ocsp.sectigo.com/
471
IP
Hash
947d33200febe263b75c67d50890ab8b
1edccc0cbbd64f0d6457b0c832563e8ec220fa4a
8e41e228b6762acc899b676c536d58df4a7e6ecc78d996f8bc7674985f2c0cd7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 06 May 2023 17:46:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 05 May 2023 11:25:45 GMT
Expires: Fri, 12 May 2023 11:25:44 GMT
Etag: "1edccc0cbbd64f0d6457b0c832563e8ec220fa4a"
Cache-Control: max-age=494946,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7c330b2d2a840b06-OSL
megaup.net/themes/flow/images/main_logo_inverted.png
200 OK
7137
URL
GET
HTTP/2
megaup.net/themes/flow/images/main_logo_inverted.png
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash
5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/flow/images/main_logo_inverted.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: image/png
content-length: 7137
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/images/loading_small.gif
200 OK
184355
URL
GET
HTTP/2
megaup.net/themes/flow/images/loading_small.gif
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
GIF image data, version 89a, 64 x 64\012- data
Hash
b0dd5b3af9c4c0644d7bddee83716209
30002468d0266b893b3559b8d0d260c6cbf0ad7c
2418224bb4d12c122ef3c54d2ee9edb5f6f28d539e91a166b0215553f8c7609d
GET /themes/flow/images/loading_small.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: image/gif
content-length: 184355
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-2d023"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
200 OK
4506
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash
8729f4efe3c25cdbc563bb380fcf0e19
186e940c016079037781acd6dba0fd05f25c093c
44f45e6183e613651a7595ca2b4eb624a9e8917af81e96c0241101eb517ecfff
GET /themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-8d4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/styles/file-upload.css
200 OK
2539
URL
GET
HTTP/2
megaup.net/themes/flow/styles/file-upload.css
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
assembler source, ASCII text
Hash
a7421b1db2ea3a1aef7380094f7f64d6
190b763902673309c2a80d7692b148415801df88
ca31cb62725f72b4fdd1840dda8f13711249856313842d83cf6bd9f467b2ed79
GET /themes/flow/styles/file-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-21ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-108868042-1
200 OK
45863
URL
GET
HTTP/2
www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintCA:2C:8E:2F:14:74:84:57:8C:39:86:59:92:AC:A1:7C:C8:FA:99:CA
ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT
Magic
ASCII text, with very long lines (2271)
Hash
45855bbf0ee23500930d6a0c138007f1
f74ad1c5c9e6b66e525b138b899f5c329dafffdf
6bce167c5cf0bacdd05bac2b0d90f12d939f01a67b6b18cb9ccb0bf9ea32da5b
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 06 May 2023 17:46:37 GMT
expires: Sat, 06 May 2023 17:46:37 GMT
cache-control: private, max-age=900
last-modified: Sat, 06 May 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45863
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
altowriestwispy.com/tysaSHG1FMaM/18410
200 OK
25
URL
GET
HTTP/1.1
altowriestwispy.com/tysaSHG1FMaM/18410
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerLet's Encrypt
Subjectaltowriestwispy.com
FingerprintC3:95:E3:67:82:EA:18:9C:5A:2C:E7:4F:33:5E:9E:3A:E2:EE:4C:D8
ValiditySat, 25 Mar 2023 23:05:39 GMT - Fri, 23 Jun 2023 23:05:38 GMT
Magic
ASCII text, with no line terminators
Hash
d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tysaSHG1FMaM/18410 HTTP/1.1
Host: altowriestwispy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 06 May 2023 17:46:37 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Sun, 07-May-2023 17:46:37 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Sun, 07-May-2023 17:46:37 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
200 OK
188764
URL
GET
HTTP/2
dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
Magic
Unicode text, UTF-8 text, with very long lines (15948)
Hash
119026da57f9f9758f8867724564e9a8
65c9bda0f33768b5b3a2f2570a40f6b22aec75ca
378d477dd9f591db41a92d6523c771503be95355961e88069f7603bc41d6109a
GET /?kzmmd=761186 HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 188764
date: Sat, 06 May 2023 17:46:37 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NvNbKeH8fL1PVXXyl3VqhUyL7oubMxC2qsOS5bXmlXAe_vs6TVqqIQ==
X-Firefox-Spdy: h2
keydawnawe.com/gwZ1U5hjA8ii/32575
200 OK
26
URL
GET
HTTP/1.1
keydawnawe.com/gwZ1U5hjA8ii/32575
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerLet's Encrypt
Subjectkeydawnawe.com
FingerprintF7:57:30:58:C1:35:AA:9E:BA:6E:40:60:AF:90:29:A9:64:83:53:EA
ValidityThu, 13 Apr 2023 23:00:56 GMT - Wed, 12 Jul 2023 23:00:55 GMT
Magic
ASCII text, with no line terminators
Hash
4e5d65669f8dcd928dad06adf883f025
d771713d758c3348dd7e5b38bb40c7935399ae46
0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
GET /gwZ1U5hjA8ii/32575 HTTP/1.1
Host: keydawnawe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 06 May 2023 17:46:37 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Sun, 07-May-2023 17:46:37 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Sun, 07-May-2023 17:46:37 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
megaup.net/themes/flow/js/jquery-ui.js
200 OK
109271
URL
GET
HTTP/2
megaup.net/themes/flow/js/jquery-ui.js
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (840)
Hash
d2f76a3cd631883051ef72796349e7db
7fcac6a3bfd4773dff253e038d58a909d05c0ca5
d47d9a19bcf334ffc79f8805518a26aa509165256af988f4d0dc1c48d3ce1d40
GET /themes/flow/js/jquery-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6a684"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
200 OK
85434
URL
User Request
GET
HTTP/2
megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
IP
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58692), with CRLF, LF line terminators
Hash
89e4c34fbaf8975ce0428f22651d0d93
6a4565ef2214ff7cdced9fda06f624766e74a60a
0136def1759d608d2803d0667d4bb3f0ecfeb8ecac4e046bc5f210c0b694f495
Analyzer
Verdict
Alert
urlquery
suspicious
Suspicious - Suspicious Javascript code
urlquery
suspicious
Suspicious - Suspicious Javascript code
GET /2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3; expires=Sun, 07-May-2023 17:46:37 GMT; Max-Age=86400; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
200 OK
31344
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
Web Open Font Format, TrueType, length 31344, version 1.1\012- data
Hash
21f79e4c0fbe54a555170aa70bb4c8b7
9d4aaf2016cd21f16bc45089a48de84dba951fa7
2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42
GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: font/woff
content-length: 31344
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7a70"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
200 OK
39936
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (28941)
Hash
69b7eecf3244cb5762d3379572ca60de
891f2d816e71b7d2ecbfebe90c1f7cbf2f60a7b4
221b98e7fb3628b7059cc07df7e61806e6403a0a019204229d8c2e29dff2a159
GET /themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
200 OK
20972
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
Web Open Font Format, TrueType, length 20972, version 1.0\012- data
Hash
cad75e2dacc6794c4e6b14727d4a989d
694d04c8f643df4100c23efc1463ac9f4e732f60
ebccc09339b7730324221aff3d11d215de9997b47bf708ca18a3be2d8e8b9887
GET /themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: font/woff
content-length: 20972
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-51ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
workhovdiminatedi.info/eE9RUWdXcDIiWi5/Fxw1PXonND8UNTcWMUsqCQdfIiETZwMWf3clDhxyaWNSQX5gdxcRK2xiVV48JTATDTxsYEERITc+Wl45bGFJQWFgf1JeOmxgQQw/MDZaSWkhJRMUcmBnX0t8aGRWQXdjZ1Y
204 No Content
0
URL
GET
HTTP/2
workhovdiminatedi.info/eE9RUWdXcDIiWi5/Fxw1PXonND8UNTcWMUsqCQdfIiETZwMWf3clDhxyaWNSQX5gdxcRK2xiVV48JTATDTxsYEERITc+Wl45bGFJQWFgf1JeOmxgQQw/MDZaSWkhJRMUcmBnX0t8aGRWQXdjZ1Y
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eE9RUWdXcDIiWi5/Fxw1PXonND8UNTcWMUsqCQdfIiETZwMWf3clDhxyaWNSQX5gdxcRK2xiVV48JTATDTxsYEERITc+Wl45bGFJQWFgf1JeOmxgQQw/MDZaSWkhJRMUcmBnX0t8aGRWQXdjZ1Y HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 06 May 2023 17:46:38 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UzG0JUnSxJGgHe%2BR8Lt2ViHg36d784xxUo4gozcpzKggImBbhlxAqDBc8n2Ia%2F25%2B3BiiwwzZHJIofR4AFb4pHj1YVinkqeOp02HlMLpIJurc9FVYVFaWeSr1BGcMg5uZKw%2BxJWfK6s5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c330b334d88b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
workhovdiminatedi.info/M0ZrZUYceQgWe1YtHykTSS4oBnUGLSgOLgogBiwNYHUbXB9iNU0RL1d7U1dzCndaQzZaIlZWdBU1HwQyRjVWV3YDcU0MKFUpVldgRXtbS38dd0VQYEZ7WkMyQycMWHcVNh8RKg53XV11AH9eVH8LdF1Q
204 No Content
0
URL
GET
HTTP/2
workhovdiminatedi.info/M0ZrZUYceQgWe1YtHykTSS4oBnUGLSgOLgogBiwNYHUbXB9iNU0RL1d7U1dzCndaQzZaIlZWdBU1HwQyRjVWV3YDcU0MKFUpVldgRXtbS38dd0VQYEZ7WkMyQycMWHcVNh8RKg53XV11AH9eVH8LdF1Q
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /M0ZrZUYceQgWe1YtHykTSS4oBnUGLSgOLgogBiwNYHUbXB9iNU0RL1d7U1dzCndaQzZaIlZWdBU1HwQyRjVWV3YDcU0MKFUpVldgRXtbS38dd0VQYEZ7WkMyQycMWHcVNh8RKg53XV11AH9eVH8LdF1Q HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 06 May 2023 17:46:38 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C52MnQyc5aNWNhxb%2BLT8RzzMB%2Bat60ePAscbPT1AQK%2BpMAOut0PeLaIqkxE8HLyJbrpBmKrMqG%2BH2X0jHj5S5gRj8z3VnvmPX2mytSDfmImm75HeAPM%2FwfBgV2YkkxuLEFHYA1yni659"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c330b334d8bb529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.tmpl.min.js
200 OK
4679
URL
GET
HTTP/2
megaup.net/themes/flow/js/jquery.tmpl.min.js
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (971), with no line terminators
Hash
f8e88523e9eaf08c29fc69f9a928b878
98915eebd907ced20e1e8f431ce0cca1fa0cea89
1f7a2de0685f4e7b6a0d63d18149abba9636df6efe356a9d8b9414cab863fff4
GET /themes/flow/js/jquery.tmpl.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3cb"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
workhovdiminatedi.info/dGZIcFhbWSsDZTszLB4VPA0JFB5AIxsXYQwwGTIVNy59JBlEUm4EMRBbcEduR1dwVigdAnVCYVIVPBEsARV1QX4dCC4fZVIQdUF2REh+QHZHQD1NaVISOBE/SVduACwACnVBbkxVe0ltRV9wQm9C
204 No Content
0
URL
GET
HTTP/2
workhovdiminatedi.info/dGZIcFhbWSsDZTszLB4VPA0JFB5AIxsXYQwwGTIVNy59JBlEUm4EMRBbcEduR1dwVigdAnVCYVIVPBEsARV1QX4dCC4fZVIQdUF2REh+QHZHQD1NaVISOBE/SVduACwACnVBbkxVe0ltRV9wQm9C
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dGZIcFhbWSsDZTszLB4VPA0JFB5AIxsXYQwwGTIVNy59JBlEUm4EMRBbcEduR1dwVigdAnVCYVIVPBEsARV1QX4dCC4fZVIQdUF2REh+QHZHQD1NaVISOBE/SVduACwACnVBbkxVe0ltRV9wQm9C HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 06 May 2023 17:46:38 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rqpl127ACjjiXWFhGVLY5XNWw6UMevl90tziTeIgV5PJEOuPiCsTm7KIpNmzHFy%2BUUyotsYDgDC4ku1V38R2sms5e1iJUZoaY%2FjenAfdzrPfTknOcxzhKSjgyE8tnU5O1uxa9V7H3qRU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c330b335d96b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/imageads/013.png
200 OK
175672
URL
GET
HTTP/2
megaup.net/imageads/013.png
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash
35f4f32d6004e4ff3bb22242b7471283
f1dc5d9d30cbdc5df9ce624f18db41fc9eb9a92e
c276d9de607c6105a4135f772b1a71f00699b4406a5b2ceca33c374ab9840395
GET /imageads/013.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:38 GMT
content-type: image/png
content-length: 175672
last-modified: Sat, 15 Apr 2023 07:22:56 GMT
vary: Accept-Encoding
etag: "643a50d0-2ae38"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
workhovdiminatedi.info/RURCeXRqeyEKSSYTFCouAH0GLBkHFSYSEBAlcztGFygUFSErK2QNHSF5e01NfXJ2XwQsIH9ITGM3NhgAMDd/SFIsKiQWSWMyf0hadWpwV0djMX9IUjE0Ix5JdGIyDQApeXNPTHZ3e0xFfHxwQEQ
204 No Content
0
URL
GET
HTTP/2
workhovdiminatedi.info/RURCeXRqeyEKSSYTFCouAH0GLBkHFSYSEBAlcztGFygUFSErK2QNHSF5e01NfXJ2XwQsIH9ITGM3NhgAMDd/SFIsKiQWSWMyf0hadWpwV0djMX9IUjE0Ix5JdGIyDQApeXNPTHZ3e0xFfHxwQEQ
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /RURCeXRqeyEKSSYTFCouAH0GLBkHFSYSEBAlcztGFygUFSErK2QNHSF5e01NfXJ2XwQsIH9ITGM3NhgAMDd/SFIsKiQWSWMyf0hadWpwV0djMX9IUjE0Ix5JdGIyDQApeXNPTHZ3e0xFfHxwQEQ HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 06 May 2023 17:46:38 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8HmkWpEqSxByPGN4LNbvyFwmv3EVlHnZcVcMuwi4dJ4udTSw0tioBLDdUlz%2BiEMix6VI3N6Iij3AlPW2xUHyCIWNqGrL5soMZF5F7U4cY2isWpIp7N1YI9ZBw4%2FGhJHtdjq1J9CGxOvr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c330b336da9b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/MldLUGxTNSg9U1NqKXYZQDt2dV50cnkWCF86MTsKVm95Jw1LOWUzAF0iLzYeXTk/fgJXI25iKgEyIAoBUxIkCidjMAQ0PQYhCjw6CwMDNDRnHzMzIHACAxotQmAKJ1h2GAMRFn0EBiUqYBEEAAtzPhxhBEERIjMldmQvMyVFMAc0XEYwCScbXQV4Gi16EyQGIGQkAR8tcyEOOAsXZQkWKHsYHzpUUDI8IyR/FQYhL1U7PQMtcAMZPhxUMw0KLX88P2M9AyQCCF9gAAkTIWcaM2UiVxIkdV5wDydkOmYfARQ7RT8tNCprNhsWVQMdejxaY2UjBz1lbgI0Cx8SBRs+dycaYQN/BAMKNGUfOxwIXjMFNSldMA8oA0QfCDsJZg8saAgDMxEKKUIwDmE6BXEhIwNcJ3Y1CnsVfQU9WwMYJw
200 OK
1174
URL
GET
HTTP/2
kultingecauyuksehinkitw.info/MldLUGxTNSg9U1NqKXYZQDt2dV50cnkWCF86MTsKVm95Jw1LOWUzAF0iLzYeXTk/fgJXI25iKgEyIAoBUxIkCidjMAQ0PQYhCjw6CwMDNDRnHzMzIHACAxotQmAKJ1h2GAMRFn0EBiUqYBEEAAtzPhxhBEERIjMldmQvMyVFMAc0XEYwCScbXQV4Gi16EyQGIGQkAR8tcyEOOAsXZQkWKHsYHzpUUDI8IyR/FQYhL1U7PQMtcAMZPhxUMw0KLX88P2M9AyQCCF9gAAkTIWcaM2UiVxIkdV5wDydkOmYfARQ7RT8tNCprNhsWVQMdejxaY2UjBz1lbgI0Cx8SBRs+dycaYQN/BAMKNGUfOxwIXjMFNSldMA8oA0QfCDsJZg8saAgDMxEKKUIwDmE6BXEhIwNcJ3Y1CnsVfQU9WwMYJw
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3017), with no line terminators
Hash
f0546debdb6593c08d882ad694f865d0
3b95b38f210cbfcd6196fc38076e4873efca3f4a
2e969d1c70710cd589e89536bf8fcab8fce2d47d6d1a7838c14c762b0318dc79
GET /MldLUGxTNSg9U1NqKXYZQDt2dV50cnkWCF86MTsKVm95Jw1LOWUzAF0iLzYeXTk/fgJXI25iKgEyIAoBUxIkCidjMAQ0PQYhCjw6CwMDNDRnHzMzIHACAxotQmAKJ1h2GAMRFn0EBiUqYBEEAAtzPhxhBEERIjMldmQvMyVFMAc0XEYwCScbXQV4Gi16EyQGIGQkAR8tcyEOOAsXZQkWKHsYHzpUUDI8IyR/FQYhL1U7PQMtcAMZPhxUMw0KLX88P2M9AyQCCF9gAAkTIWcaM2UiVxIkdV5wDydkOmYfARQ7RT8tNCprNhsWVQMdejxaY2UjBz1lbgI0Cx8SBRs+dycaYQN/BAMKNGUfOxwIXjMFNSldMA8oA0QfCDsJZg8saAgDMxEKKUIwDmE6BXEhIwNcJ3Y1CnsVfQU9WwMYJw HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1174
date: Sat, 06 May 2023 17:46:38 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 163a559a90b919cdbd95acf4deecc98a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: iMXcur4NsE6dZDShx9HT95BG1l0esJetwPxIKggqC8Swo-1VVexO2w==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/MGsyaHJRCVEFTVFWUE4HQgcPTUB2TgAuFl0GSAMUVFMAHxNJBRwLHl8eVg4AXwVGRhxVHxdaNAIIXBhGZltnOjRiMkoNFWk/ei8CCTp3UTBqBWA9N3EYBiMFeiNxKhlCKkg9RXEvazk8SS5RCwpcCHYrQlg/AhgXfxJjCzplPUohMEcxYD8oWi5KXBNRBXQ9NlcMBiQZCDt0Aj9XLXAlJX0CdD02SAdDIzAAKnc8AUAuA1E5dTNwCyFcWl4MJF8oYT8oVzpmABZqM2cNN0gyWzgkVCJhK0sJOXE+PWlZcCo9dlpeDCNxJmo/I3U6AhgwVTNkCioARkIGO1gIaC0IWAxjLAp7MQE6MWMAXgYWdg97OzZ1GHMqSlUkdlkqYy8HBRZ1JWc7OnUcZlgBFgFBBxxAVkImHEEkcT8BUiZrI0Rb
200 OK
1178
URL
GET
HTTP/2
kultingecauyuksehinkitw.info/MGsyaHJRCVEFTVFWUE4HQgcPTUB2TgAuFl0GSAMUVFMAHxNJBRwLHl8eVg4AXwVGRhxVHxdaNAIIXBhGZltnOjRiMkoNFWk/ei8CCTp3UTBqBWA9N3EYBiMFeiNxKhlCKkg9RXEvazk8SS5RCwpcCHYrQlg/AhgXfxJjCzplPUohMEcxYD8oWi5KXBNRBXQ9NlcMBiQZCDt0Aj9XLXAlJX0CdD02SAdDIzAAKnc8AUAuA1E5dTNwCyFcWl4MJF8oYT8oVzpmABZqM2cNN0gyWzgkVCJhK0sJOXE+PWlZcCo9dlpeDCNxJmo/I3U6AhgwVTNkCioARkIGO1gIaC0IWAxjLAp7MQE6MWMAXgYWdg97OzZ1GHMqSlUkdlkqYy8HBRZ1JWc7OnUcZlgBFgFBBxxAVkImHEEkcT8BUiZrI0Rb
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3023), with no line terminators
Hash
ce604c80e97633893b3ad4b51cf352b9
e0bab8afbdd33137479d9d44f3ab027c50038057
adc376f71be4bf2325ee79b0378e04f19c7a7f87f505d3dbc18a5d6b1989c3f5
GET /MGsyaHJRCVEFTVFWUE4HQgcPTUB2TgAuFl0GSAMUVFMAHxNJBRwLHl8eVg4AXwVGRhxVHxdaNAIIXBhGZltnOjRiMkoNFWk/ei8CCTp3UTBqBWA9N3EYBiMFeiNxKhlCKkg9RXEvazk8SS5RCwpcCHYrQlg/AhgXfxJjCzplPUohMEcxYD8oWi5KXBNRBXQ9NlcMBiQZCDt0Aj9XLXAlJX0CdD02SAdDIzAAKnc8AUAuA1E5dTNwCyFcWl4MJF8oYT8oVzpmABZqM2cNN0gyWzgkVCJhK0sJOXE+PWlZcCo9dlpeDCNxJmo/I3U6AhgwVTNkCioARkIGO1gIaC0IWAxjLAp7MQE6MWMAXgYWdg97OzZ1GHMqSlUkdlkqYy8HBRZ1JWc7OnUcZlgBFgFBBxxAVkImHEEkcT8BUiZrI0Rb HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1178
date: Sat, 06 May 2023 17:46:38 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 163a559a90b919cdbd95acf4deecc98a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: FeqjVfunqCEeDeMtJseUlcWtyPkR7ghBqr4Hys-ZFms1QMQvOqtwRg==
X-Firefox-Spdy: h2
workhovdiminatedi.info/NmoyQkQZVVExeWABBzAgYSBVJ3V4LmUvFg89ZwwWbDJoJhZgCRQ2LVJXBXRwB14DZDRfDg9zYkUeUzYxRVcDZC1YDF1/YkBXA2x3AkQBcGoETEd/dRAeQiMjC1sUMjBCBg9zcg5ZAXtxB1MKcXUE
204 No Content
0
URL
GET
HTTP/2
workhovdiminatedi.info/NmoyQkQZVVExeWABBzAgYSBVJ3V4LmUvFg89ZwwWbDJoJhZgCRQ2LVJXBXRwB14DZDRfDg9zYkUeUzYxRVcDZC1YDF1/YkBXA2x3AkQBcGoETEd/dRAeQiMjC1sUMjBCBg9zcg5ZAXtxB1MKcXUE
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NmoyQkQZVVExeWABBzAgYSBVJ3V4LmUvFg89ZwwWbDJoJhZgCRQ2LVJXBXRwB14DZDRfDg9zYkUeUzYxRVcDZC1YDF1/YkBXA2x3AkQBcGoETEd/dRAeQiMjC1sUMjBCBg9zcg5ZAXtxB1MKcXUE HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 06 May 2023 17:46:38 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YQL7aknl6vg2xuwFAnqD3iO7fC7XvLr6JPcyZDeCDs5wSGWPs2YDJk6YNdaEjCpxsv1LLj%2B7KsSWgbzu72IYs2HVLA%2BGvgHJJicDO6vjNI5%2Fcw%2FDyneSO6ER%2FIqBFAnLljBNEPwBQCsH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c330b339dd7b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/c3FPUjkSEyw/BhJMLXRMAR1ydws1VH0UXR4cNTlfF0l9JVgKH2ExVRwEKzRLHB87fFcWBWpgfzAgfQh7JSUGNXogSTUWbRAhBQVePxV+awwqBhU+fTc4eQp9PRMEBX8QPRkLVTUGBhN7QCAmNGElMAEBACQXIwhXPCcCJngrCTUEQEM3KRVoJjgoG1MSMBU+fAozIApABBIEFlUWOCQcQzYGKyZvHiMhE1QAFCwVaCsSDABSKQYGJH0KSSgBVCkkLAEJOBUbPgoqIyslczQjIRNTNiAVFWMJEiMIDRYGBSNoQD8jBGoqNwQ4VisSHBBDKSABKG8dXA0+eEErGjFtPRMCA3QdPiQiVCUwKzl4QDsGMWE9OSk+WlUbPD1XA0wnZlcdQSsQCTAQeiV2RQ
200 OK
1163
URL
GET
HTTP/2
kultingecauyuksehinkitw.info/c3FPUjkSEyw/BhJMLXRMAR1ydws1VH0UXR4cNTlfF0l9JVgKH2ExVRwEKzRLHB87fFcWBWpgfzAgfQh7JSUGNXogSTUWbRAhBQVePxV+awwqBhU+fTc4eQp9PRMEBX8QPRkLVTUGBhN7QCAmNGElMAEBACQXIwhXPCcCJngrCTUEQEM3KRVoJjgoG1MSMBU+fAozIApABBIEFlUWOCQcQzYGKyZvHiMhE1QAFCwVaCsSDABSKQYGJH0KSSgBVCkkLAEJOBUbPgoqIyslczQjIRNTNiAVFWMJEiMIDRYGBSNoQD8jBGoqNwQ4VisSHBBDKSABKG8dXA0+eEErGjFtPRMCA3QdPiQiVCUwKzl4QDsGMWE9OSk+WlUbPD1XA0wnZlcdQSsQCTAQeiV2RQ
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3003), with no line terminators
Hash
76ed12cfe9d000a20ef82a01bc8d6b39
d51d19ac135ffbaceff8c3d2853240cccd1d747a
a6677e7c0991f790ac49a7b769c7b1515a590bd7344cb7514fbfb2b5a67af0bb
GET /c3FPUjkSEyw/BhJMLXRMAR1ydws1VH0UXR4cNTlfF0l9JVgKH2ExVRwEKzRLHB87fFcWBWpgfzAgfQh7JSUGNXogSTUWbRAhBQVePxV+awwqBhU+fTc4eQp9PRMEBX8QPRkLVTUGBhN7QCAmNGElMAEBACQXIwhXPCcCJngrCTUEQEM3KRVoJjgoG1MSMBU+fAozIApABBIEFlUWOCQcQzYGKyZvHiMhE1QAFCwVaCsSDABSKQYGJH0KSSgBVCkkLAEJOBUbPgoqIyslczQjIRNTNiAVFWMJEiMIDRYGBSNoQD8jBGoqNwQ4VisSHBBDKSABKG8dXA0+eEErGjFtPRMCA3QdPiQiVCUwKzl4QDsGMWE9OSk+WlUbPD1XA0wnZlcdQSsQCTAQeiV2RQ HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1163
date: Sat, 06 May 2023 17:46:38 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 163a559a90b919cdbd95acf4deecc98a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 2ySIrlQld3E5gStsITQYTFKGresgZf2J94sxeVB0rlZWBmSzx9VGNw==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/WVBBZzY4MiIKCThtI0FDKzx8QgQfdXMhUjQ9OwxQPWhzEFcgPm8EWjYlJQFENj41SVg8JGRVcAMDFi0EAwd5FnILNwUycmkcBAteATYtNXAPFiURdRgFCiZiNTYLEEYDGwAiAAwRKgVjPmQIMGIuPhQlcw8cF15xCCcMCHIbFhg0ZS4dBzFePDI2KmUbYQteZBgZFyZ1EzYHH1UPGQM+cRwBBF51NREQI1gIAAY1Dh4aEFNuCBZxN2BoOBc0WC0DGQ8HPDUEA3ATYDFQYzE/DCZiLjEUVlI/HRcXdxY8LV5kaQUvNFgtAwMleBI1KCl+DwYbCWM1fXgmbgE7ByJBABULDFIcGXBWAwxgGzFuNzwVMgc9Ng0QRRwRAAxbHjwPP30BOBU1Bi02Ix9SFQYAQVwqPy8XCwg/dwZVFWUnNQYhPXcScw
200 OK
1180
URL
GET
HTTP/2
kultingecauyuksehinkitw.info/WVBBZzY4MiIKCThtI0FDKzx8QgQfdXMhUjQ9OwxQPWhzEFcgPm8EWjYlJQFENj41SVg8JGRVcAMDFi0EAwd5FnILNwUycmkcBAteATYtNXAPFiURdRgFCiZiNTYLEEYDGwAiAAwRKgVjPmQIMGIuPhQlcw8cF15xCCcMCHIbFhg0ZS4dBzFePDI2KmUbYQteZBgZFyZ1EzYHH1UPGQM+cRwBBF51NREQI1gIAAY1Dh4aEFNuCBZxN2BoOBc0WC0DGQ8HPDUEA3ATYDFQYzE/DCZiLjEUVlI/HRcXdxY8LV5kaQUvNFgtAwMleBI1KCl+DwYbCWM1fXgmbgE7ByJBABULDFIcGXBWAwxgGzFuNzwVMgc9Ng0QRRwRAAxbHjwPP30BOBU1Bi02Ix9SFQYAQVwqPy8XCwg/dwZVFWUnNQYhPXcScw
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3027), with no line terminators
Hash
c1da6804d8b2c8e2b585ef8f709bedd6
fec82751a7e1a52f8e04f3e1ea25fecdf119644f
62854b4bb2512ed1395c07cae3a0a4fde92b1e5da8c41ec144e579db77c20191
GET /WVBBZzY4MiIKCThtI0FDKzx8QgQfdXMhUjQ9OwxQPWhzEFcgPm8EWjYlJQFENj41SVg8JGRVcAMDFi0EAwd5FnILNwUycmkcBAteATYtNXAPFiURdRgFCiZiNTYLEEYDGwAiAAwRKgVjPmQIMGIuPhQlcw8cF15xCCcMCHIbFhg0ZS4dBzFePDI2KmUbYQteZBgZFyZ1EzYHH1UPGQM+cRwBBF51NREQI1gIAAY1Dh4aEFNuCBZxN2BoOBc0WC0DGQ8HPDUEA3ATYDFQYzE/DCZiLjEUVlI/HRcXdxY8LV5kaQUvNFgtAwMleBI1KCl+DwYbCWM1fXgmbgE7ByJBABULDFIcGXBWAwxgGzFuNzwVMgc9Ng0QRRwRAAxbHjwPP30BOBU1Bi02Ix9SFQYAQVwqPy8XCwg/dwZVFWUnNQYhPXcScw HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1180
date: Sat, 06 May 2023 17:46:38 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 163a559a90b919cdbd95acf4deecc98a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: HhNavUHa_mB9oDCR6Vp2RQAUk4Cvrh3GF88Sem74Ccy7nJvgTIj4fA==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/S2NiRWgqAQEoVypeAGMdOQ9fYFoNRlADDCYOGC4OL1tQMgkyDUwmBCQWBiMaJA0WawYuF0d3Lnw0OhcEKjU3cy88EDIkAXsHIxM6IgFSBz0TNDBgWg0rChwvBBoODyQjJgcODwU0LgEiOCY2JiURIAVwOTNTFBU9JzU2PwN/JAUPPSgZFSQqJzEJIxAeISF3AD82CgAyBAkoDyoJEBQIKQo1KhEbPysnCAsFJDMfKyMuWgs6LCY2AgstMjcxMigkFgA8GSUJJC4NNCl2KjkxIy4pBBoVCDkNFw4MPTM3LCgmPzY0HBooJBYALjNaFSQCHTY1EhB4MSdoEAY5UC48CiINYFoJLQ4DMAdRBjU6HTU4Hy8nJTMDHCczGnUwDycvdywOIQAAWiMlNAAMJwUVAzEcIkQvGyQNEngjMygRMlsOBFcgOi5SEwg
200 OK
1181
URL
GET
HTTP/2
kultingecauyuksehinkitw.info/S2NiRWgqAQEoVypeAGMdOQ9fYFoNRlADDCYOGC4OL1tQMgkyDUwmBCQWBiMaJA0WawYuF0d3Lnw0OhcEKjU3cy88EDIkAXsHIxM6IgFSBz0TNDBgWg0rChwvBBoODyQjJgcODwU0LgEiOCY2JiURIAVwOTNTFBU9JzU2PwN/JAUPPSgZFSQqJzEJIxAeISF3AD82CgAyBAkoDyoJEBQIKQo1KhEbPysnCAsFJDMfKyMuWgs6LCY2AgstMjcxMigkFgA8GSUJJC4NNCl2KjkxIy4pBBoVCDkNFw4MPTM3LCgmPzY0HBooJBYALjNaFSQCHTY1EhB4MSdoEAY5UC48CiINYFoJLQ4DMAdRBjU6HTU4Hy8nJTMDHCczGnUwDycvdywOIQAAWiMlNAAMJwUVAzEcIkQvGyQNEngjMygRMlsOBFcgOi5SEwg
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3027), with no line terminators
Hash
0b7c38963e33af31249c3a4c243ce2ed
2962f9239d5a26d8b6cb6259a23dce3e17edb37a
2e59276136b03a0d45d1149b1a0fd9ffaa70f606852bdb29788861b597bccec6
GET /S2NiRWgqAQEoVypeAGMdOQ9fYFoNRlADDCYOGC4OL1tQMgkyDUwmBCQWBiMaJA0WawYuF0d3Lnw0OhcEKjU3cy88EDIkAXsHIxM6IgFSBz0TNDBgWg0rChwvBBoODyQjJgcODwU0LgEiOCY2JiURIAVwOTNTFBU9JzU2PwN/JAUPPSgZFSQqJzEJIxAeISF3AD82CgAyBAkoDyoJEBQIKQo1KhEbPysnCAsFJDMfKyMuWgs6LCY2AgstMjcxMigkFgA8GSUJJC4NNCl2KjkxIy4pBBoVCDkNFw4MPTM3LCgmPzY0HBooJBYALjNaFSQCHTY1EhB4MSdoEAY5UC48CiINYFoJLQ4DMAdRBjU6HTU4Hy8nJTMDHCczGnUwDycvdywOIQAAWiMlNAAMJwUVAzEcIkQvGyQNEngjMygRMlsOBFcgOi5SEwg HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1181
date: Sat, 06 May 2023 17:46:38 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 163a559a90b919cdbd95acf4deecc98a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: nKZFSg-C5r81RbP_xf4v-S0mEfKWta3BqMrQ6C-nHSD08_-3xyoDog==
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery-1.11.0.min.js
200 OK
54268
URL
GET
HTTP/2
megaup.net/themes/flow/js/jquery-1.11.0.min.js
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (32341)
Hash
e9afe92b8723110b459ff98383588bc7
bc06c84e3a86052fc8c68801ff828685f9cddb76
c6fad4016abee3121068a6ce4f22eb22fffb2525bbc9ce6250c1d7515fd876e7
GET /themes/flow/js/jquery-1.11.0.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1787d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
cdn.purpleads.io/agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
200 OK
21906
URL
GET
HTTP/2
cdn.purpleads.io/agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerAmazon
Subject*.purpleads.io
Fingerprint2C:07:41:61:C9:75:ED:6A:72:5B:30:CE:B3:18:1C:47:DB:07:BF:D4
ValidityFri, 24 Feb 2023 00:00:00 GMT - Wed, 29 Nov 2023 23:59:59 GMT
Magic
HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65522), with no line terminators
Hash
ff70d9f9fae24229f0d0a396a41b49da
0b85006adc466e582bfe2127e5d27aaefd2b7242
1467ef102058225b3b6ce597fe2acabb12e7032a4a6bbb11d0bf435b4f082bb4
Analyzer
Verdict
Alert
urlquery
suspicious
Suspicious - Suspicious Javascript code
GET /agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655 HTTP/1.1
Host: cdn.purpleads.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 21906
last-modified: Thu, 04 May 2023 11:04:57 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 06 May 2023 11:05:04 GMT
etag: "ff70d9f9fae24229f0d0a396a41b49da"
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zo6OTxxMpYXvK2cXFT14KdKonpemjQ1xzuBVr2D6BSwHQWqC_7AJwg==
age: 24095
X-Firefox-Spdy: h2
a.exdynsrv.com/ad-provider.js
200 OK
28967
URL
GET
HTTP/1.1
a.exdynsrv.com/ad-provider.js
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerLet's Encrypt
Subjectexdynsrv.com
Fingerprint54:0A:66:69:27:EA:63:01:A0:42:9B:75:C5:75:97:C3:19:3C:EC:0F
ValidityMon, 27 Feb 2023 07:27:23 GMT - Sun, 28 May 2023 07:27:22 GMT
Magic
ASCII text, with very long lines (54191)
Hash
6cebad4a9da95c68f459accf99eabf4a
7b5de6376d08e7ec1a06e28f371ee41dbd4dceb8
6474d9a8357ea8cc465c2ad9df9d8580765b4c1d39a6ce8a3853a4cfdf2549e2
GET /ad-provider.js HTTP/1.1
Host: a.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 06 May 2023 17:46:38 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 28967
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"5edd88b11d181710b873d5701fc"
X-HW: 1683395198.dop014.sk1.t,1683395198.cds252.sk1.shn,1683395198.dop014.sk1.t,1683395198.cds235.sk1.c
Access-Control-Allow-Origin: *, *
megaup.net/themes/flow/frontend_assets/css/stylesheet.css
200 OK
5188
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/css/stylesheet.css
IP
Requested by
https://megaup.net/2z66s/Bayonetta_Origins_Cereza_and_the_Lost_Demon_[0100CF5010FEC000][v0][US].nsp.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
ASCII text, with CRLF line terminators
Hash
a922f987506b4060b39612bc960cea8c
e1b7cc93aef16b972828e412e101533a013b75be
61112268a93bf8e75d724b667bbb11e1ef506e13ca07b7ccdd59e68acca8890e
GET /themes/flow/frontend_assets/css/stylesheet.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=4qr41vtbiajntajoqvgfl4e8k3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 17:46:37 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6c82"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/ZSWJ2ZW8qDRgDUD0LElhXflRFVFdvCAUKATlfJwpZKAE6UAkbUg4IWTwnUBEVLV9GQwMoDBFYSSwMFVhebwMSB1J9RAIVACJfFxcVIBYGEQE9ClAQDnQPGR8GJQ4XQF0PV1hVSntSXh1eeEdFJ0p7UhoMATwaU1dfMVpAOll9R0UnSntSBBNKeiNHVVZnUl-9AXXkFEwYEJkdEI115U0ZVXnlTU1dfLwsEAAkmGlNXKXhTR0tfbxdLVA
472
91.209.70.182
185.76.9.25
192.124.249.36
95.211.229.247
104.18.2.114
176.9.77.232
188.114.96.1![URL megaup.net/themes/flow/images/main_logo_inverted.png](/search?q=http.url.addr:"megaup.net%2fthemes%2fflow%2fimages%2fmain_logo_inverted.png"){kind=link}
![URL megaup.net/themes/flow/images/loading_small.gif](/search?q=http.url.addr:"megaup.net%2fthemes%2fflow%2fimages%2floading_small.gif"){kind=link}
![URL megaup.net/imageads/013.png](/search?q=http.url.addr:"megaup.net%2fimageads%2f013.png"){kind=link}