzMoQEYSJC4/GjAZDiwXZjEeLzYFGiwPMXFGJD1HEkEtIRgyFz4JRzIiNB8WHCE2PUcSQSs2WQUhAj1FPhIMDRkxRz9UIBwQFQElbRIFPR9kO1dcAxc8AkBGFiALVEE2Rg4sFy1ADCkcEQcELSUYJy4rQDAaVykXZxwMA0Q7GC8hJTs8JRIMDUdeXRc6BB88RCQYNi0AbFIMFhs6BFscAz4HLzVAJhcRUUU HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMZA2S__1e2qp3oWI2CxHjJZP_9RbLSXzDGeuWBikcKFmlTHLZ_X8b1j_sDWVCXCM8tIX_czQ
302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMZA2S__1e2qp3oWI2CxHjJZP_9RbLSXzDGeuWBikcKFmlTHLZ_X8b1j_sDWVCXCM8tIX_czQ
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint50:4A:C6:AC:C5:1D:10:C3:CB:A9:22:1D:7D:A7:9C:35:49:92:AB:CE
ValidityMon, 02 Jun 2025 08:35:40 GMT - Mon, 25 Aug 2025 08:35:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMZA2S__1e2qp3oWI2CxHjJZP_9RbLSXzDGeuWBikcKFmlTHLZ_X8b1j_sDWVCXCM8tIX_czQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:kg8hEuMzpYpwyI5kNvn6uIk8Fh8gUA:6fmOyGTYV5-jdYc3;Path=/;Expires=Tue, 22-Jun-2027 15:48:46 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 22 Jun 2025 15:48:46 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNvWDTRUaSRx2Pbyh8mo9Yx4X9vvZ8JdhVielM8lreHjIUrnHQ_DvU_2SbMfOVn395XrX075Q&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1462296314%3A1750607326539640
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-c991649jtwE_87V-mlh2mQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 416
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.google-analytics.com/analytics.js
200 OK 53 kB URL GET www.google-analytics.com/analytics.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (2343)
Hash 575b5480531da4d14e7453e2016fe0bc
e5c5f3134fe29e60b591c87ea85951f0aea36ee1
de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:225:0
report-to: {"group":"ascnsrsgac:225:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:225:0"}],}
server: Golfe2
content-length: 20994
date: Sun, 22 Jun 2025 14:59:22 GMT
expires: Sun, 22 Jun 2025 16:59:22 GMT
cache-control: public, max-age=7200
age: 2963
last-modified: Tue, 12 Dec 2023 18:09:08 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css
200 OK 739 B URL GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash a19cdfde4cca33ccafc0b8bfd518bebb
df1830e07033d0ae31288f62892121778fc7c765
a347474d3c97d5440c2f06c86c314eb1e9c2a20e2b84e8367d57743fe77a8115
GET /themes/spirit/assets/frontend/css/mu-waiting-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Mon, 17 Feb 2025 00:39:28 GMT
vary: Accept-Encoding
etag: W/"67b28540-2e3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
200 OK 490 kB URL GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 490 kB (489883 bytes)
Hash d4308be7262a17d5fffed49d88c64e8a
83cdd0ba1346d67b90ee7fde792a53744560024c
7b162b7ff3c4b13e6f9812dfe5748b2c6da0e3feb66097126f4a332aef06841b
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 152114
date: Sun, 22 Jun 2025 15:48:44 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 be3750c9aa69fd9d53a35aea8d9dab16.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: 8zxBb5mtGz83a2CPE8wbFWEknttjDHSMR5TiJbZqL7Vvz5t1rmjIww==
X-Firefox-Spdy: h2
GET stachedstimaa.com/azd4RkRECBs1eQ8EECceBkM3FQMhYy8tFiVWLnMQOWIAMxIHel4yLQ8KT3B1Wg9OYDQCU0V3YhhDGTIxGApJYC0FURd7Yh0KSWh3XxlLcGpeEQ17dU1DCCcjVgZeNjAfW0V3c14HTnZzWAVMf31d
204 No Content 0 B URL GET stachedstimaa.com/azd4RkRECBs1eQ8EECceBkM3FQMhYy8tFiVWLnMQOWIAMxIHel4yLQ8KT3B1Wg9OYDQCU0V3YhhDGTIxGApJYC0FURd7Yh0KSWh3XxlLcGpeEQ17dU1DCCcjVgZeNjAfW0V3c14HTnZzWAVMf31d
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectstachedstimaa.com
Fingerprint12:AD:B7:AA:16:39:CA:1D:5C:8F:D4:4E:CA:74:C6:E5:CD:8B:42:27
ValidityWed, 11 Jun 2025 06:23:35 GMT - Tue, 09 Sep 2025 07:21:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /azd4RkRECBs1eQ8EECceBkM3FQMhYy8tFiVWLnMQOWIAMxIHel4yLQ8KT3B1Wg9OYDQCU0V3YhhDGTIxGApJYC0FURd7Yh0KSWh3XxlLcGpeEQ17dU1DCCcjVgZeNjAfW0V3c14HTnZzWAVMf31d HTTP/1.1
Host: stachedstimaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 22 Jun 2025 15:48:45 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=SjQm63vV%2FNRt%2BeZY3TSOSG36Kvwi8nRLaVklMzQSSbq70Kn6K1%2BVM16ep78qx%2F37Mq5mfy3FQCE%2FExJRlRGBsi9atO1oS548VZCsntk9lA%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 953ce44a7861b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
400 Bad Request 0 B URL GET www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerDigiCert Inc
Subject*.facebook.com
FingerprintAA:43:3C:2F:60:10:EA:75:71:FC:F4:FA:34:E8:57:43:FA:3F:44:83
ValidityMon, 31 Mar 2025 00:00:00 GMT - Sun, 29 Jun 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy: default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-anElMxpJ' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
document-policy: include-js-call-stacks-in-crash-reports
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7518801211091463935&cpp=C3&cv=1024071169&st=1750607325804"
report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7518801211091463935&cpp=C3&cv=1024071169&st=1750607325804"}]}
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
origin-agent-cluster: ?1
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: Pps1h5hi38OiyxkkPjd7EcdkvLRG3gmSlyUvWO3Tw0dpYh8a4AniBFA7qwnHQIwWCZ/CGu3njpqOz+ai9kQzGQ==
content-length: 743
date: Sun, 22 Jun 2025 15:48:45 GMT
proxy-status: http_request_error; e_fb_vipaddr="AcPuQJWl-uUAP-I1qRd0BMyiYkNZcOmhSv82KupHFmXqUBsb3oEBaq9zKceY3nVEozRZqQG0gsboXgQOXDtpPdHLVhbtrsRHXg"; e_clientaddr="AcNFZwMVYeVNI3JPsuG51UQNogqmaUG_gK-xKuDfIAd3qHjBhkeVwF4PgNSD3tbqDdO8TRv30FG8i_p9fJ_Ghb28f_cfGyyy875VAtDw5AB5MjfN"; e_upip="AcOwTNlRU8rJnb3h4eaSps2h4v7OiHfsXUIs8cilRKVMVocDCRsiErGrZ6bZdoQIlo2zVh-SoP6oa_OEKCD82zbkdGqP9kQq776h-A"; e_fb_zone="AcMq-15hDzFg3zvzIoLlsknDVHkT-S8ebmzmajDOwHnwc16YWSAYfpTkb2xA-y8J"; e_fb_twtaskhandle="AcNJ4Atz7TSkE20m6YdDxC1KYcD5TZ6tIwnp9u91j3dFag-CGdCYwoPP7FyqhYPBKOOiT27vYER7HBf_5MGB_3P9sR94ly_zYMAG-6lDARLjcL0"; e_proxy="AcMrRovpQjUtGCTiNCJIfFaP1oMbiS3dnB0T45bCDYnhF3vSJLJMGjmw9sXpGwW5ksj4cABNDdzQyCu3la8", http_request_error; e_fb_vipaddr="AcPFPmB6IYwqP3oehlkYiCqHQTgF4yX_CAT6fV5pjcz4UoXbDj2et8GpQuF7mgrg18b8bIw"; e_clientaddr="AcPLhDZaYrTU66rPahooTMCGab_zdLvK5f5OqZbGGVWkzdK-TRdgLCFJeSRAr1bgMovcE8umHiMGPyeW"; e_upip="AcNEDMEggdVMEHud_DiwGrckVMW7pcFsdyAqUhI8iDzq49NgLXZliJMAZoMnfiy9oWTqqGrf0MlYFVksqliAe5uLFDFooylu4A"; e_fb_zone="AcMq8JpqNW30n045s9aMAytN7ECx1lr-aLwc4xB-0oxQzZqCSaCOmoSnQcwbww"; e_fb_twtaskhandle="AcPJwQrFEBfdfbCLQPeT3Zs8OQFH4rN2FRsBXNG2xOQyk4B0_ML0EuWGVaWAn6CHrXIN2fhoFTgdhiY9Rf35KwbUYaR99YWPLc2U"; e_proxy="AcMP98lD3YgSH1Ah9mTZUBQ-RuNCRepWEJ8x6tkTtbAWK-Q3oWryrg231ncp7rsOlfNOB9GLEQBcVCDT"
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=10, mss=1380, tbw=3384, tp=-1, tpl=-1, uplat=46, ullat=0
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/
200 OK 27 B IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 05271d56e92b7bf7dbed0846099dc737
6de7c3e4413f0fbfeee81e5769781850275f49a6
832e6ac513e10eeb2e3e76c482632070f2ea495cf794e380f2a55ba6f043768b
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Jun 2025 15:48:45 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=t9rDsKo%2B4XZp0zRH39HbZucdOZxJLhBu0f4ifMsKXiW2m5Qn7frOwWawY8DAOjZV7c%2FWzuFzDlwVxzAKcfxqT4SdSYlhIw3vpdWRhWMCb7s%3D"}]}
content-encoding: br
set-cookie: csu=1880464507430500@1@1750607325; SameSite=None; Secure; Max-Age=31104000
cf-ray: 953ce449f9af56b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET stachedstimaa.com/U0xHQ0t8cyQwdh4UNyouBSMOECcFAyUkEQMadwU6EBkzFxgUAWE3Ijdxfndya3pzZTs6KHpyc3U/MyI/Jj96cm06IiEsdnU6enJlY2J1bX51OXpybSc8JiR2Ymo3Nz8/cXZ0fmN6d3R4YXl3dns
204 No Content 0 B URL GET stachedstimaa.com/U0xHQ0t8cyQwdh4UNyouBSMOECcFAyUkEQMadwU6EBkzFxgUAWE3Ijdxfndya3pzZTs6KHpyc3U/MyI/Jj96cm06IiEsdnU6enJlY2J1bX51OXpybSc8JiR2Ymo3Nz8/cXZ0fmN6d3R4YXl3dns
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectstachedstimaa.com
Fingerprint12:AD:B7:AA:16:39:CA:1D:5C:8F:D4:4E:CA:74:C6:E5:CD:8B:42:27
ValidityWed, 11 Jun 2025 06:23:35 GMT - Tue, 09 Sep 2025 07:21:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /U0xHQ0t8cyQwdh4UNyouBSMOECcFAyUkEQMadwU6EBkzFxgUAWE3Ijdxfndya3pzZTs6KHpyc3U/MyI/Jj96cm06IiEsdnU6enJlY2J1bX51OXpybSc8JiR2Ymo3Nz8/cXZ0fmN6d3R4YXl3dns HTTP/1.1
Host: stachedstimaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 22 Jun 2025 15:48:46 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=y7PKgQrUkBExQqYxDPWuRdGW0%2FAGq6nyM4hQvF419PfKPHIcmp2g2NnIzJ%2Fp40PVDzu0c05Jhk6KlWn7k5DRFJPss1vKDrO3QmQInnQiNw%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 953ce44ac8c7b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET s-img.mgid.com/g/23372716/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cHM6Ly9pbWdob3N0cy5jb20vdC8yMDI1LTAzLzEwMTkyNC9lY2Q5NjhmYmU5YjQ1ZGFmZmZmMTgzYTU3NThhNjc5Yi5wbmc.webp?v=1750607326-JvcNm_GQcqciGKqy7LfTONwU2rA25ZVhkQ_Ew_fTHo0
200 OK 16 kB URL GET s-img.mgid.com/g/23372716/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cHM6Ly9pbWdob3N0cy5jb20vdC8yMDI1LTAzLzEwMTkyNC9lY2Q5NjhmYmU5YjQ1ZGFmZmZmMTgzYTU3NThhNjc5Yi5wbmc.webp?v=1750607326-JvcNm_GQcqciGKqy7LfTONwU2rA25ZVhkQ_Ew_fTHo0
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectmgid.com
FingerprintA4:77:28:56:3D:B9:7B:24:26:51:DE:A6:D0:EA:FE:84:9B:83:A6:68
ValidityMon, 28 Apr 2025 02:54:55 GMT - Sun, 27 Jul 2025 03:54:51 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 328x328, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 2f366f1c7acaa241ff802a0e3f264075
d718107ac1d6fbbf86e9574346fe9229d2b95e6e
2759477820dd9296e27b4475a0cdfc87ab8a9732fc8ae0b217b233f53872e172
GET /g/23372716/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cHM6Ly9pbWdob3N0cy5jb20vdC8yMDI1LTAzLzEwMTkyNC9lY2Q5NjhmYmU5YjQ1ZGFmZmZmMTgzYTU3NThhNjc5Yi5wbmc.webp?v=1750607326-JvcNm_GQcqciGKqy7LfTONwU2rA25ZVhkQ_Ew_fTHo0 HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Jun 2025 15:48:49 GMT
content-type: image/webp
content-length: 15930
x-mg-request-uuid: 1f6bbe72-cb27-48d4-984c-9e4815a11d26
access-control-allow-origin: *
last-modified: Fri, 09 May 2025 08:52:57 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 3826043
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
server: cloudflare
cf-ray: 953ce46448fc5695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET rnmop.com/ie?v=4&c=YE_nqvbOOOpo_DIOUJ-CS5xI0goSd40xE98P3Hx3S15qfeE4qgtENhMOD1-IufZL-Drnrb0g_iMthI8jVZy6-xkmdzhQ-jGs9Fg6eck-1Yv3B_-P53ys7EhvDUJIB29-kPqY1J5G9rb_XcgAAcTSJonSVIsCx6QcegEILCmxFzg-mZ4kQhGzRyi-JKsoRPP5lXHN7x6FakKh3kQTszQHH5jwwxBJJfLB0st-dVtEVlKb9XPopnLQMUQUc_pnbLLaYYXFyoHFSxPNxd51YDa2uJMjuofuwYm8zttjwNjhl1M_A9lakQRPEReA-DBLvxmOLU6oK_Hwrq-D5DhpZiTqZVDoAs-1NpmN86hTWwzu0Oro-IGG98El0tI22KDMHxm2-FtTPN_OmqlI3qJ-6OWPSEbXMmPUg2981NPFBr7vsfZmLKqRJS9pNTPhsjgvPKVvD-8P&v1=79&v2=71516
301 Moved Permanently 59 kB URL GET rnmop.com/ie?v=4&c=YE_nqvbOOOpo_DIOUJ-CS5xI0goSd40xE98P3Hx3S15qfeE4qgtENhMOD1-IufZL-Drnrb0g_iMthI8jVZy6-xkmdzhQ-jGs9Fg6eck-1Yv3B_-P53ys7EhvDUJIB29-kPqY1J5G9rb_XcgAAcTSJonSVIsCx6QcegEILCmxFzg-mZ4kQhGzRyi-JKsoRPP5lXHN7x6FakKh3kQTszQHH5jwwxBJJfLB0st-dVtEVlKb9XPopnLQMUQUc_pnbLLaYYXFyoHFSxPNxd51YDa2uJMjuofuwYm8zttjwNjhl1M_A9lakQRPEReA-DBLvxmOLU6oK_Hwrq-D5DhpZiTqZVDoAs-1NpmN86hTWwzu0Oro-IGG98El0tI22KDMHxm2-FtTPN_OmqlI3qJ-6OWPSEbXMmPUg2981NPFBr7vsfZmLKqRJS9pNTPhsjgvPKVvD-8P&v1=79&v2=71516
IP
ASN #24940 Hetzner Online GmbH
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectnimrute.com
FingerprintE2:D9:3C:CF:D5:57:A7:A2:2A:60:4E:99:80:79:B1:7A:F2:04:4F:7D
ValidityMon, 05 May 2025 05:34:31 GMT - Sun, 03 Aug 2025 05:34:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=YE_nqvbOOOpo_DIOUJ-CS5xI0goSd40xE98P3Hx3S15qfeE4qgtENhMOD1-IufZL-Drnrb0g_iMthI8jVZy6-xkmdzhQ-jGs9Fg6eck-1Yv3B_-P53ys7EhvDUJIB29-kPqY1J5G9rb_XcgAAcTSJonSVIsCx6QcegEILCmxFzg-mZ4kQhGzRyi-JKsoRPP5lXHN7x6FakKh3kQTszQHH5jwwxBJJfLB0st-dVtEVlKb9XPopnLQMUQUc_pnbLLaYYXFyoHFSxPNxd51YDa2uJMjuofuwYm8zttjwNjhl1M_A9lakQRPEReA-DBLvxmOLU6oK_Hwrq-D5DhpZiTqZVDoAs-1NpmN86hTWwzu0Oro-IGG98El0tI22KDMHxm2-FtTPN_OmqlI3qJ-6OWPSEbXMmPUg2981NPFBr7vsfZmLKqRJS9pNTPhsjgvPKVvD-8P&v1=79&v2=71516 HTTP/1.1
Host: rnmop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
server: fasthttp
date: Sun, 22 Jun 2025 15:48:52 GMT
content-length: 0
location: https://img.vmmcdn.com/get/1684855/238426_icon.png
x-app-id: 13
GET megaup.net/themes/spirit/assets/frontend/css/custom.css
200 OK 8.9 kB URL GET megaup.net/themes/spirit/assets/frontend/css/custom.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type assembler source, ASCII text, with CRLF line terminators
Hash 68443327ebd1d8f35857bbb29d3ce6df
d34e37d8cebc246854f05dde78abc32b5ad5d9fe
98cf7514d65d87963ee938b6f83493b4429f8005a5f6814ba226a7b89c80aa45
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 19:56:14 GMT
vary: Accept-Encoding
etag: W/"67abab5e-22e8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js
200 OK 14 kB URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (13686), with CRLF line terminators
Hash 0eef6fe46d14f860d5666d2c7b13a564
7ab5f7deaca2f71efbc3bf9f5ba27b89d4697dbe
95a14a4473ff130eb29f3cc02e135978505655e3c931b6c3726dedd4f558f843
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-3626"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint0A:51:EF:B5:6B:56:C8:FC:1C:82:2B:54:E5:59:1E:4D:83:F5:F9:A5
ValidityMon, 02 Jun 2025 08:37:30 GMT - Mon, 25 Aug 2025 08:37:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:TcDqX8BlSMicyu-QmEUDz7tNaEn5DA:gJHT9xtycwn9buTh; Expires=Tue, 22-Jun-2027 15:48:45 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 22 Jun 2025 15:48:45 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMZA2S__1e2qp3oWI2CxHjJZP_9RbLSXzDGeuWBikcKFmlTHLZ_X8b1j_sDWVCXCM8tIX_czQ
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-cBg3ipDZQ6KgcXmht_UaMQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET stachedstimaa.com/YjZGOTNNCSVKDjhgHwpgUAMUYEQoAB5vcQ50DkFpOnElaVUORWBNWgYLfgsGWwd3H0MLUnsKAURFMlhHF0V7CwNSAWBQXQRZewsVFAt2FwpMBGgPFRcLdx9HElchBAJERjJNX18HcQwDVAZxCgFXBnQL
204 No Content 0 B URL GET stachedstimaa.com/YjZGOTNNCSVKDjhgHwpgUAMUYEQoAB5vcQ50DkFpOnElaVUORWBNWgYLfgsGWwd3H0MLUnsKAURFMlhHF0V7CwNSAWBQXQRZewsVFAt2FwpMBGgPFRcLdx9HElchBAJERjJNX18HcQwDVAZxCgFXBnQL
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectstachedstimaa.com
Fingerprint12:AD:B7:AA:16:39:CA:1D:5C:8F:D4:4E:CA:74:C6:E5:CD:8B:42:27
ValidityWed, 11 Jun 2025 06:23:35 GMT - Tue, 09 Sep 2025 07:21:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /YjZGOTNNCSVKDjhgHwpgUAMUYEQoAB5vcQ50DkFpOnElaVUORWBNWgYLfgsGWwd3H0MLUnsKAURFMlhHF0V7CwNSAWBQXQRZewsVFAt2FwpMBGgPFRcLdx9HElchBAJERjJNX18HcQwDVAZxCgFXBnQL HTTP/1.1
Host: stachedstimaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 22 Jun 2025 15:48:45 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kdr4Y1UcrVAuoGI9uGT1eEsNXtTJtUgWyaih21y9M0x12MCst%2BViDHEAXOFkxvK%2BPik8fczsJQWe0IqOl1aYGdjSDQOx8BeuzaYcAf9kGw%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 953ce449df94b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
200 OK 80 kB URL User Request GET megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
IP
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (51766)
Hash 80bebaa7d6437f8a570589efbb7c87cc
2a92ac5e70976c418b92877964b77d5a6bdac56d
c6b1d7eaafbe5ec57b432f187eb57127ad96803ac6c5c56d9ddaa275cb7f8c1e
GET /e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s; expires=Mon, 23 Jun 2025 15:48:44 GMT; Max-Age=86400; path=/; domain=megaup.net; secure; HttpOnly; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
access-control-allow-origin: https://megaup.net
access-control-allow-headers: Content-Type, Content-Range, Content-Disposition, Content-Description
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, no-cache, private
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
200 OK 39 kB URL GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type ASCII text, with very long lines (1572)
Hash 0812d3cfd3d7800435f05536b513ecfd
e70839be86f9de0d31aa6b5f0903da7c1fc7c286
00e20cfbdec23113781e1620e51b3e336b15acd9a3c026a184390736b26dab70
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 22 Jun 2025 15:48:44 GMT
date: Sun, 22 Jun 2025 15:48:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png
200 OK 7.1 kB URL GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
Hash 5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/spirit/assets/images/logo/logo-whitebg.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: image/png
content-length: 7137
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET denknowledc.org/QkZkY1MjJAcObCN7BkUmMCpZRmEEY1YlN3EpA1snc35XCmI0JANNMC4pEQc1MCkKF30sIxBGYQR3Pis7MwgJVxsEMTYyBhAHNic0NhwxCD8gAggLEAEEDDcQBC0yJ2IHFiEyOwcRJRACGiEmJRITKS01YSEsLgsCLCU1MQYWAAMyFCpyBzUkGA8nITgHEzItEAoXNjUGcxABIGILCzM2Kw8XDFcfB3cALhATISYiBQcfJyEwEQMmEBUQFwA5FQN2MSE/JgoyCWYkASJWEREqCwYUE3YzJz8pHCJSYhsEAyICGhADJAtzFDM0OwwiLg9iGwQMCB0EKkkUEBF3B1UHNRQBKxZ3IyFSYy8eMgQUCgQuBwQaIgI1YzoDJgg3ABUIEwEBMQc3ERAIByo4MicmUmYXFTIMGxF3PioXBH4HIgF2ADAIJxUWCBAVFS0UKgcHCDA1AmQsFww9Mns1LhEuCyMJY3Z0
200 OK 3.1 kB URL GET denknowledc.org/QkZkY1MjJAcObCN7BkUmMCpZRmEEY1YlN3EpA1snc35XCmI0JANNMC4pEQc1MCkKF30sIxBGYQR3Pis7MwgJVxsEMTYyBhAHNic0NhwxCD8gAggLEAEEDDcQBC0yJ2IHFiEyOwcRJRACGiEmJRITKS01YSEsLgsCLCU1MQYWAAMyFCpyBzUkGA8nITgHEzItEAoXNjUGcxABIGILCzM2Kw8XDFcfB3cALhATISYiBQcfJyEwEQMmEBUQFwA5FQN2MSE/JgoyCWYkASJWEREqCwYUE3YzJz8pHCJSYhsEAyICGhADJAtzFDM0OwwiLg9iGwQMCB0EKkkUEBF3B1UHNRQBKxZ3IyFSYy8eMgQUCgQuBwQaIgI1YzoDJgg3ABUIEwEBMQc3ERAIByo4MicmUmYXFTIMGxF3PioXBH4HIgF2ADAIJxUWCBAVFS0UKgcHCDA1AmQsFww9Mns1LhEuCyMJY3Z0
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerAmazon
Subjectdenknowledc.org
FingerprintF2:62:65:1C:38:43:C9:DB:CE:22:22:6E:46:9E:78:A7:A6:6F:0E:27
ValidityWed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3059), with no line terminators
Hash 588c76950b99220f2cd8e42530eb2267
23f4ec2411616212f59e6d340ab17ca5d19e1564
081beca8fdb6a051ed0c9c5d5354655619808d13b78c96e29be893665f3994b5
GET /QkZkY1MjJAcObCN7BkUmMCpZRmEEY1YlN3EpA1snc35XCmI0JANNMC4pEQc1MCkKF30sIxBGYQR3Pis7MwgJVxsEMTYyBhAHNic0NhwxCD8gAggLEAEEDDcQBC0yJ2IHFiEyOwcRJRACGiEmJRITKS01YSEsLgsCLCU1MQYWAAMyFCpyBzUkGA8nITgHEzItEAoXNjUGcxABIGILCzM2Kw8XDFcfB3cALhATISYiBQcfJyEwEQMmEBUQFwA5FQN2MSE/JgoyCWYkASJWEREqCwYUE3YzJz8pHCJSYhsEAyICGhADJAtzFDM0OwwiLg9iGwQMCB0EKkkUEBF3B1UHNRQBKxZ3IyFSYy8eMgQUCgQuBwQaIgI1YzoDJgg3ABUIEwEBMQc3ERAIByo4MicmUmYXFTIMGxF3PioXBH4HIgF2ADAIJxUWCBAVFS0UKgcHCDA1AmQsFww9Mns1LhEuCyMJY3Z0 HTTP/1.1
Host: denknowledc.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1205
date: Sun, 22 Jun 2025 15:48:46 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=67xy38Xrs8JVZtcUZkPciui6uY1wHzTrzLKSiyAT1+uDoQdLofQSeom+Xms6yhDZrk5W1lfNCnSXrsidPSbd7Bp7xv6T92zfjh/FFJT5K58r6MeZEsnIJ9zMidUT; Expires=Sun, 29 Jun 2025 15:48:46 GMT; Path=/
AWSALBCORS=67xy38Xrs8JVZtcUZkPciui6uY1wHzTrzLKSiyAT1+uDoQdLofQSeom+Xms6yhDZrk5W1lfNCnSXrsidPSbd7Bp7xv6T92zfjh/FFJT5K58r6MeZEsnIJ9zMidUT; Expires=Sun, 29 Jun 2025 15:48:46 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c16cb9fc938243bd0209a41893a00da4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: syJ9xNZK5H-RgXV-j3R57fWN23Cvm2iWdsYl5w2gl33CgdrUYgtcrA==
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js
200 OK 5.4 kB URL GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators
Hash 76a923d3d69255c45cd24bf9b100244f
eb3c96f9901692f1a03500ea632963a16afdb985
8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-14f0"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
404 Not Found 159 B URL GET ukankingwithea.com/asd100.bin
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash fb9666f93e418b95fea8fdbc20e80af9
d4eefca1b299cc266a80e83c9e39c4261cb87583
c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 22 Jun 2025 15:48:45 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qbZSC9b1ES4273lKNVHNILmBCuf23Bh8DJxbGRdvpsMxWcUhAXZrlpvYKTxV1RDG2ZXenkqZdZuq%2F0akucA3uZo5ouhGddkIkeQm2P6juxk%3D"}]}
content-encoding: br
cf-ray: 953ce44aaab456b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e56g0za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500
200 OK 346 kB URL GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e56g0za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (6004)
Size 346 kB (345510 bytes)
Hash 07167f38c98968d35c83159accadc809
c774e0c4ba58c2beb6011b0a2b602631f2873ca7
55033fd5199aebb0be8581048d3459ff131f22ee6dcaad325835e0df776c5f7c
GET /gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e56g0za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 22 Jun 2025 15:48:45 GMT
expires: Sun, 22 Jun 2025 15:48:45 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 120947
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
200 OK 70 kB URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (768), with CRLF line terminators
Hash 6fda19caa29287e6f584f0557fdeb6d4
40f58160090cd1f022704ee1352b343adb9e73b9
8ef749c3869991924150dc932c48cd57bf69ac25a378bb2e14f8e1733c17406f
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1107a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/flickity.css
200 OK 2.5 kB URL GET megaup.net/themes/spirit/assets/frontend/css/flickity.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 244d315064064270eabbbb7ac9f6c700
21ad53d3efbb40154293190173ee0c497ed7651c
ff5fe542e37297733305fb7e68a41b3269a681d64145945f2131a646044c016a
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-9d9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
200 OK 59 kB URL GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with very long lines (58929), with CRLF line terminators
Hash 879812fc22af75aa3ae7b5666ca4f4b8
df27469a952b7ee36cc03db471c6198f577186a8
c5d7f0d9e646698b20734ce6dcc2c0a8ecf6ebe27b4b7625bfcf42c4416fb7ed
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-e6ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js
200 OK 11 kB URL GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (10573), with CRLF line terminators
Hash 714368d20c70f8c91b0a596e128dac07
563954ec3a896fc129d014f01836245829f6d01d
e70b27194b8793b68cccee28a6d8a1e39aae2ce5d28d5e71ac204d7a3ac164e3
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-298b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET smyinteukrestina.org/multi?cs=Q21MSWd0W317XnBafH5Xclh9f1Q&abt=0&red=1&sm=76&k=date%20everything%20tenoke&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1880464507430500&agec=1750607325&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_zgpp=1750607326550&crc=1
200 OK 3.8 kB URL GET smyinteukrestina.org/multi?cs=Q21MSWd0W317XnBafH5Xclh9f1Q&abt=0&red=1&sm=76&k=date%20everything%20tenoke&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1880464507430500&agec=1750607325&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_zgpp=1750607326550&crc=1
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerAmazon
Subjectsmyinteukrestina.org
FingerprintA5:56:A5:93:4F:01:05:C4:49:34:26:AC:D6:9F:E7:50:91:9F:42:31
ValidityWed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
File type ASCII text, with very long lines (3833), with no line terminators
Hash 0112c8383e75bacb484fe896c0c13de7
e3dc48878451bc50b6f558e068897857e4a1c29f
6d284411a4525e30f6bec9b15a7844d36831d04f0d6f2185423cb4e051477ea1
GET /multi?cs=Q21MSWd0W317XnBafH5Xclh9f1Q&abt=0&red=1&sm=76&k=date%20everything%20tenoke&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1880464507430500&agec=1750607325&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_zgpp=1750607326550&crc=1 HTTP/1.1
Host: smyinteukrestina.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1907
date: Sun, 22 Jun 2025 15:48:46 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=izEMXQaPZsEa5nnFVvXoYCIPfSPYUNIKKx5CmM2kl/8YmKrt3+DE+8mQz/P4Df9QG95nh5P4DLsIARioS+2Ek9BgGBYifJQt26A1lSZ8/AVEzfH7xgkGPTg2J+j4; Expires=Sun, 29 Jun 2025 15:48:46 GMT; Path=/
AWSALBCORS=izEMXQaPZsEa5nnFVvXoYCIPfSPYUNIKKx5CmM2kl/8YmKrt3+DE+8mQz/P4Df9QG95nh5P4DLsIARioS+2Ek9BgGBYifJQt26A1lSZ8/AVEzfH7xgkGPTg2J+j4; Expires=Sun, 29 Jun 2025 15:48:46 GMT; Path=/; SameSite=None
csu=91d105b8-80e5-4404-bfe1-9498648c297b
csu=1880464507430500
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LV-d4PpkxGAOJVoN6KCn1fzMYGMbtKtSLLRca13B5X37-CyDFsRNQg==
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNvWDTRUaSRx2Pbyh8mo9Yx4X9vvZ8JdhVielM8lreHjIUrnHQ_DvU_2SbMfOVn395XrX075Q&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1462296314%3A1750607326539640
403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNvWDTRUaSRx2Pbyh8mo9Yx4X9vvZ8JdhVielM8lreHjIUrnHQ_DvU_2SbMfOVn395XrX075Q&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1462296314%3A1750607326539640
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint50:4A:C6:AC:C5:1D:10:C3:CB:A9:22:1D:7D:A7:9C:35:49:92:AB:CE
ValidityMon, 02 Jun 2025 08:35:40 GMT - Mon, 25 Aug 2025 08:35:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNvWDTRUaSRx2Pbyh8mo9Yx4X9vvZ8JdhVielM8lreHjIUrnHQ_DvU_2SbMfOVn395XrX075Q&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1462296314%3A1750607326539640 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 22 Jun 2025 15:48:46 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-9bsPyFojxWBvB2bRn353sg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.EgAwAlBY3zc.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css
200 OK 3.9 kB URL GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 30265c8089a8f3e871d0873ef6a5b944
2804a2fe5a6a956626ce6a46adf6b1a0676ee13d
f9f33dca7f9a5a735a0a03502993e0a092df81d820beb1ed4071e4611a9630ed
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f31"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
Hash 5734e133a619a6ae6ee21a6c00a95eba
57c0ac17302d07bd4f968240098afe5ed53d4ad2
d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 10:45:25 GMT
expires: Fri, 19 Jun 2026 10:45:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
age: 277399
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ukankingwithea.com/
200 OK 26 B IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 6f726bf7ec2971b9672074a10ae94d4c
92be24f54495e47f47593625f481bc6f173f2684
f5d050fc8ca5cd35e43fd5194d58da748043135aa1274dcd4055c36d235246d9
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Jun 2025 15:48:45 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ifFsBmz2Tb%2FTabjb%2BF83rJcY8VNy1srp8EECj0HQce6HicoyHIMvpAvkSAZvrUZh7xm27HRh6I2HV%2FTJ5HDqztKduU0ITVPR%2BmltyzWLZRE%3D"}]}
content-encoding: br
set-cookie: csu=529454845874757@1@1750607325; SameSite=None; Secure; Max-Age=31104000
cf-ray: 953ce449990956b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.vmmcdn.com/get/1684855/238426_icon.png
200 OK 59 kB URL GET img.vmmcdn.com/get/1684855/238426_icon.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectimg.vmmcdn.com
Fingerprint50:0A:70:84:3B:79:B2:54:89:65:50:AD:82:21:EF:21:3E:AB:58:98
ValidityMon, 16 Jun 2025 16:28:40 GMT - Sun, 14 Sep 2025 16:28:39 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Hash 669eb036e71ef2df4b1a7d3fa9e5ebb7
6a8686b1ce7276b8c6732245e340dbe38b30eb04
89edf6961767b760b3ff755a803457eee41b5f2df863cdeca95165bf4a126732
GET /get/1684855/238426_icon.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.1
date: Sun, 22 Jun 2025 15:48:53 GMT
content-type: image/png
content-length: 59035
last-modified: Sun, 18 Dec 2022 10:47:54 GMT
cache-control: public, max-age=604800
etag: "639eefda-e69b"
x-proxy-cache: HIT
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
access-control-request-headers: x-requested-with
access-control-allow-headers: x-requested-with
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css
200 OK 77 kB URL GET megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with very long lines (65319), with CRLF line terminators
Hash 9b67b9ffbfcbe226a8c413fa740fd91c
7837bd0c312897e46311aaf472947f3e23d75df2
2642f94894419d1cebdc4a010b9380a7403063dd6d28ea8a80bd5ebd01186732
GET /themes/spirit/assets/frontend/css/bootstrap.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-12c7a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js
200 OK 3.9 kB URL GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3949), with no line terminators
Hash 2f6185a8a32a50b2b3e04849f44359d4
0e5501588c5c0d1c9462f34b0d56c21abff5bfef
914df93a9770d8a0e132b6ce3e8f1cfba0e0fae8f3b9002a3f0eb47c3d0cc97b
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f6d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
Hash 5734e133a619a6ae6ee21a6c00a95eba
57c0ac17302d07bd4f968240098afe5ed53d4ad2
d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 10:45:25 GMT
expires: Fri, 19 Jun 2026 10:45:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
age: 277399
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMoTZCc8P36wWdcXIN4xkC2S7ITNLJZ0mFgUvNn7K40zhimNH9P-UzJ4M6-amkE0YyioPQb9g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1731852237%3A1750607326546945
403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMoTZCc8P36wWdcXIN4xkC2S7ITNLJZ0mFgUvNn7K40zhimNH9P-UzJ4M6-amkE0YyioPQb9g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1731852237%3A1750607326546945
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint50:4A:C6:AC:C5:1D:10:C3:CB:A9:22:1D:7D:A7:9C:35:49:92:AB:CE
ValidityMon, 02 Jun 2025 08:35:40 GMT - Mon, 25 Aug 2025 08:35:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMoTZCc8P36wWdcXIN4xkC2S7ITNLJZ0mFgUvNn7K40zhimNH9P-UzJ4M6-amkE0YyioPQb9g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1731852237%3A1750607326546945 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 22 Jun 2025 15:48:46 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-jh3BEBxwgP0jqDCP_qGJyA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.EgAwAlBY3zc.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/sw.js
200 OK 103 kB IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (103036 bytes)
Hash 9ee51131e416458b88d6da4e6e6959ca
a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4
db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 22:15:30 GMT
vary: Accept-Encoding
etag: W/"63a23402-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
POST www.google-analytics.com/j/collect?v=1&_v=j101&a=1439678922&t=pageview&_s=1&dl=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&ul=en-us&de=UTF-8&dt=Date.Everything-TENOKE.rar%20-%20MegaUp&sd=24-bit&sr=1280x1024&vp=1280x1024&je=0&_u=YADAAUABAAAAACAAI~&jid=536419986&gjid=652143321&cid=1415943781.1750607326&tid=UA-108868042-1&_gid=303214050.1750607326&_r=1>m=457e56g0za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500&jsscut=1&npa=1&z=1287790337
200 OK 1 B URL POST www.google-analytics.com/j/collect?v=1&_v=j101&a=1439678922&t=pageview&_s=1&dl=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&ul=en-us&de=UTF-8&dt=Date.Everything-TENOKE.rar%20-%20MegaUp&sd=24-bit&sr=1280x1024&vp=1280x1024&je=0&_u=YADAAUABAAAAACAAI~&jid=536419986&gjid=652143321&cid=1415943781.1750607326&tid=UA-108868042-1&_gid=303214050.1750607326&_r=1>m=457e56g0za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500&jsscut=1&npa=1&z=1287790337
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j101&a=1439678922&t=pageview&_s=1&dl=https%3A%2F%2Fmegaup.net%2Fe6a6750f355ba4f6215d7586dd978df1%2FDate.Everything-TENOKE.rar&ul=en-us&de=UTF-8&dt=Date.Everything-TENOKE.rar%20-%20MegaUp&sd=24-bit&sr=1280x1024&vp=1280x1024&je=0&_u=YADAAUABAAAAACAAI~&jid=536419986&gjid=652143321&cid=1415943781.1750607326&tid=UA-108868042-1&_gid=303214050.1750607326&_r=1>m=457e56g0za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500&jsscut=1&npa=1&z=1287790337 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain
Content-Length: 0
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
access-control-allow-origin: https://megaup.net
date: Sun, 22 Jun 2025 15:48:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:175:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:175:0
report-to: {"group":"ascnsrsgac:175:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:175:0"}],}
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNuPheX1qZSOwKlEkHq4pdmrq3KAzCSf5bwD44l2joPnU46kJa-6bvONRE1ZKNGvCgOJ9gO2w
302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNuPheX1qZSOwKlEkHq4pdmrq3KAzCSf5bwD44l2joPnU46kJa-6bvONRE1ZKNGvCgOJ9gO2w
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint50:4A:C6:AC:C5:1D:10:C3:CB:A9:22:1D:7D:A7:9C:35:49:92:AB:CE
ValidityMon, 02 Jun 2025 08:35:40 GMT - Mon, 25 Aug 2025 08:35:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNuPheX1qZSOwKlEkHq4pdmrq3KAzCSf5bwD44l2joPnU46kJa-6bvONRE1ZKNGvCgOJ9gO2w HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:aSSS_g2Avijwqg3sJZttsrhmUbcLLA:Jo6o4RoxFFUN7klc;Path=/;Expires=Tue, 22-Jun-2027 15:48:46 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 22 Jun 2025 15:48:46 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMoTZCc8P36wWdcXIN4xkC2S7ITNLJZ0mFgUvNn7K40zhimNH9P-UzJ4M6-amkE0YyioPQb9g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1731852237%3A1750607326546945
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-lJpOo_15MbqjN_RpzwpP_g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 420
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/themes/spirit/assets/frontend/css/theme.css
200 OK 207 kB URL GET megaup.net/themes/spirit/assets/frontend/css/theme.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type assembler source, ASCII text, with CRLF line terminators
Size 207 kB (206626 bytes)
Hash 06cc8983a538a05dddf526b3b7e732aa
2414173a1660589ebbba8bdc6e3d1237df6063db
27e49bfa89404d352fa4627719f2a9a3ea5c2759c2bc74e7567ff98b5a996758
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 18:30:52 GMT
vary: Accept-Encoding
etag: W/"67ab975c-32722"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/images/logo/logo.png
200 OK 5.9 kB URL GET megaup.net/themes/spirit/assets/images/logo/logo.png
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
Hash fa360a47a62ae74a0a3d8c0f3e6f7f12
168c72a918b04b735f8e0f8a72223a16f0eda358
1d3a3c84dd36871d1009693761f441537117d5ee62c8e775d7d52c77d4c46de4
GET /themes/spirit/assets/images/logo/logo.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: image/png
content-length: 5900
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-170c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
200 OK 87 kB URL GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators
Hash 5b5a269bd363e0886c17d855c2aab241
042dd055cd289215835a58507c9531f808e1648a
1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-152b9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js
200 OK 6.0 kB URL GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4887), with CRLF line terminators
Hash c9e3a210d83398f301b3a7049c259676
8e227bb40fe120841829a7fef0ffeb091d179a91
aeda362b1d693480453b895cbcf8b92629f58240c42ba8c643f0d5d338baf805
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-178c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
POST stachedstimaa.com/Rm5JNWNpUSpGXiRceGMBKjgrYiQECBNZEyM0JVkKEAIxQTR0L29BCiJTcQdWf194ExMvCnQGUWAdPVQXMx10B1N2W29cDSABdAdTdlh5BVF1WmwCIC4aPUUQY10IEFEAS3tzACoHKl5NIgc7UAAyHChbCCUCZ1YMK0t7cxcuGyRXDScHJRBQAAdsBidzCQwGKB48IgYWHzF5EFFwByRSF2NdDVwAKQBsAiB0X3gBWn9Wfg1QY1kKAVd+W3EGUHJaegBXcld4BFF+SD8IU2hXZwdNcEg8CFJ+VnkBVXJbeQJXdV58BVNgGjlUBHtfb0UXMgJ0BFRzXn8FVHVccAZWcw
204 No Content 0 B URL POST stachedstimaa.com/Rm5JNWNpUSpGXiRceGMBKjgrYiQECBNZEyM0JVkKEAIxQTR0L29BCiJTcQdWf194ExMvCnQGUWAdPVQXMx10B1N2W29cDSABdAdTdlh5BVF1WmwCIC4aPUUQY10IEFEAS3tzACoHKl5NIgc7UAAyHChbCCUCZ1YMK0t7cxcuGyRXDScHJRBQAAdsBidzCQwGKB48IgYWHzF5EFFwByRSF2NdDVwAKQBsAiB0X3gBWn9Wfg1QY1kKAVd+W3EGUHJaegBXcld4BFF+SD8IU2hXZwdNcEg8CFJ+VnkBVXJbeQJXdV58BVNgGjlUBHtfb0UXMgJ0BFRzXn8FVHVccAZWcw
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectstachedstimaa.com
Fingerprint12:AD:B7:AA:16:39:CA:1D:5C:8F:D4:4E:CA:74:C6:E5:CD:8B:42:27
ValidityWed, 11 Jun 2025 06:23:35 GMT - Tue, 09 Sep 2025 07:21:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Rm5JNWNpUSpGXiRceGMBKjgrYiQECBNZEyM0JVkKEAIxQTR0L29BCiJTcQdWf194ExMvCnQGUWAdPVQXMx10B1N2W29cDSABdAdTdlh5BVF1WmwCIC4aPUUQY10IEFEAS3tzACoHKl5NIgc7UAAyHChbCCUCZ1YMK0t7cxcuGyRXDScHJRBQAAdsBidzCQwGKB48IgYWHzF5EFFwByRSF2NdDVwAKQBsAiB0X3gBWn9Wfg1QY1kKAVd+W3EGUHJaegBXcld4BFF+SD8IU2hXZwdNcEg8CFJ+VnkBVXJbeQJXdV58BVNgGjlUBHtfb0UXMgJ0BFRzXn8FVHVccAZWcw HTTP/1.1
Host: stachedstimaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sun, 22 Jun 2025 15:48:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xD4Z5xP7TvyKxKBnmxb7KHb0A9BZT5YujUWdG2CpZxg%2B7xQ1HcY9lSya3s%2BHgd2YzFUUkbv3vpaB58EIlZPlhUNuHizG6FLvoWsr5m8aeHqICRQ3UpzRwERKq8AZfRpER7wrYA%3D%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 953ce460bd3656a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4440&min_rtt=564&rtt_var=2602&sent=105&recv=135&lost=0&retrans=0&sent_bytes=10035&recv_bytes=8605&delivery_rate=272202&ss_exit_cwnd=14925&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=5c2364342be51fd7&ts=3520&inflight_dur=98&x=44"
GET click.directrankcl.com/thumbnail?i=5gE3KXRk3uY_0&imgt=icon
302 Found 16 kB URL GET click.directrankcl.com/thumbnail?i=5gE3KXRk3uY_0&imgt=icon
IP
ASN #27257 WEBAIR-INTERNET
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGlobalSign nv-sa
Subject*.directrankcl.com
Fingerprint2D:75:E6:86:EB:2B:F7:20:E1:DD:FC:7F:76:1A:3A:3B:F9:8B:7B:65
ValidityMon, 04 Nov 2024 09:24:21 GMT - Sat, 06 Dec 2025 09:24:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=5gE3KXRk3uY_0&imgt=icon HTTP/1.1
Host: click.directrankcl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 22 Jun 2025 15:48:49 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://c.mgid.com/c?pv=2&v=0|0|0|wmx00Kgqfgzfj2ATbUAL3rXlHjhKQV0yTKofq505aIR7wMK5DpiY2eDPeB59by9Irfk7oeaZwwoo0_7J_qv1gvYL5sJ4VvdqXh4Tdb7Yo3k*&cid=1639519&f=1&h2=McWJCZZsM7jqXO6rYqITMd0xPCfiiJZxN8kmZh0t15z0mDM9CYlp2kbSGKovxaxF&rid=620d536a-4f80-11f0-8fa8-d404e6f9f440&psid=820036&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzIzMzcyNzE2LzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjSE02THk5cGJXZG9iM04wY3k1amIyMHZkQzh5TURJMUxUQXpMekV3TVRreU5DOWxZMlE1TmpobVltVTVZalExWkdGbVptWm1NVGd6WVRVM05UaGhOamM1WWk1d2JtYy53ZWJwP3Y9MTc1MDYwNzMyNi1KdmNObV9HUWNxY2lHS3F5N0xmVE9Od1UyckEyNVpWaGtRX0V3X2ZUSG8w
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint0A:51:EF:B5:6B:56:C8:FC:1C:82:2B:54:E5:59:1E:4D:83:F5:F9:A5
ValidityMon, 02 Jun 2025 08:37:30 GMT - Mon, 25 Aug 2025 08:37:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:155_F4rXQZxiXPptKE9kyVLW1-MSXA:kquJ542Aw5UV7fTR; Expires=Tue, 22-Jun-2027 15:48:45 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 22 Jun 2025 15:48:45 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNuPheX1qZSOwKlEkHq4pdmrq3KAzCSf5bwD44l2joPnU46kJa-6bvONRE1ZKNGvCgOJ9gO2w
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
content-security-policy: script-src 'nonce-gIZWC9ys1cCPVc_Jabvdgw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
200 OK 490 kB URL GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 490 kB (489883 bytes)
Hash 0357cf047b34c3b9fbf687f8d11c94c4
7b3d2e3daa4d67264b5d983e8f792fe1a29ffa5c
48d8641c45b9edcb167023a2f4abd6eb8116f0cf3f42380d0ae184627a14f2bc
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 152114
date: Sun, 22 Jun 2025 15:48:46 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 94fbdabfcc07b91a0e8ffbb741347df8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: JRM1HokFXzxfMVdb4RqIgMolT98qHM_5zgexCk79blHTMNpXdb8ESQ==
X-Firefox-Spdy: h2
GET stachedstimaa.com/dWV5NjlaWhpFBBAiGk9aMgkpY2g7JixzTSQkElJjJjMwcmsZCl9CUBFYQQEPRlRBEEkcAUQEAFMWDVdNABZEBx8cCx9ZBFMTRAcXRUtPBhdBQwwLCFMRCVdeSFRfRk0BCUQHDkBVTwYORldMBgpA
204 No Content 0 B URL GET stachedstimaa.com/dWV5NjlaWhpFBBAiGk9aMgkpY2g7JixzTSQkElJjJjMwcmsZCl9CUBFYQQEPRlRBEEkcAUQEAFMWDVdNABZEBx8cCx9ZBFMTRAcXRUtPBhdBQwwLCFMRCVdeSFRfRk0BCUQHDkBVTwYORldMBgpA
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectstachedstimaa.com
Fingerprint12:AD:B7:AA:16:39:CA:1D:5C:8F:D4:4E:CA:74:C6:E5:CD:8B:42:27
ValidityWed, 11 Jun 2025 06:23:35 GMT - Tue, 09 Sep 2025 07:21:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dWV5NjlaWhpFBBAiGk9aMgkpY2g7JixzTSQkElJjJjMwcmsZCl9CUBFYQQEPRlRBEEkcAUQEAFMWDVdNABZEBx8cCx9ZBFMTRAcXRUtPBhdBQwwLCFMRCVdeSFRfRk0BCUQHDkBVTwYORldMBgpA HTTP/1.1
Host: stachedstimaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 22 Jun 2025 15:48:45 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uHn%2FHxNEFyfHppoic2UmFWlyclLZKlnwMj9kZNx04MOemvNFc7S9wkUP2h8wZp045Xwa6HUpTD29Ug3MCFReUW8xFrbQqemdotr4VG6ePw%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 953ce44a1ff0b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/background.jpg
200 OK 86 kB URL GET megaup.net/themes/spirit/assets/frontend/img/background.jpg
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3
Hash 1b0874b56457a14258e3bd22805266c6
26ff3d095376d43cb78388e700707cdaf6ac75eb
5c5e0d52eb281e1ceae07f53c931982e8e014b9a535df9c98246157167e29285
GET /themes/spirit/assets/frontend/img/background.jpg HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: image/jpeg
content-length: 86513
last-modified: Tue, 11 Feb 2025 07:35:38 GMT
vary: Accept-Encoding
etag: "67aafdca-151f1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
Hash 5734e133a619a6ae6ee21a6c00a95eba
57c0ac17302d07bd4f968240098afe5ed53d4ad2
d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 10:45:25 GMT
expires: Fri, 19 Jun 2026 10:45:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
age: 277399
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET undefined/WmU0YUw7B1cMcztYVkc5KAkJRH4cQAYnKGkKU1k4a10HCH0sB1NPLzYKQQUqKApaFWI0AEBEfhwgYCcgaDdeNDoUDVMGDzACQyQiKStSDDQKAUMzPRE0ZQsZaSAEJDUcMHsyIAMuciB4PB1DUBszLEQyNAxccDJ5HykGAngdDHpEfhg9Yw44HiZ9KCoSXVUrfSkXbicNMDJNWCcIV3Y0Bx4ReAIkF1F/MycuJnAKfx8MejUGDgZgKCQXUHskPygyXjg7HQxENC0NFkMCNC5dUiQeaC1gEjsdJn4AAyMVYAUNDwx4NwJqJ2xQPA0tbTAqIhFgBQ0PUnkjYTISdTYgKytzLAQ8JnIgLzInEVMKHVR6UQ4OUUI0fwxVUjY8GQR1NyA8IGZTGTMOAikfMTRSCXUfAVMzdDswUFMOHQlGMyUYBmQLOwsuYVA8Ox92Ug40DQczIRgkVzYrfA9HDiIqWGcpDS1XXTM4GTAMCQ
0 B URL GET undefined/WmU0YUw7B1cMcztYVkc5KAkJRH4cQAYnKGkKU1k4a10HCH0sB1NPLzYKQQUqKApaFWI0AEBEfhwgYCcgaDdeNDoUDVMGDzACQyQiKStSDDQKAUMzPRE0ZQsZaSAEJDUcMHsyIAMuciB4PB1DUBszLEQyNAxccDJ5HykGAngdDHpEfhg9Yw44HiZ9KCoSXVUrfSkXbicNMDJNWCcIV3Y0Bx4ReAIkF1F/MycuJnAKfx8MejUGDgZgKCQXUHskPygyXjg7HQxENC0NFkMCNC5dUiQeaC1gEjsdJn4AAyMVYAUNDwx4NwJqJ2xQPA0tbTAqIhFgBQ0PUnkjYTISdTYgKytzLAQ8JnIgLzInEVMKHVR6UQ4OUUI0fwxVUjY8GQR1NyA8IGZTGTMOAikfMTRSCXUfAVMzdDswUFMOHQlGMyUYBmQLOwsuYVA8Ox92Ug40DQczIRgkVzYrfA9HDiIqWGcpDS1XXTM4GTAMCQ
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /WmU0YUw7B1cMcztYVkc5KAkJRH4cQAYnKGkKU1k4a10HCH0sB1NPLzYKQQUqKApaFWI0AEBEfhwgYCcgaDdeNDoUDVMGDzACQyQiKStSDDQKAUMzPRE0ZQsZaSAEJDUcMHsyIAMuciB4PB1DUBszLEQyNAxccDJ5HykGAngdDHpEfhg9Yw44HiZ9KCoSXVUrfSkXbicNMDJNWCcIV3Y0Bx4ReAIkF1F/MycuJnAKfx8MejUGDgZgKCQXUHskPygyXjg7HQxENC0NFkMCNC5dUiQeaC1gEjsdJn4AAyMVYAUNDwx4NwJqJ2xQPA0tbTAqIhFgBQ0PUnkjYTISdTYgKytzLAQ8JnIgLzInEVMKHVR6UQ4OUUI0fwxVUjY8GQR1NyA8IGZTGTMOAikfMTRSCXUfAVMzdDswUFMOHQlGMyUYBmQLOwsuYVA8Ox92Ug40DQczIRgkVzYrfA9HDiIqWGcpDS1XXTM4GTAMCQ HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET stachedstimaa.com/U0pNU1B8dS4gbQYnIiodYSIgCycwCRphNAkLHAE2Mns+GBI/emsnOTd3dWFlant8dSA6LnBgYnU5OTIkJjlwYnY6JCs8bXU8cGN+amR/fWZ1P3Bidic6LDRtYmw9JyQ/d3xkZWN8fWRjYX99YWA
204 No Content 0 B URL GET stachedstimaa.com/U0pNU1B8dS4gbQYnIiodYSIgCycwCRphNAkLHAE2Mns+GBI/emsnOTd3dWFlant8dSA6LnBgYnU5OTIkJjlwYnY6JCs8bXU8cGN+amR/fWZ1P3Bidic6LDRtYmw9JyQ/d3xkZWN8fWRjYX99YWA
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subjectstachedstimaa.com
Fingerprint12:AD:B7:AA:16:39:CA:1D:5C:8F:D4:4E:CA:74:C6:E5:CD:8B:42:27
ValidityWed, 11 Jun 2025 06:23:35 GMT - Tue, 09 Sep 2025 07:21:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /U0pNU1B8dS4gbQYnIiodYSIgCycwCRphNAkLHAE2Mns+GBI/emsnOTd3dWFlant8dSA6LnBgYnU5OTIkJjlwYnY6JCs8bXU8cGN+amR/fWZ1P3Bidic6LDRtYmw9JyQ/d3xkZWN8fWRjYX99YWA HTTP/1.1
Host: stachedstimaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 22 Jun 2025 15:48:45 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ckyVf4BGT2ys%2BTOuoJEavOn6ui%2FyyKuOmfL1v%2BnewTClvfM%2FBSX4xsxSdiwTbth4DCEBU1mJy9IslYVKpO%2BsExQqiYPojvlxwOgpK4HtXg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 953ce4499f34b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2
200 OK 80 kB URL GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 80148, version 331.17301
Hash c500da19d776384ba69573ae6fe274e7
6290834672aba86d5b6c1c73b30b57c9c53996f7
cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:45 GMT
content-type: font/woff2
content-length: 80148
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-13914"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
200 OK 3.2 kB URL GET megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 4541b29b6040bc31b760f98e914fd1d7
0521a4f98cdf5e1fde3eeb9cae64fd39075cd9ba
6910b6609166588208a24355d3c3666140dd0d7fcb3884b31eedb72773e44794
GET /themes/spirit/assets/frontend/css/stack-interface.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-c58"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-108868042-1
200 OK 288 kB URL GET www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (5913)
Size 288 kB (288352 bytes)
Hash 3cef54a21a233002ae05b12229cad723
4eb34e9bd8c9643244e0677ede831f08fde72fa8
98f4840c9a918f5360dea135c4ab9f264cff2e262a5fab5b693b48aa4cdc241d
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 22 Jun 2025 15:48:44 GMT
expires: Sun, 22 Jun 2025 15:48:44 GMT
cache-control: private, max-age=900
last-modified: Sun, 22 Jun 2025 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 101577
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
200 OK 27 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 26596, version 1.0
Hash dae1850484b86d299c31bc08aaa563cf
dca808d6d16965c40bfba4e4b3c8a819f843890d
8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 18 Jun 2025 22:51:35 GMT
expires: Thu, 18 Jun 2026 22:51:35 GMT
cache-control: public, max-age=31536000
age: 320229
last-modified: Wed, 28 May 2025 17:52:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
200 OK 4.3 kB URL GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
IP
Requested by https://megaup.net/e6a6750f355ba4f6215d7586dd978df1/Date.Everything-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 4292, version 1.0
Hash ae072782b361d2afdbf43db08d3cfb73
f3db2e65b53d97491672f8631e21d6d05905cc88
31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=qf5vud6hk66ug1u33u1e2t957s
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 15:48:44 GMT
content-type: font/woff2
content-length: 4292
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-10c4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
5.34.214.148
54.240.174.65
157.90.94.146
0.0.0.0
31.13.72.36