ocsp.sectigo.com/
472 B IP
Hash 6d2e90c71f43fd9b5d6fb4ac948f2cf5
f1e9c825747d10ace7f1ab3d0e3e35eafc0e23fe
0b7c423c4f48cb4474506f7b70e5eb8a57d45a85c9de96931d9344cb6e29d856
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 03:55:03 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 30 May 2023 19:44:50 GMT
Expires: Tue, 06 Jun 2023 19:44:49 GMT
Etag: "f1e9c825747d10ace7f1ab3d0e3e35eafc0e23fe"
Cache-Control: max-age=402463,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d0cc233bbdb0b31-OSL
205.196.123.172/7bi1g6vs6njg/loom6d32xvg47c1/23111.exe
0 B URL 205.196.123.172/7bi1g6vs6njg/loom6d32xvg47c1/23111.exe
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
NIDS Severity Alert suricata medium ET INFO Executable Download from dotted-quad Host
GET /7bi1g6vs6njg/loom6d32xvg47c1/23111.exe HTTP/1.1
Host: 205.196.123.172
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
server: bd-0.1.24
location: http://www.mediafire.com/download_repair.php?flag=4&dkey=7bi1g6vs6njg&qkey=loom6d32xvg47c1&ip=91%2E90%2E42%2E154
content-length: 0
date: Fri, 02 Jun 2023 03:55:03 GMT
www.mediafire.com/images/icons/myfiles/default.png
363 B URL www.mediafire.com/images/icons/myfiles/default.png
IP
File type PNG image data, 42 x 42, 8-bit gray+alpha, non-interlaced\012- data
Hash 853e3c671adabbc17b0ad9929d507085
d778bef4963b1359a96fc44be0f5154b47b065b6
873b28a0419545d56f83b0e1cc449ce219f35c579bb7ce2cdf2d8fd6d374a2f1
GET /images/icons/myfiles/default.png HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/download_repair.php?flag=4&dkey=7bi1g6vs6njg&qkey=loom6d32xvg47c1&ip=91%2E90%2E42%2E154
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=4BhfwpTzTJGWH1tXJOs8eDRsVCK7gUQb8BHw37bvblw-1685678104-0-AdH+WIiDkXSWlUAabCFbg6nbQo1rUkJznCtcL+hwRna2SQeVHjoo+NH9CVPkBV0F4p892AGcGJBtepRxaTr++FU=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:04 GMT
content-type: image/png
content-length: 363
access-control-allow-origin: *
cache-control: max-age=2592000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=424
etag: "62deda56-1a8"
expires: Sat, 01 Jul 2023 23:49:47 GMT
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
cf-cache-status: HIT
age: 879
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0cc23ade4c0b31-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 02593b51cd737e1085e5837a9a47c755
aab410449655b9fddf070f3e25a1a8e5aee59530
0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.mediafire.com/css/mfv3_121908.php?ver=ssl
44 kB URL static.mediafire.com/css/mfv3_121908.php?ver=ssl
IP
File type gzip compressed data, from Unix\012- data
Hash 38d4a64b91b592c9f349f7160cc00162
f5c48947c1c9643ae1f4e00e5f1496ff0bcdf749
6f1600fc688b8d1749d5a08517e48e9082ece1d7ad28514ee310e77f0373635a
GET /css/mfv3_121908.php?ver=ssl HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=4BhfwpTzTJGWH1tXJOs8eDRsVCK7gUQb8BHw37bvblw-1685678104-0-AdH+WIiDkXSWlUAabCFbg6nbQo1rUkJznCtcL+hwRna2SQeVHjoo+NH9CVPkBV0F4p892AGcGJBtepRxaTr++FU=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:04 GMT
content-type: text/css;charset=UTF-8
vary: Accept-Encoding
pragma: public
cache-control: max-age=
expires: Fri, 16 Jun 2023 03:12:04 GMT
content-encoding: gzip
access-control-allow-origin: *
last-modified: Fri, 02 Jun 2023 03:12:04 GMT
cf-cache-status: HIT
age: 883
server: cloudflare
cf-ray: 7d0cc23abe440b31-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 02593b51cd737e1085e5837a9a47c755
aab410449655b9fddf070f3e25a1a8e5aee59530
0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.mediafire.com/js/master_121908.js
153 kB URL static.mediafire.com/js/master_121908.js
IP
File type gzip compressed data, from Unix\012- data
Size 153 kB (152565 bytes)
Hash 67689e990575cf45da69eb5e0cf9aaed
dfc62baf178988aa977cbe6f4b0427d6ade84a5f
91f647f4b59b92d58e7bcb9537ed610526d02e17182dd56d2db3a2b9addf7826
GET /js/master_121908.js HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=4BhfwpTzTJGWH1tXJOs8eDRsVCK7gUQb8BHw37bvblw-1685678104-0-AdH+WIiDkXSWlUAabCFbg6nbQo1rUkJznCtcL+hwRna2SQeVHjoo+NH9CVPkBV0F4p892AGcGJBtepRxaTr++FU=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:04 GMT
content-type: application/x-javascript
last-modified: Mon, 22 May 2023 17:22:43 GMT
vary: Accept-Encoding
etag: W/"646ba4e3-8d735"
expires: Sat, 01 Jul 2023 23:11:38 GMT
cache-control: max-age=2592000
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 7403
server: cloudflare
cf-ray: 7d0cc23ade4e0b31-OSL
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
34 kB URL ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash b8d64d0bc142b3f670cc0611b0aebcae
abcd2ba13348f178b17141b445bc99f1917d47af
47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 18:34:05 GMT
expires: Fri, 31 May 2024 18:34:05 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 33659
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js
556 B URL www.google.com/recaptcha/api.js
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash df783ce1aff114831a54f9f75f41f66c
33148dcdac51d1a72787969900203bc0316ff82f
f75b96abf98a7f4874b54f268b85ba2b2fa261741afa891097537bcfa1e73fd3
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Fri, 02 Jun 2023 03:55:04 GMT
date: Fri, 02 Jun 2023 03:55:04 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 556
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-829541-1
47 kB URL www.googletagmanager.com/gtag/js?id=UA-829541-1
IP
File type ASCII text, with very long lines (2271)
Hash c21c45c126ee2d04696e42b080883075
d65f6fe577096c206bea818295c6a1fd8e899a82
b347f320fc0e33c9ba382a54f1499e79845a1865478485efc0971be66a6cd5a3
GET /gtag/js?id=UA-829541-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Jun 2023 03:55:04 GMT
expires: Fri, 02 Jun 2023 03:55:04 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Jun 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 47371
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 02593b51cd737e1085e5837a9a47c755
aab410449655b9fddf070f3e25a1a8e5aee59530
0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:800,700,400,300
1.2 kB URL fonts.googleapis.com/css?family=Open+Sans:800,700,400,300
IP
File type gzip compressed data, max compression\012- data
Hash 4ceb4611473e87e86307035a8c30cee6
3f76641b7169c9015a2c9fecc9d0c6aa8d7f1115
cb608f076a7553e472f9dc1d6c92f621d0f78854680ec826d042f80734b5f5f4
GET /css?family=Open+Sans:800,700,400,300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Jun 2023 03:55:04 GMT
date: Fri, 02 Jun 2023 03:55:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 02593b51cd737e1085e5837a9a47c755
aab410449655b9fddf070f3e25a1a8e5aee59530
0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 7e9d63d81a25205bd12ab8b258a264e6
2dfa41d339fd897120f53297f4e0f9fa20c117c1
768ca6e8ca2f678019baeaca289964229311ea185556db48650c297dbe996136
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-53LP4T
76 kB URL www.googletagmanager.com/gtm.js?id=GTM-53LP4T
IP
File type ASCII text, with very long lines (27705)
Hash d6239f458fc9eb9c67ebd8b5164e1b6a
e21cdc173c4708fa46f059d3736f8aea45b256b2
b03d15da05998fe0ded1a522783b96d429e1a5ee6ed8da947f90f1b67200740e
GET /gtm.js?id=GTM-53LP4T HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Jun 2023 03:55:05 GMT
expires: Fri, 02 Jun 2023 03:55:05 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Jun 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76283
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash de06f6fcbc144014f20c63dd5fe236b4
7f10e556cc7c7786c031a226d3efc006f8511c28
ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash de06f6fcbc144014f20c63dd5fe236b4
7f10e556cc7c7786c031a226d3efc006f8511c28
ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
48 kB URL fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 48412, version 1.0\012- data
Hash 31a8297826cdcea344698ff952694a7f
4fa1ee4c471d1c05e9141855eec5ee09b898d594
7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5
GET /s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 11:49:35 GMT
expires: Fri, 31 May 2024 11:49:35 GMT
cache-control: public, max-age=31536000
age: 57930
last-modified: Tue, 02 May 2023 15:08:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash de06f6fcbc144014f20c63dd5fe236b4
7f10e556cc7c7786c031a226d3efc006f8511c28
ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
48 kB URL fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 48412, version 1.0\012- data
Hash 31a8297826cdcea344698ff952694a7f
4fa1ee4c471d1c05e9141855eec5ee09b898d594
7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5
GET /s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 11:49:35 GMT
expires: Fri, 31 May 2024 11:49:35 GMT
cache-control: public, max-age=31536000
age: 57930
last-modified: Tue, 02 May 2023 15:08:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.mediafire.com/apple-touch-icon.png
2.2 kB URL www.mediafire.com/apple-touch-icon.png
IP
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash ae70c6b6aeb89aa05c4da56bf59f7243
89743ff38221d32397fc4c3c43605a354bf46c82
f500eeaa6ecd664e06bcc112ed75b8013345c5d426463d745a2e48c56f9fc5c3
GET /apple-touch-icon.png HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/download_repair.php?flag=4&dkey=7bi1g6vs6njg&qkey=loom6d32xvg47c1&ip=91%2E90%2E42%2E154
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=4BhfwpTzTJGWH1tXJOs8eDRsVCK7gUQb8BHw37bvblw-1685678104-0-AdH+WIiDkXSWlUAabCFbg6nbQo1rUkJznCtcL+hwRna2SQeVHjoo+NH9CVPkBV0F4p892AGcGJBtepRxaTr++FU=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:05 GMT
content-type: image/png
content-length: 2155
access-control-allow-origin: *
cache-control: max-age=2592000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=2384
etag: "62deda56-950"
expires: Thu, 22 Jun 2023 15:10:05 GMT
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
cf-cache-status: HIT
age: 823097
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0cc23edf930b31-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 7e9d63d81a25205bd12ab8b258a264e6
2dfa41d339fd897120f53297f4e0f9fa20c117c1
768ca6e8ca2f678019baeaca289964229311ea185556db48650c297dbe996136
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mediafire.com/blank.html
1.2 kB URL www.mediafire.com/blank.html
IP
File type gzip compressed data, from Unix\012- data
Hash a4023cb2c0ddf00a61b7764f82bc3104
c99ae7f8550cef9398fcc4825f2b25cf27139586
649014ff157e393a0f8e86f98ad385e5dcb887e4ede44e89547e626586c75255
GET /blank.html HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/download_repair.php?flag=4&dkey=7bi1g6vs6njg&qkey=loom6d32xvg47c1&ip=91%2E90%2E42%2E154
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=4BhfwpTzTJGWH1tXJOs8eDRsVCK7gUQb8BHw37bvblw-1685678104-0-AdH+WIiDkXSWlUAabCFbg6nbQo1rUkJznCtcL+hwRna2SQeVHjoo+NH9CVPkBV0F4p892AGcGJBtepRxaTr++FU=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:05 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
content-security-policy: frame-ancestors *
last-modified: Mon, 22 May 2023 17:22:30 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0cc23d0ef90b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js
166 kB URL www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js
IP
File type ASCII text, with very long lines (660)
Size 166 kB (166449 bytes)
Hash 95a32a4d8f8be968bc15d6ab9b9491d1
fbfbcb40c8d8997096cd2ea3d8cfc3dee1981015
a41096fbcf982d79bf075bf2378c9c0c2e8ada5bdc94bd7cc794454135ccf981
GET /recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166449
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 May 2023 23:49:29 GMT
expires: Tue, 28 May 2024 23:49:29 GMT
cache-control: public, max-age=31536000
age: 273936
last-modified: Mon, 22 May 2023 20:58:33 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
200 OK 4.2 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type ASCII text, with very long lines (23228), with no line terminators
Hash edf649e1b11a33833272345187bd4eec
73427e2ab282e5f89021e1c7d20f83eaf9830283
553d768412bca504a0c8771705f681dad359370bdcea637298ca5aa486017a06
GET /_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 4205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 21:45:55 GMT
expires: Fri, 31 May 2024 21:45:55 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 12 Mar 2023 00:11:57 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 22150
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-K68XP6D85D&l=dataLayer&cx=c
75 kB URL www.googletagmanager.com/gtag/js?id=G-K68XP6D85D&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (5858)
Hash a1f4eab670140e96133594717f40dbdc
80f2da6b7b3f2f272dff2933a3594159687c1f09
157a31c0efc3334de4a7bede8f2d3f0e416b2c30db1e3ddc99e1d01275c91379
GET /gtag/js?id=G-K68XP6D85D&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Jun 2023 03:55:05 GMT
expires: Fri, 02 Jun 2023 03:55:05 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75278
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Z9dw9iEydtA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoJ3YppZh9vnjOb_SBu68tCOE-MXQ/m=el_main
200 OK 76 kB URL GET HTTP/3 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Z9dw9iEydtA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoJ3YppZh9vnjOb_SBu68tCOE-MXQ/m=el_main
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type ASCII text, with very long lines (1573)
Hash e573f520bd8dcdfb40e91a9e0e66e527
7182f9fdf1d72c2f42cbbfda617cb81e34a44044
366f944dab73002110a6add4e66a3eb915695bc4f1244da14080a4bc248880c6
GET /_/translate_http/_/js/k=translate_http.tr.no.Z9dw9iEydtA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoJ3YppZh9vnjOb_SBu68tCOE-MXQ/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 76232
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 20:10:36 GMT
expires: Fri, 31 May 2024 20:10:36 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 31 May 2023 15:11:29 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 27869
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 9931ce8bd089d5eff1f52a0f81a5f9af
eaf76ad9273b64aa77e0c7e4552f0ae3a296210a
47e0d8dd159ffc7f7862a9668dfb1586080c88bef2eb5645e441d667c404d509
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fundingchoicesmessages.google.com/el/AGSKWxWIyCHzFdFXMrrvXcHwyqWe1RXKfvfXM65f4sRTnhR0gFdRbMkINCEdtRJkgnPRGPWuOheNMc19H6lgqZzpguI=?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3
0 B URL fundingchoicesmessages.google.com/el/AGSKWxWIyCHzFdFXMrrvXcHwyqWe1RXKfvfXM65f4sRTnhR0gFdRbMkINCEdtRJkgnPRGPWuOheNMc19H6lgqZzpguI=?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxWIyCHzFdFXMrrvXcHwyqWe1RXKfvfXM65f4sRTnhR0gFdRbMkINCEdtRJkgnPRGPWuOheNMc19H6lgqZzpguI=?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 72
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://www.mediafire.com
access-control-allow-credentials: true
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:06 GMT
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'nonce-u9-NaRudSKERWbArMB9X_w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/el/AGSKWxWIyCHzFdFXMrrvXcHwyqWe1RXKfvfXM65f4sRTnhR0gFdRbMkINCEdtRJkgnPRGPWuOheNMc19H6lgqZzpguI=?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3
0 B URL fundingchoicesmessages.google.com/el/AGSKWxWIyCHzFdFXMrrvXcHwyqWe1RXKfvfXM65f4sRTnhR0gFdRbMkINCEdtRJkgnPRGPWuOheNMc19H6lgqZzpguI=?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxWIyCHzFdFXMrrvXcHwyqWe1RXKfvfXM65f4sRTnhR0gFdRbMkINCEdtRJkgnPRGPWuOheNMc19H6lgqZzpguI=?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 65
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://www.mediafire.com
access-control-allow-credentials: true
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:06 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
content-security-policy: script-src 'nonce-ARIpsOruohGN76g2TW5TFA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/f/AGSKWxVSRbeXY9uJfA8S8EAJUnGvH-YWOP18-Bg0v4-t87ToZZa-NIASPTH_ef63btgTcon6JtXNfrP0eV6t2TXmna0=?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg1Njc4MTA1LDM4NzAwMDAwMF0sIjBCN0IxMjY2LTE3OTUtNEExRi1BMURFLUM0QTMxMEMyMjdBMyIsbnVsbCxudWxsLFtudWxsLFs3XV0sImh0dHBzOi8vd3d3Lm1lZGlhZmlyZS5jb20vZG93bmxvYWRfcmVwYWlyLnBocCIsbnVsbCxbWzgsInpmMVVkS1VZTU1jIl0sWzksImVuLVVTIl1dXQ
46 kB URL fundingchoicesmessages.google.com/f/AGSKWxVSRbeXY9uJfA8S8EAJUnGvH-YWOP18-Bg0v4-t87ToZZa-NIASPTH_ef63btgTcon6JtXNfrP0eV6t2TXmna0=?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg1Njc4MTA1LDM4NzAwMDAwMF0sIjBCN0IxMjY2LTE3OTUtNEExRi1BMURFLUM0QTMxMEMyMjdBMyIsbnVsbCxudWxsLFtudWxsLFs3XV0sImh0dHBzOi8vd3d3Lm1lZGlhZmlyZS5jb20vZG93bmxvYWRfcmVwYWlyLnBocCIsbnVsbCxbWzgsInpmMVVkS1VZTU1jIl0sWzksImVuLVVTIl1dXQ
IP
File type gzip compressed data, max compression\012- data
Hash 1a5a724eb9212e7036e88b4332771949
26cbff92a9add5ca195486ec23699697d702dfb2
881e236ac93735569b13bd156f5a82e8e8fc8b9b0601dc544984841a633acf31
GET /f/AGSKWxVSRbeXY9uJfA8S8EAJUnGvH-YWOP18-Bg0v4-t87ToZZa-NIASPTH_ef63btgTcon6JtXNfrP0eV6t2TXmna0=?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg1Njc4MTA1LDM4NzAwMDAwMF0sIjBCN0IxMjY2LTE3OTUtNEExRi1BMURFLUM0QTMxMEMyMjdBMyIsbnVsbCxudWxsLFtudWxsLFs3XV0sImh0dHBzOi8vd3d3Lm1lZGlhZmlyZS5jb20vZG93bmxvYWRfcmVwYWlyLnBocCIsbnVsbCxbWzgsInpmMVVkS1VZTU1jIl0sWzksImVuLVVTIl1dXQ HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
timing-allow-origin: *
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:06 GMT
content-security-policy: script-src 'nonce-1GQuQamVl5MsGrb4Inn67w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash 9931ce8bd089d5eff1f52a0f81a5f9af
eaf76ad9273b64aa77e0c7e4552f0ae3a296210a
47e0d8dd159ffc7f7862a9668dfb1586080c88bef2eb5645e441d667c404d509
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fundingchoicesmessages.google.com/el/AGSKWxWRTvWMIlNIyqnCAyVods3uHvY9DdgZl9nvkn_uMp92VnPmiSxIESrBfBc7b3KEELbEEas995WkhprxCblM-wLqK9QVVWAIL7rzS5puIIe4Thiha_v7tU36YDbUNCMSijFGRehFNg==?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3
0 B URL fundingchoicesmessages.google.com/el/AGSKWxWRTvWMIlNIyqnCAyVods3uHvY9DdgZl9nvkn_uMp92VnPmiSxIESrBfBc7b3KEELbEEas995WkhprxCblM-wLqK9QVVWAIL7rzS5puIIe4Thiha_v7tU36YDbUNCMSijFGRehFNg==?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxWRTvWMIlNIyqnCAyVods3uHvY9DdgZl9nvkn_uMp92VnPmiSxIESrBfBc7b3KEELbEEas995WkhprxCblM-wLqK9QVVWAIL7rzS5puIIe4Thiha_v7tU36YDbUNCMSijFGRehFNg==?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 72
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://www.mediafire.com
access-control-allow-credentials: true
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:06 GMT
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
content-security-policy: script-src 'nonce-sqaqv-5HJZpYfQQZXmnZBA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/el/AGSKWxWRTvWMIlNIyqnCAyVods3uHvY9DdgZl9nvkn_uMp92VnPmiSxIESrBfBc7b3KEELbEEas995WkhprxCblM-wLqK9QVVWAIL7rzS5puIIe4Thiha_v7tU36YDbUNCMSijFGRehFNg==?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3
0 B URL fundingchoicesmessages.google.com/el/AGSKWxWRTvWMIlNIyqnCAyVods3uHvY9DdgZl9nvkn_uMp92VnPmiSxIESrBfBc7b3KEELbEEas995WkhprxCblM-wLqK9QVVWAIL7rzS5puIIe4Thiha_v7tU36YDbUNCMSijFGRehFNg==?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxWRTvWMIlNIyqnCAyVods3uHvY9DdgZl9nvkn_uMp92VnPmiSxIESrBfBc7b3KEELbEEas995WkhprxCblM-wLqK9QVVWAIL7rzS5puIIe4Thiha_v7tU36YDbUNCMSijFGRehFNg==?pvid=0B7B1266-1795-4A1F-A1DE-C4A310C227A3 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 65
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://www.mediafire.com
access-control-allow-credentials: true
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:06 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-RWLLV-3BxTj405RI53B6Lw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport
cross-origin-opener-policy: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.mediafire.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js
17 kB URL www.mediafire.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js
IP
File type ASCII text, with very long lines (34473), with no line terminators
Hash a7b3d467fc2825215f3db2a612272ef6
38d4c71504311231e971c8c37793e328b244f1f5
055d2fca53f284fac390f8d4cfc370ba7a7c32218f7a2e9287ef19b7c00d651b
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=4BhfwpTzTJGWH1tXJOs8eDRsVCK7gUQb8BHw37bvblw-1685678104-0-AdH+WIiDkXSWlUAabCFbg6nbQo1rUkJznCtcL+hwRna2SQeVHjoo+NH9CVPkBV0F4p892AGcGJBtepRxaTr++FU=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:06 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
content-encoding: gzip
cache-control: max-age=14400, public
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d0cc24409430b31-OSL
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
910 B URL www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
IP
File type PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash efa6bb2bfe459bc6f4bdafa3db0383f6
52d15ce52fe50643e542c17812de43f4ed1b6ee0
6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 17:48:40 GMT
expires: Sun, 26 May 2024 17:48:40 GMT
cache-control: public, max-age=31536000
age: 468386
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
42 kB URL translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
File type gzip compressed data, max compression\012- data
Hash d4fac736ed4628cc83d2684aff056b6c
d725ae820c07c87dd6e12842b4a813c007561fe6
e158a530c094aef87b36f1f9283c048a8be4f577da82a9006da4b986b09d892e
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:05 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+872; expires=Sun, 01-Jun-2025 03:55:05 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.mediafire.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js
27 kB URL www.mediafire.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js
IP
File type gzip compressed data, max speed\012- data
Hash c96b47f957aae7ed6a94f98bf048957d
594ed7c8d6571ea25bff15d329bc53cfb4cbf775
9734088ac84379daed3fef784bd516989ffe31cdadd966db053fa26b03f3d63e
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=4BhfwpTzTJGWH1tXJOs8eDRsVCK7gUQb8BHw37bvblw-1685678104-0-AdH+WIiDkXSWlUAabCFbg6nbQo1rUkJznCtcL+hwRna2SQeVHjoo+NH9CVPkBV0F4p892AGcGJBtepRxaTr++FU=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:06 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
content-encoding: gzip
cache-control: max-age=14400, public
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d0cc24409420b31-OSL
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL GET HTTP/3 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 08:02:55 GMT
expires: Fri, 31 May 2024 08:02:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 71531
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 24c2bc15b7a14120c1199b855d8ae62d
64070a45a26dec0c827733f6d68aa206b27efdaf
975691fc99c004f83b502cf418687ba6d699825fb658115642066639aaf66de7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
48 kB URL fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 48412, version 1.0\012- data
Hash 31a8297826cdcea344698ff952694a7f
4fa1ee4c471d1c05e9141855eec5ee09b898d594
7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5
GET /s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 11:49:35 GMT
expires: Fri, 31 May 2024 11:49:35 GMT
cache-control: public, max-age=31536000
age: 57931
last-modified: Tue, 02 May 2023 15:08:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
128 kB URL fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 May 2023 00:16:42 GMT
expires: Thu, 30 May 2024 00:16:42 GMT
cache-control: public, max-age=31536000
age: 185904
last-modified: Tue, 07 Mar 2023 19:51:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
1.4 kB URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP
Hash a3eefe14b1b4698460d992bd1673a26b
a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4
87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 02 Jun 2023 03:55:06 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=Lfy0cVsnv6tIUkFdmYQXIgmbX2sSw_3Fn-PSk6vNT5tkiARB78O0mC5PdKClNnpa5HvOwBh579ydwsT2C7c9swp8EGzIR_hsmtv9QBBGOGRo4rn717FtOFKng-HW8EKIvc6OQKivAF92FoSKXr61IwB3xDrO0iG1GEy_1HNMVF4; expires=Sat, 02-Dec-2023 03:55:06 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+484; expires=Sun, 01-Jun-2025 03:55:06 GMT; path=/; domain=.googleapis.com; Secure
expires: Fri, 02 Jun 2023 03:55:06 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/el/AGSKWxWRTvWMIlNIyqnCAyVods3uHvY9DdgZl9nvkn_uMp92VnPmiSxIESrBfBc7b3KEELbEEas995WkhprxCblM-wLqK9QVVWAIL7rzS5puIIe4Thiha_v7tU36YDbUNCMSijFGRehFNg==
0 B URL fundingchoicesmessages.google.com/el/AGSKWxWRTvWMIlNIyqnCAyVods3uHvY9DdgZl9nvkn_uMp92VnPmiSxIESrBfBc7b3KEELbEEas995WkhprxCblM-wLqK9QVVWAIL7rzS5puIIe4Thiha_v7tU36YDbUNCMSijFGRehFNg==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxWRTvWMIlNIyqnCAyVods3uHvY9DdgZl9nvkn_uMp92VnPmiSxIESrBfBc7b3KEELbEEas995WkhprxCblM-wLqK9QVVWAIL7rzS5puIIe4Thiha_v7tU36YDbUNCMSijFGRehFNg== HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 92
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://www.mediafire.com
access-control-allow-credentials: true
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:06 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-AOZpwMgPaG71ICOb8mWsTA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
region1.analytics.google.com/g/collect?v=2&tid=G-K68XP6D85D>m=45je35v0&_p=1786468778&_gaz=1&cid=913812966.1685678106&ul=en-us&sr=1280x1024&_s=1&sid=1685678105&sct=1&seg=0&dl=https%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D7bi1g6vs6njg%26qkey%3Dloom6d32xvg47c1%26ip%3D91%252E90%252E42%252E154&dt=File%20sharing%20and%20storage%20made%20simple&en=page_view&_fv=1&_nsi=1&_ss=1&up.page_url=https%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D7bi1g6vs6njg%26qkey%3Dloom6d32xvg47c1%26ip%3D91%252E90%252E42%252E154
0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-K68XP6D85D>m=45je35v0&_p=1786468778&_gaz=1&cid=913812966.1685678106&ul=en-us&sr=1280x1024&_s=1&sid=1685678105&sct=1&seg=0&dl=https%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D7bi1g6vs6njg%26qkey%3Dloom6d32xvg47c1%26ip%3D91%252E90%252E42%252E154&dt=File%20sharing%20and%20storage%20made%20simple&en=page_view&_fv=1&_nsi=1&_ss=1&up.page_url=https%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D7bi1g6vs6njg%26qkey%3Dloom6d32xvg47c1%26ip%3D91%252E90%252E42%252E154
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K68XP6D85D>m=45je35v0&_p=1786468778&_gaz=1&cid=913812966.1685678106&ul=en-us&sr=1280x1024&_s=1&sid=1685678105&sct=1&seg=0&dl=https%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D7bi1g6vs6njg%26qkey%3Dloom6d32xvg47c1%26ip%3D91%252E90%252E42%252E154&dt=File%20sharing%20and%20storage%20made%20simple&en=page_view&_fv=1&_nsi=1&_ss=1&up.page_url=https%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D7bi1g6vs6njg%26qkey%3Dloom6d32xvg47c1%26ip%3D91%252E90%252E42%252E154 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.mediafire.com
date: Fri, 02 Jun 2023 03:55:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.mediafire.com/cdn-cgi/rum?
0 B URL www.mediafire.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 13935
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/download_repair.php?flag=4&dkey=7bi1g6vs6njg&qkey=loom6d32xvg47c1&ip=91%2E90%2E42%2E154
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=n4eVnIPgEPWaQrzsoQbdOMc2W33b3xkedKygFtnTgn8-1685678107-0-AfU/X06+JFA4f1bZgm/H5OrPVrMy5FZPFprQ+nCBkSB/ws42HoxEWD72c0sr6qLeEnrhYhCuA7nEldRbNhPkboWzDBzDf8QFE62PVmelr1faJe6Rwmz2jdT465gPVZauV5WDujlJHMe1aFMdU86d630=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 02 Jun 2023 03:55:07 GMT
access-control-allow-origin: https://www.mediafire.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7d0cc24acbc20b31-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.mediafire.com/cdn-cgi/challenge-platform/h/g/cv/result/7d0cc23d7f190b31
28 B URL www.mediafire.com/cdn-cgi/challenge-platform/h/g/cv/result/7d0cc23d7f190b31
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /cdn-cgi/challenge-platform/h/g/cv/result/7d0cc23d7f190b31 HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12370
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/blank.html
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=oYowT9ifJNu9TTiCqP9ysmyagLrhnuvXA1TZcuWYViI-1685678107-0-AbumbhR5bJ1TkPeiuHlmwgoOC8+dXcrwZVv5gCgZ37+tLJuIpTQEfABRP1IgIqqp1spa07VA0SsmSFxabgd+s4fU3LX0SKYck9al0JCgOk8fkBAt9Eceh0zcfWDz2/vMLe+ORUQI7ACQkWQZdYpMsGs=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:07 GMT
content-type: text/plain; charset=UTF-8
set-cookie: __cf_bm=kOSIvjojR7WxYFgxbt4nU29pTlQJI8_dBTD4V6URZCc-1685678107-0-AeHUWpHXp7zd393mkj182IjsGfNq7/G26/SQZ6uZPPlce2f52QbswE9kJIpI5luYn3xaBTJ2mc87ssux6bF3addzCVOzyOWGfaIihsY8sdkI+/7JWLy3oQkR4dAAggI0UCidscmyUGAW8NyOkK33/dY=; path=/; expires=Fri, 02-Jun-23 04:25:07 GMT; domain=.mediafire.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7d0cc24abbbe0b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.mediafire.com/cdn-cgi/challenge-platform/h/g/cv/result/7d0cc23d0efa0b31
28 B URL www.mediafire.com/cdn-cgi/challenge-platform/h/g/cv/result/7d0cc23d0efa0b31
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /cdn-cgi/challenge-platform/h/g/cv/result/7d0cc23d0efa0b31 HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12370
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/blank.html
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=kOSIvjojR7WxYFgxbt4nU29pTlQJI8_dBTD4V6URZCc-1685678107-0-AeHUWpHXp7zd393mkj182IjsGfNq7/G26/SQZ6uZPPlce2f52QbswE9kJIpI5luYn3xaBTJ2mc87ssux6bF3addzCVOzyOWGfaIihsY8sdkI+/7JWLy3oQkR4dAAggI0UCidscmyUGAW8NyOkK33/dY=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:07 GMT
content-type: text/plain; charset=UTF-8
set-cookie: __cf_bm=L5NazIBi2ltv2xDBgpRbpL_0rR83hl3RM7IH9NoBZa0-1685678107-0-AbL6HlBz+xmWPMQv7y7Gqi3Y+Zqfsa7/rn+rB5742VUqSyrkrkpRoySDddVgm4JLSGGvF2LJZpW/T+8V47hIfJsiozX+5/kP4YF07ytVN1OuNcNcAggiJTkeHuddFuFIerGyPyHVp98jCyKB6vx+k28=; path=/; expires=Fri, 02-Jun-23 04:25:07 GMT; domain=.mediafire.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7d0cc24bbc190b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.mediafire.com/cdn-cgi/challenge-platform/h/g/scripts/pica.js
51 kB URL www.mediafire.com/cdn-cgi/challenge-platform/h/g/scripts/pica.js
IP
File type gzip compressed data, max speed\012- data
Hash a94148da79d51b8dacad7f8f5035965e
e4526cc865bf3f77542fced9a614e170909ba4ce
cc033c1590571d8ebc7236d97ac3c127bdf92fe6a223eccf77cbaa17a3b8527a
GET /cdn-cgi/challenge-platform/h/g/scripts/pica.js HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/templates/upgrade/upgrade_button.php
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=w9ymHbm6J0EL64d8L1SocCL4ejfoWOTsLmN1W2qwRLg-1685678106-0-ATZKxFM9ODVSYCzvEJY0cLHh5fLptBXYVhDR0JyE9yt6bpNL+AHIeqZqqgPCladskxSzbCTYmisrkpmJ0cPFVkPDj41C9My/uiCGvpTiHyjrfOo0vEO+S43Qz1MI9qRwvZtkTARVbd9xyRkHLKma2uU=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:06 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
content-encoding: gzip
x-content-type-options: nosniff
cache-control: max-age=14400, public
server: cloudflare
cf-ray: 7d0cc245b9eb0b31-OSL
X-Firefox-Spdy: h2
btloader.com/tag?o=5678961798414336&upapi=true
88 kB URL btloader.com/tag?o=5678961798414336&upapi=true
IP
File type ASCII text, with very long lines (14357)
Hash bbf9470da55dd458813d5bc5937907ee
a29d27941b6466b7665aa935569d2c41dd023437
d864846ffcff5e5bd1f7f5c23e0c826f65f960260400f6eae8b4f8e2ca5b0e3c
GET /tag?o=5678961798414336&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:13 GMT
content-type: application/javascript
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
etag: W/"900d64af9b8e191a7d5d90bf9c76fdcc"
last-modified: Fri, 02 Jun 2023 03:36:11 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 1022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9hmpDo4gTRzwRguFBTcFK%2BQEQlMHzb3%2BPYSiTIEmxwq2snOQ3xJVNl8%2BeE%2Fr7V7XL9tzeQ4f8mjIdN3uCPf%2FqCUz88NJhfN6XnBjDSKi%2FQxVTFc%2FBtZu%2Bg%2F7YZ8OKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0cc2703a010afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.mediafire.com/images/backgrounds/download/social/fb_16x16.png
181 B URL static.mediafire.com/images/backgrounds/download/social/fb_16x16.png
IP
File type PNG image data, 16 x 16, 4-bit colormap, non-interlaced\012- data
Hash 78226526732869add09512e9b4be3090
f1ce9c760e17e69509cabe114392a108a6c839bc
720671166ac43aba99e3952b0b9341ab4e0fee1fd891db54e2a07f05db653142
GET /images/backgrounds/download/social/fb_16x16.png HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=L5NazIBi2ltv2xDBgpRbpL_0rR83hl3RM7IH9NoBZa0-1685678107-0-AbL6HlBz+xmWPMQv7y7Gqi3Y+Zqfsa7/rn+rB5742VUqSyrkrkpRoySDddVgm4JLSGGvF2LJZpW/T+8V47hIfJsiozX+5/kP4YF07ytVN1OuNcNcAggiJTkeHuddFuFIerGyPyHVp98jCyKB6vx+k28=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22linux%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22loom6d32xvg47c1%22%2C%22mf_term%22%3A%22e5f31ec85d8d0e2678ebb69f666e5677%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:13 GMT
content-type: image/png
content-length: 181
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: "62deda56-b5"
expires: Sat, 01 Jul 2023 23:36:41 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 11948
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0cc27138840b31-OSL
X-Firefox-Spdy: h2
www.mediafire.com/file/loom6d32xvg47c1/23111.exe
163 kB URL www.mediafire.com/file/loom6d32xvg47c1/23111.exe
IP
File type gzip compressed data, from Unix\012- data
Size 163 kB (162622 bytes)
Hash 5feafada20e1bcc844414e598ec771ec
78c2388d0af9a3dce159bbe3b6a28500cd7d018e
5d23b1b1494f75373dfdf81f32be315af8742d699171579dad80db70fbfb54ac
GET /file/loom6d32xvg47c1/23111.exe HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/download_repair.php?flag=4&dkey=7bi1g6vs6njg&qkey=loom6d32xvg47c1&ip=91%2E90%2E42%2E154
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=L5NazIBi2ltv2xDBgpRbpL_0rR83hl3RM7IH9NoBZa0-1685678107-0-AbL6HlBz+xmWPMQv7y7Gqi3Y+Zqfsa7/rn+rB5742VUqSyrkrkpRoySDddVgm4JLSGGvF2LJZpW/T+8V47hIfJsiozX+5/kP4YF07ytVN1OuNcNcAggiJTkeHuddFuFIerGyPyHVp98jCyKB6vx+k28=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:13 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: https://www.mediafire.com
cache-control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
expires: 0
pragma: no-cache
strict-transport-security: max-age=0
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow
set-cookie: ad_count=1; expires=Fri, 02-Jun-2023 04:25:13 GMT; Max-Age=1800; path=/; domain=.mediafire.com; HttpOnly
conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22linux%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22loom6d32xvg47c1%22%2C%22mf_term%22%3A%22e5f31ec85d8d0e2678ebb69f666e5677%22%7D; expires=Sun, 02-Jul-2023 03:55:13 GMT; Max-Age=2592000; path=/; domain=.mediafire.com
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0cc26e4f690b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static.mediafire.com/images/backgrounds/footer/social/footerIcons.png
583 B URL static.mediafire.com/images/backgrounds/footer/social/footerIcons.png
IP
File type PNG image data, 112 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash e0abc4fea89d2c5153b73cd02ac5ba13
00465ef774805c82fb5b8a40b743f7b1a1d1a7d6
f917a9105c311331b1d40f4d2bdbf11233c1c465616c1a9c46232f451463b061
GET /images/backgrounds/footer/social/footerIcons.png HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=L5NazIBi2ltv2xDBgpRbpL_0rR83hl3RM7IH9NoBZa0-1685678107-0-AbL6HlBz+xmWPMQv7y7Gqi3Y+Zqfsa7/rn+rB5742VUqSyrkrkpRoySDddVgm4JLSGGvF2LJZpW/T+8V47hIfJsiozX+5/kP4YF07ytVN1OuNcNcAggiJTkeHuddFuFIerGyPyHVp98jCyKB6vx+k28=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22linux%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22loom6d32xvg47c1%22%2C%22mf_term%22%3A%22e5f31ec85d8d0e2678ebb69f666e5677%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:13 GMT
content-type: image/png
content-length: 583
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: "62deda56-247"
expires: Sat, 01 Jul 2023 23:11:19 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 13940
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0cc27178940b31-OSL
X-Firefox-Spdy: h2
static.mediafire.com/images/icons/svg_dark/icons_sprite.svg
9.2 kB URL static.mediafire.com/images/icons/svg_dark/icons_sprite.svg
IP
File type gzip compressed data, from Unix\012- data
Hash 37789a7e0a0d3d50483e87acae262e0d
b81ea7216175c34f5c69b8ca39a4471f04bbc9ee
46e493238f7d393a6e37ebb2a5b931667b131c3c67bbe517d78549568afa81b8
GET /images/icons/svg_dark/icons_sprite.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.mediafire.com/css/mfv4_121908.php?ver=ssl&date=2023-06-01
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=4BhfwpTzTJGWH1tXJOs8eDRsVCK7gUQb8BHw37bvblw-1685678104-0-AdH+WIiDkXSWlUAabCFbg6nbQo1rUkJznCtcL+hwRna2SQeVHjoo+NH9CVPkBV0F4p892AGcGJBtepRxaTr++FU=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:05 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: W/"62deda56-90ab"
access-control-allow-origin: *
cf-cache-status: HIT
age: 879
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0cc23d2f040b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.mediafire.com/blank.html
54 kB URL www.mediafire.com/blank.html
IP
File type gzip compressed data, from Unix\012- data
Hash 72cf1229b411dc84c23a23803b57f609
48394ccf6b504267d73b3c39ac6f72ac27c9d007
d724ad839b18d60eefed5061246ed7808ea9d115c0e58e8881544dd477ec41be
GET /blank.html HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/download_repair.php?flag=4&dkey=7bi1g6vs6njg&qkey=loom6d32xvg47c1&ip=91%2E90%2E42%2E154
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=4BhfwpTzTJGWH1tXJOs8eDRsVCK7gUQb8BHw37bvblw-1685678104-0-AdH+WIiDkXSWlUAabCFbg6nbQo1rUkJznCtcL+hwRna2SQeVHjoo+NH9CVPkBV0F4p892AGcGJBtepRxaTr++FU=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:05 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
content-security-policy: frame-ancestors *
last-modified: Mon, 22 May 2023 17:22:30 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0cc23d0efa0b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
translate.googleapis.com/element/log?hasfast=true&authuser=0&format=json
131 B URL translate.googleapis.com/element/log?hasfast=true&authuser=0&format=json
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?hasfast=true&authuser=0&format=json HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1655
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.mediafire.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Fri, 02 Jun 2023 03:55:13 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+493; expires=Sun, 01-Jun-2025 03:55:13 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 02 Jun 2023 03:55:13 GMT
ocsp.pki.goog/s/gts1d4/SzapBEwIQVg
471 B URL ocsp.pki.goog/s/gts1d4/SzapBEwIQVg
IP
Hash 213f9a28b714d38d9022b27733ee1e64
0109db3c182b988ce226e7405ae8f828f3e1f209
39e76ca853ba31d7d7b14748d8effcba76febb689d5b2739dbc5717010d32c03
POST /s/gts1d4/SzapBEwIQVg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/SzapBEwIQVg
471 B URL ocsp.pki.goog/s/gts1d4/SzapBEwIQVg
IP
Hash 213f9a28b714d38d9022b27733ee1e64
0109db3c182b988ce226e7405ae8f828f3e1f209
39e76ca853ba31d7d7b14748d8effcba76febb689d5b2739dbc5717010d32c03
POST /s/gts1d4/SzapBEwIQVg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:55:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-K68XP6D85D&l=dataLayer&cx=c
75 kB URL www.googletagmanager.com/gtag/js?id=G-K68XP6D85D&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (5858)
Hash a1f4eab670140e96133594717f40dbdc
80f2da6b7b3f2f272dff2933a3594159687c1f09
157a31c0efc3334de4a7bede8f2d3f0e416b2c30db1e3ddc99e1d01275c91379
GET /gtag/js?id=G-K68XP6D85D&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Jun 2023 03:55:13 GMT
expires: Fri, 02 Jun 2023 03:55:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75278
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
api.btloader.com/country
16 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 452880c1a375b8fba8c9499f0930d05f
ffe5484a23512c2a574d837fe2d3267b134e48c8
8b3383aa4c71f1d816bfaf33e3ef2e8ded067698a7798b9f306204d5777b140d
GET /country HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mediafire.com/
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600
content-type: application/json
vary: Origin
date: Fri, 02 Jun 2023 03:55:13 GMT
content-length: 16
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816
64 kB URL static.cloudflareinsights.com/beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816
IP
File type gzip compressed data, from Unix\012- data
Hash ab50c3b563526af523caeae6deeda8ef
23c83e66256c70ef4579e9ff278a54ddd8b7f1e1
a5e1a344ee92e861dbab7304c839650bc6c5970a75cfa932b6fe9cd2831a8563
GET /beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:13 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2023.4.2
last-modified: Mon, 17 Apr 2023 20:41:48 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0cc270df360b41-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
api.btloader.com/pv?tid=fzwwgzWe&w=5115845767331840&o=5678961798414336&cv=2.1.12-7-gb1eec29&r=false&vr=1280x1024&pageURL=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Floom6d32xvg47c1%2F23111.exe&sid=gqWSlPfPV&upapi=true
204 No Content 0 B URL GET HTTP/2 api.btloader.com/pv?tid=fzwwgzWe&w=5115845767331840&o=5678961798414336&cv=2.1.12-7-gb1eec29&r=false&vr=1280x1024&pageURL=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Floom6d32xvg47c1%2F23111.exe&sid=gqWSlPfPV&upapi=true
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subjectapi.btloader.com
Fingerprint3B:CF:85:E9:95:DE:8D:1D:1E:BB:A9:09:EB:2B:04:21:E2:A4:63:57
ValidityFri, 14 Apr 2023 18:12:11 GMT - Thu, 13 Jul 2023 19:05:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pv?tid=fzwwgzWe&w=5115845767331840&o=5678961798414336&cv=2.1.12-7-gb1eec29&r=false&vr=1280x1024&pageURL=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Floom6d32xvg47c1%2F23111.exe&sid=gqWSlPfPV&upapi=true HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
vary: Origin
date: Fri, 02 Jun 2023 03:55:14 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googFooterTranslate
28 kB URL translate.google.com/translate_a/element.js?cb=googFooterTranslate
IP
File type ASCII text, with very long lines (2450)
Hash 5fe9c2eabd5df7418bd690bb38d41bd3
5db8a0b0cc1e65c46683834ed9fb78d64e081964
515123c9aba1cc04cd7027203c0460d6a0ea2ca4d95c5f8d9ed5145b3152c8e3
GET /translate_a/element.js?cb=googFooterTranslate HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:14 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+984; expires=Sun, 01-Jun-2025 03:55:14 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
200 OK 4.2 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type ASCII text, with very long lines (23228), with no line terminators
Hash edf649e1b11a33833272345187bd4eec
73427e2ab282e5f89021e1c7d20f83eaf9830283
553d768412bca504a0c8771705f681dad359370bdcea637298ca5aa486017a06
GET /_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 4205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 21:45:55 GMT
expires: Fri, 31 May 2024 21:45:55 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 12 Mar 2023 00:11:57 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 22159
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/el/AGSKWxUhLVFucS9fzAN3D8F6YAwBZAG-qmYkzkU-cPgZDRYRm3MnqQRhB9jmOBRWKY9n78uMxdj5TdQLUhuHxadgfzc=?pvid=EE4A03B3-5F1F-4D68-B031-A568C31F26F9
0 B URL fundingchoicesmessages.google.com/el/AGSKWxUhLVFucS9fzAN3D8F6YAwBZAG-qmYkzkU-cPgZDRYRm3MnqQRhB9jmOBRWKY9n78uMxdj5TdQLUhuHxadgfzc=?pvid=EE4A03B3-5F1F-4D68-B031-A568C31F26F9
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxUhLVFucS9fzAN3D8F6YAwBZAG-qmYkzkU-cPgZDRYRm3MnqQRhB9jmOBRWKY9n78uMxdj5TdQLUhuHxadgfzc=?pvid=EE4A03B3-5F1F-4D68-B031-A568C31F26F9 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 65
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://www.mediafire.com
access-control-allow-credentials: true
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:14 GMT
content-security-policy: script-src 'nonce-PkOZb1CcteaVk8LaV2AQAQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Z9dw9iEydtA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoJ3YppZh9vnjOb_SBu68tCOE-MXQ/m=el_main
200 OK 76 kB URL GET HTTP/3 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Z9dw9iEydtA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoJ3YppZh9vnjOb_SBu68tCOE-MXQ/m=el_main
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type ASCII text, with very long lines (1573)
Hash e573f520bd8dcdfb40e91a9e0e66e527
7182f9fdf1d72c2f42cbbfda617cb81e34a44044
366f944dab73002110a6add4e66a3eb915695bc4f1244da14080a4bc248880c6
GET /_/translate_http/_/js/k=translate_http.tr.no.Z9dw9iEydtA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoJ3YppZh9vnjOb_SBu68tCOE-MXQ/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 76232
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 20:10:36 GMT
expires: Fri, 31 May 2024 20:10:36 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 31 May 2023 15:11:29 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 27878
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
3.3 kB URL fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6225), with no line terminators
Hash 2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 08:05:11 GMT
expires: Sun, 26 May 2024 08:05:11 GMT
cache-control: public, max-age=31536000
age: 503403
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL GET HTTP/3 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 08:02:55 GMT
expires: Fri, 31 May 2024 08:02:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 71539
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.mediafire.com/blank.html
5.3 kB URL www.mediafire.com/blank.html
IP
File type gzip compressed data, from Unix\012- data
Hash 655c8ebd3f5b1ace454ba3bc81c99abf
7a30702e4fc66ffd160adf3c23d890151a09c28e
9393d5f0b3b64d3acf3ccf583283121453471df1340300a40bbb7841b858af02
GET /blank.html HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/download_repair.php?flag=4&dkey=7bi1g6vs6njg&qkey=loom6d32xvg47c1&ip=91%2E90%2E42%2E154
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=4BhfwpTzTJGWH1tXJOs8eDRsVCK7gUQb8BHw37bvblw-1685678104-0-AdH+WIiDkXSWlUAabCFbg6nbQo1rUkJznCtcL+hwRna2SQeVHjoo+NH9CVPkBV0F4p892AGcGJBtepRxaTr++FU=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:05 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
content-security-policy: frame-ancestors *
last-modified: Mon, 22 May 2023 17:22:30 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0cc23d7f190b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static.mediafire.com/images/backgrounds/download/additional_content/continent-as.svg
108 kB URL static.mediafire.com/images/backgrounds/download/additional_content/continent-as.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (25749)
Size 108 kB (107757 bytes)
Hash 3a47bd84229aa3c29469f472549752f9
f8e82935776091995c1befbe2e4f30f18c5501e7
0ad8109d118d78f05622a43ac77d54dd3d669b41d1d0bbf909831d823151a91e
GET /images/backgrounds/download/additional_content/continent-as.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=L5NazIBi2ltv2xDBgpRbpL_0rR83hl3RM7IH9NoBZa0-1685678107-0-AbL6HlBz+xmWPMQv7y7Gqi3Y+Zqfsa7/rn+rB5742VUqSyrkrkpRoySDddVgm4JLSGGvF2LJZpW/T+8V47hIfJsiozX+5/kP4YF07ytVN1OuNcNcAggiJTkeHuddFuFIerGyPyHVp98jCyKB6vx+k28=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22linux%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22loom6d32xvg47c1%22%2C%22mf_term%22%3A%22e5f31ec85d8d0e2678ebb69f666e5677%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:13 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: W/"62deda56-aae3"
access-control-allow-origin: *
cf-cache-status: HIT
age: 3461
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0cc27269080b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lh3.googleusercontent.com/YxmihnhFt54cZYUpI8Vki3ux02R2TgdxT2JLItC4sk0NMsB8q5xXuZr3KKhXns_325CVgfI3IAWpwJrMtsUf1HdwXaWps_lxmzvqH8R5aBB2P50trKqeLQ=h60
200 OK 12 kB URL GET HTTP/3 lh3.googleusercontent.com/YxmihnhFt54cZYUpI8Vki3ux02R2TgdxT2JLItC4sk0NMsB8q5xXuZr3KKhXns_325CVgfI3IAWpwJrMtsUf1HdwXaWps_lxmzvqH8R5aBB2P50trKqeLQ=h60
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintE9:43:A2:2D:EB:A2:E1:09:B0:36:19:CF:E3:9C:F0:37:52:4F:DB:7A
ValidityMon, 08 May 2023 08:24:36 GMT - Mon, 31 Jul 2023 08:24:35 GMT
File type PNG image data, 366 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash f232511b689198ef4eac18e967da3040
38d0f3381708819be8db2df251be3e391a5b0ecf
cf7137aae8e21d7b4a5d0a322b25dfc27c7a1e9b1a06bb4d5f813ef9e3459df3
GET /YxmihnhFt54cZYUpI8Vki3ux02R2TgdxT2JLItC4sk0NMsB8q5xXuZr3KKhXns_325CVgfI3IAWpwJrMtsUf1HdwXaWps_lxmzvqH8R5aBB2P50trKqeLQ=h60 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
server: fife
content-length: 12249
x-xss-protection: 0
date: Fri, 02 Jun 2023 00:41:37 GMT
expires: Sat, 03 Jun 2023 00:41:37 GMT
cache-control: public, max-age=86400, no-transform
age: 11617
etag: "v1"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.mediafire.com/images/backgrounds/download/additional_content/flag.svg
204 B URL static.mediafire.com/images/backgrounds/download/additional_content/flag.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash 26bb2e534d92fb7ed295b5e055ce0be6
d270e9264f81915ab05681fe69c14ae74c599241
f52a0c7d9fa7ae8e45916c491ae7193f9a1e289f128f05264122c53d8da970db
GET /images/backgrounds/download/additional_content/flag.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=L5NazIBi2ltv2xDBgpRbpL_0rR83hl3RM7IH9NoBZa0-1685678107-0-AbL6HlBz+xmWPMQv7y7Gqi3Y+Zqfsa7/rn+rB5742VUqSyrkrkpRoySDddVgm4JLSGGvF2LJZpW/T+8V47hIfJsiozX+5/kP4YF07ytVN1OuNcNcAggiJTkeHuddFuFIerGyPyHVp98jCyKB6vx+k28=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22linux%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22loom6d32xvg47c1%22%2C%22mf_term%22%3A%22e5f31ec85d8d0e2678ebb69f666e5677%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:13 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: W/"62deda56-ea"
access-control-allow-origin: *
cf-cache-status: HIT
age: 11754
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0cc272690a0b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Archivo|Arimo|Bitter|EB+Garamond|Lato|Libre+Baskerville|Libre+Franklin|Lora|Google+Sans_old:regular,medium|Material+Icons|Google+Symbols|Merriweather|Montserrat|Mukta|Muli|Nunito|Open+Sans:400,600,700|Open+Sans+Condensed:300,400,600,700|Oswald|Playfair+Display|Poppins|Raleway|Roboto|Roboto+Condensed|Roboto+Slab|Slabo+27px|Source+Sans+Pro|Ubuntu|Volkhov&display=swap
200 OK 52 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Archivo|Arimo|Bitter|EB+Garamond|Lato|Libre+Baskerville|Libre+Franklin|Lora|Google+Sans_old:regular,medium|Material+Icons|Google+Symbols|Merriweather|Montserrat|Mukta|Muli|Nunito|Open+Sans:400,600,700|Open+Sans+Condensed:300,400,600,700|Oswald|Playfair+Display|Poppins|Raleway|Roboto|Roboto+Condensed|Roboto+Slab|Slabo+27px|Source+Sans+Pro|Ubuntu|Volkhov&display=swap
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type gzip compressed data, max compression\012- data
Hash bee81623798cd417d9620fb5dd0afe92
d547874adeb4cda8ec84eebed0c2ea0d447b12b1
274155e76b44979a8e1fe51ecae04a8df2912d48046c819eaa48f7f18c519236
GET /css?family=Archivo|Arimo|Bitter|EB+Garamond|Lato|Libre+Baskerville|Libre+Franklin|Lora|Google+Sans_old:regular,medium|Material+Icons|Google+Symbols|Merriweather|Montserrat|Mukta|Muli|Nunito|Open+Sans:400,600,700|Open+Sans+Condensed:300,400,600,700|Oswald|Playfair+Display|Poppins|Raleway|Roboto|Roboto+Condensed|Roboto+Slab|Slabo+27px|Source+Sans+Pro|Ubuntu|Volkhov&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Jun 2023 03:55:14 GMT
date: Fri, 02 Jun 2023 03:55:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
48 kB URL fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 48412, version 1.0\012- data
Hash 31a8297826cdcea344698ff952694a7f
4fa1ee4c471d1c05e9141855eec5ee09b898d594
7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5
GET /s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 11:49:35 GMT
expires: Fri, 31 May 2024 11:49:35 GMT
cache-control: public, max-age=31536000
age: 57939
last-modified: Tue, 02 May 2023 15:08:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
48 kB URL fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 48412, version 1.0\012- data
Hash 31a8297826cdcea344698ff952694a7f
4fa1ee4c471d1c05e9141855eec5ee09b898d594
7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5
GET /s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 11:49:35 GMT
expires: Fri, 31 May 2024 11:49:35 GMT
cache-control: public, max-age=31536000
age: 57939
last-modified: Tue, 02 May 2023 15:08:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
128 kB URL fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 May 2023 00:16:42 GMT
expires: Thu, 30 May 2024 00:16:42 GMT
cache-control: public, max-age=31536000
age: 185912
last-modified: Tue, 07 Mar 2023 19:51:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/el/AGSKWxVpckywAcbiPATEUhk9tGlTgCXqrz5Dilsr6Lp38BUfq4ZManG28yNasB0dQccf457s9P6njq46C29p-ZkbHzAU1u5Dcjr87laz_7DouCNDsHbLIG8SohBlfnwv8N5yqji9JzOy8w==
0 B URL fundingchoicesmessages.google.com/el/AGSKWxVpckywAcbiPATEUhk9tGlTgCXqrz5Dilsr6Lp38BUfq4ZManG28yNasB0dQccf457s9P6njq46C29p-ZkbHzAU1u5Dcjr87laz_7DouCNDsHbLIG8SohBlfnwv8N5yqji9JzOy8w==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxVpckywAcbiPATEUhk9tGlTgCXqrz5Dilsr6Lp38BUfq4ZManG28yNasB0dQccf457s9P6njq46C29p-ZkbHzAU1u5Dcjr87laz_7DouCNDsHbLIG8SohBlfnwv8N5yqji9JzOy8w== HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 92
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://www.mediafire.com
access-control-allow-credentials: true
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:14 GMT
content-security-policy: script-src 'nonce-DUo1EpuqiNWU-B0WPYjJGw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.mediafire.com/cdn-cgi/rum?
0 B URL www.mediafire.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 14679
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=L5NazIBi2ltv2xDBgpRbpL_0rR83hl3RM7IH9NoBZa0-1685678107-0-AbL6HlBz+xmWPMQv7y7Gqi3Y+Zqfsa7/rn+rB5742VUqSyrkrkpRoySDddVgm4JLSGGvF2LJZpW/T+8V47hIfJsiozX+5/kP4YF07ytVN1OuNcNcAggiJTkeHuddFuFIerGyPyHVp98jCyKB6vx+k28=; _ga_K68XP6D85D=GS1.1.1685678105.1.1.1685678113.52.0.0; _ga=GA1.1.913812966.1685678106; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22linux%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22loom6d32xvg47c1%22%2C%22mf_term%22%3A%22e5f31ec85d8d0e2678ebb69f666e5677%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 02 Jun 2023 03:55:14 GMT
access-control-allow-origin: https://www.mediafire.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7d0cc2786b500b31-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
1.4 kB URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP
Hash a3eefe14b1b4698460d992bd1673a26b
a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4
87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 02 Jun 2023 03:55:14 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=UVEElqITpvjAPsj0rSaF9KpA65o_Jl4CSILzPJm83QXjQaQGBaBTenwu1zMi9LiLra1D_drsl2i9h_f_qK64cVPDt4BtYcs6SqH5YoZMccqRULKEoEDoQ2Sbu-MbjnxyaCrCpBvuLAEvcWAoNPg_74ULrpIvNNlASf-J2h8Ud_Q; expires=Sat, 02-Dec-2023 03:55:14 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+334; expires=Sun, 01-Jun-2025 03:55:14 GMT; path=/; domain=.googleapis.com; Secure
expires: Fri, 02 Jun 2023 03:55:14 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20230531
0 B URL translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20230531
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gen204?sl=en&nca=te_ap&client=te&logld=vTE_20230531 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: image/gif; charset=us-ascii
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:14 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: script-src 'nonce-03kfemK4RbSdpC2MaaE9OQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: __Secure-ENID=12.SE=JfCHPcw0COXYxMTCMdDkw9_3l2JCLMa0eroescD4G4Eb6-8mmmp0QcP5Fp_ORm92Xj6-ew3V7aSIKZ-aKJONsZH7MATL4ErDZ3M4f6VQImtlDKvRFRG2sMbdyFu6ETjaxqB-OG1Xft_QHD1Vjfr3olNSpuHtXIS7_KQ0ToYOGm8; expires=Mon, 01-Jul-2024 20:13:32 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.mediafire.com/images/flags_svg/irq.svg
5.9 kB URL static.mediafire.com/images/flags_svg/irq.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (23234)
Hash 2d1d3e74be9283e445fab38ddb373bdb
34289415db0d71e6ad045e7f4ccda3a058efbc9f
2ffba18db239c3f79d85c19bd12061b7d53c4d777bcb0a4641ffc53e7eec8519
GET /images/flags_svg/irq.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=L5NazIBi2ltv2xDBgpRbpL_0rR83hl3RM7IH9NoBZa0-1685678107-0-AbL6HlBz+xmWPMQv7y7Gqi3Y+Zqfsa7/rn+rB5742VUqSyrkrkpRoySDddVgm4JLSGGvF2LJZpW/T+8V47hIfJsiozX+5/kP4YF07ytVN1OuNcNcAggiJTkeHuddFuFIerGyPyHVp98jCyKB6vx+k28=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22linux%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22loom6d32xvg47c1%22%2C%22mf_term%22%3A%22e5f31ec85d8d0e2678ebb69f666e5677%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:13 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: W/"62deda56-eb2"
access-control-allow-origin: *
cf-cache-status: HIT
age: 491
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0cc27269090b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
1.6 kB URL www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
IP
File type PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a931d597decd2553aac6634b766cf2
6ec84fb4a2745b4b71520241be77db1fd1013830
f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e
GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1597
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 07:51:33 GMT
expires: Sun, 26 May 2024 07:51:33 GMT
cache-control: public, max-age=31536000
age: 504221
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.googleapis.com/translate_static/img/loading.gif
702 B URL translate.googleapis.com/translate_static/img/loading.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type GIF image data, version 89a, 16 x 16\012- data
Hash eefaa072b284a305c12c06608333abc2
58272721ccc1efda26eaa22354022c7c793edbb6
fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21
GET /translate_static/img/loading.gif HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 702
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Jun 2023 01:19:18 GMT
expires: Sat, 01 Jun 2024 01:19:18 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 03 Oct 2019 10:15:00 GMT
content-type: image/gif
age: 9356
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/images/cleardot.gif
43 B URL www.google.com/images/cleardot.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /images/cleardot.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-type: image/gif
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 43
date: Fri, 02 Jun 2023 03:55:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
200 OK 4.2 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type ASCII text, with very long lines (23228), with no line terminators
Hash edf649e1b11a33833272345187bd4eec
73427e2ab282e5f89021e1c7d20f83eaf9830283
553d768412bca504a0c8771705f681dad359370bdcea637298ca5aa486017a06
GET /_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 4205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 21:45:55 GMT
expires: Fri, 31 May 2024 21:45:55 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 12 Mar 2023 00:11:57 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 22159
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.mediafire.com/cdn-cgi/rum?
0 B URL www.mediafire.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 684
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=L5NazIBi2ltv2xDBgpRbpL_0rR83hl3RM7IH9NoBZa0-1685678107-0-AbL6HlBz+xmWPMQv7y7Gqi3Y+Zqfsa7/rn+rB5742VUqSyrkrkpRoySDddVgm4JLSGGvF2LJZpW/T+8V47hIfJsiozX+5/kP4YF07ytVN1OuNcNcAggiJTkeHuddFuFIerGyPyHVp98jCyKB6vx+k28=; _ga_K68XP6D85D=GS1.1.1685678105.1.1.1685678113.52.0.0; _ga=GA1.1.913812966.1685678106; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22linux%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22loom6d32xvg47c1%22%2C%22mf_term%22%3A%22e5f31ec85d8d0e2678ebb69f666e5677%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Fri, 02 Jun 2023 03:55:19 GMT
access-control-allow-origin: https://www.mediafire.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7d0cc2978ed10b31-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
translate.googleapis.com/element/log?hasfast=true&authuser=0&format=json
131 B URL translate.googleapis.com/element/log?hasfast=true&authuser=0&format=json
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?hasfast=true&authuser=0&format=json HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 915
Origin: https://www.mediafire.com
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.mediafire.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Fri, 02 Jun 2023 03:55:19 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+285; expires=Sun, 01-Jun-2025 03:55:19 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 02 Jun 2023 03:55:19 GMT
fundingchoicesmessages.google.com/f/AGSKWxXrjtEH6OsIEa1eMxJNrJTV18lP5XKGKMJi5rI13IlsGpcs5yT-0hk0wJuzpkaKFvH14rtURv0da3wnJCfhkp8=
200 OK 137 kB URL GET HTTP/3 fundingchoicesmessages.google.com/f/AGSKWxXrjtEH6OsIEa1eMxJNrJTV18lP5XKGKMJi5rI13IlsGpcs5yT-0hk0wJuzpkaKFvH14rtURv0da3wnJCfhkp8=
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (1964)
Size 137 kB (136607 bytes)
Hash d15babb1a9668061674c98ce0aa1a536
943ab9c8c6a0ecba1ed22679dc778907ad84130f
f4d6fb1c9beb417adfc4f40e8a12e55fdccdff0ad1a750d3331a8f259752347a
GET /f/AGSKWxXrjtEH6OsIEa1eMxJNrJTV18lP5XKGKMJi5rI13IlsGpcs5yT-0hk0wJuzpkaKFvH14rtURv0da3wnJCfhkp8= HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
timing-allow-origin: *
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Jun 2023 03:55:14 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport, script-src 'nonce-FQC7ZZYWBFOqlB5jQl9auQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist
cross-origin-opener-policy: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.mediafire.com/images/icons/svg_dark/check_circle_green.svg
200 OK 444 B URL GET HTTP/2 static.mediafire.com/images/icons/svg_dark/check_circle_green.svg
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerSectigo Limited
Subject*.mediafire.com
Fingerprint21:E7:A1:51:5C:8B:3A:28:A0:31:00:00:E5:21:7D:E9:25:A0:30:53
ValidityTue, 30 Aug 2022 00:00:00 GMT - Sat, 30 Sep 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (468), with no line terminators
Hash 2a37354dd0164f536ea3ba32da2b9ad9
c2eef6193cb66e8dae4be9db8444a8f4e918d5db
123a827694b569700831a715fc0d06002f1eeee93b40c116033e65b0590ae17f
GET /images/icons/svg_dark/check_circle_green.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Cookie: ukey=qhofw06xsw25qo6bgil944d7c7i0nhqg; dr_loom6d32xvg47c1=1; __cf_bm=L5NazIBi2ltv2xDBgpRbpL_0rR83hl3RM7IH9NoBZa0-1685678107-0-AbL6HlBz+xmWPMQv7y7Gqi3Y+Zqfsa7/rn+rB5742VUqSyrkrkpRoySDddVgm4JLSGGvF2LJZpW/T+8V47hIfJsiozX+5/kP4YF07ytVN1OuNcNcAggiJTkeHuddFuFIerGyPyHVp98jCyKB6vx+k28=; _ga_K68XP6D85D=GS1.1.1685678105.1.0.1685678105.60.0.0; _ga=GA1.1.913812966.1685678106; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22linux%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22loom6d32xvg47c1%22%2C%22mf_term%22%3A%22e5f31ec85d8d0e2678ebb69f666e5677%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:55:13 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Jul 2022 18:00:54 GMT
etag: W/"62deda56-1bc"
access-control-allow-origin: *
cf-cache-status: HIT
age: 13532
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0cc27128830b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
otnolatrnup.com/Tag.engine?time=0&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=77466&ver=async&referrerUrl=https%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D7bi1g6vs6njg%26qkey%3Dloom6d32xvg47c1%26ip%3D91%252E90%252E42%252E154&fingerPrint=123&abr=false&stdTime=0&fpe=1&bw=1280&bh=1024&res=1280x1024&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Floom6d32xvg47c1%2F23111.exe&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone
0 B URL GET otnolatrnup.com/Tag.engine?time=0&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=77466&ver=async&referrerUrl=https%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D7bi1g6vs6njg%26qkey%3Dloom6d32xvg47c1%26ip%3D91%252E90%252E42%252E154&fingerPrint=123&abr=false&stdTime=0&fpe=1&bw=1280&bh=1024&res=1280x1024&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Floom6d32xvg47c1%2F23111.exe&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone
IP
Requested by https://www.mediafire.com/file/loom6d32xvg47c1/23111.exe
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint84:54:CC:DA:89:30:52:99:19:9D:4A:7B:76:AB:4D:06:B5:AD:1D:49
ValiditySat, 06 May 2023 00:00:00 GMT - Sun, 05 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Tag.engine?time=0&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=77466&ver=async&referrerUrl=https%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D7bi1g6vs6njg%26qkey%3Dloom6d32xvg47c1%26ip%3D91%252E90%252E42%252E154&fingerPrint=123&abr=false&stdTime=0&fpe=1&bw=1280&bh=1024&res=1280x1024&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Floom6d32xvg47c1%2F23111.exe&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone HTTP/1.1
Host: otnolatrnup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 03:55:13 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
__INF_CC=; expires=Tue, 23-May-2023 03:55:13 GMT; path=/
INF_DFL8=false; path=/; SameSite=None; secure
IUID=60a3d252-d1e5-4b65-832c-f353af9dbcfb; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure
ISSH=6BA9C7; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
CHN=#[]; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Fri, 02-Jun-2023 07:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"101":[{"SId":"6BA9C7","D":"23/6/1T20:55:13"}]}; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[101]; expires=Thu, 02-Jun-2033 03:55:13 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0cc2733edeb4fa-OSL
alt-svc: h3=":443"; ma=86400
205.196.123.172
104.16.53.48
0.0.0.0