Report - megacybernews.com/stage3.ps1

Report Overview

Visited public
2024-08-07 15:20:53
Tags
URL
megacybernews.com/stage3.ps1
Finishing URL
www.megacybernews.com/stage3.ps1
IP / ASN
162.255.119.114
#22612 NAMECHEAP-NET
Title
megacybernews.com - megacybernews Ressurser og informasjon

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Sent	Received	IP
r10.o.lencr.org	unknown	2.3 kB	6.2 kB	23.33.119.57
megacybernews.com	unknown	666 B	610 B	162.255.119.114
www.megacybernews.com	unknown	1.6 kB	34 kB	91.195.240.19
img.sedoparking.com	54200	1.4 kB	50 kB	205.234.175.175
o.pki.goog	unknown	2.6 kB	5.6 kB	142.250.74.131
syndicatedsearch.goog	unknown	5.2 kB	65 kB	172.217.21.174
afs.googleusercontent.com	12123	979 B	2.2 kB	142.250.74.97
www.google.com	7	463 B	156 kB	142.250.74.132

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-08-07 15:20:31	medium	Client IP	162.255.119.114	ET INFO PS1 Powershell File Request
2024-08-07 15:20:41	low	162.255.119.114	Client IP	ET INFO Namecheap URL Forward
2024-08-07 15:20:42	low	162.255.119.114	Client IP	ET INFO Namecheap URL Forward

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	syndicatedsearch.goog/afs/ads/i/iframe.html	ScriptElement	1.3 kB	2023-04-05	2025-03-02
Pretty URL syndicatedsearch.goog/afs/ads/i/iframe.html IP 172.217.21.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:36 Last Seen2025-03-02 05:25 Times Seen67768 Hash 33839cb72649c81ab58b763c95b4a163 0c9b62881e660fded013cee58439ae287690065a cdded269406c9b2b49a3066d12e75913abf338cdd7fa00e31fff299efef1cb76 Loading...

	syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww.megacybernews.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjMwNDQwMzImdGNpZD13d3cubWVnYWN5YmVybmV3cy5jb202NmIzOTBjMDA1YTI3OC43NTk1OTUzNSZ0YXNrPXNlYXJjaCZkb21haW49bWVnYWN5YmVybmV3cy5jb20mYV9pZD0zJnNlc3Npb249bXpMSUtnRHhIRUtoYnRjVEtZQWQ%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3%7Cs&nocache=4711723044032524&num=0&output=afd_ads&domain_name=www.megacybernews.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1723044032533&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=657227691&rurl=https%3A%2F%2Fwww.megacybernews.com%2Fstage3.ps1	ScriptElement	885 B	2024-08-19	2024-08-19
Pretty URL syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww.megacybernews.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjMwNDQwMzImdGNpZD13d3cubWVnYWN5YmVybmV3cy5jb202NmIzOTBjMDA1YTI3OC43NTk1OTUzNSZ0YXNrPXNlYXJjaCZkb21haW49bWVnYWN5YmVybmV3cy5jb20mYV9pZD0zJnNlc3Npb249bXpMSUtnRHhIRUtoYnRjVEtZQWQ%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3%7Cs&nocache=4711723044032524&num=0&output=afd_ads&domain_name=www.megacybernews.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1723044032533&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=657227691&rurl=https%3A%2F%2Fwww.megacybernews.com%2Fstage3.ps1 IP 172.217.21.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-19 14:17 Last Seen2024-08-19 14:17 Times Seen1 Hash 9aab8cbf1ca6ede15f999fdd43ad6d1b d7dda60321511c2622a0524bba5dac87a619b5f8 9d3f0711eec902bb4b2b3f4c232862965ba31a1d8d818a2bd3b28874a2e42562 Loading...

	syndicatedsearch.goog/adsense/domains/caf.js	ScriptElement	155 kB	2024-08-01	2024-08-19
Pretty URL syndicatedsearch.goog/adsense/domains/caf.js IP 172.217.21.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-01 18:13 Last Seen2024-08-19 15:01 Times Seen1965 Hash b314cd248c68c125de66f8eb785f4eda 0b5ef75f42f11e5e4eb5ef33865c5264389b131c 2b0fa4538fcd6e54095482f39c9627aec5cd4e37507f0b07a36d12d8449a9fe2 Loading...

	www.megacybernews.com/stage3.ps1	ScriptElement	4.0 kB	2024-08-19	2024-08-19
Pretty URL www.megacybernews.com/stage3.ps1 IP 91.195.240.19 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-19 14:17 Last Seen2024-08-19 14:17 Times Seen1 Hash e78325abe319e6ec1f7703a67ae68d47 997e203117176f8ddbd3bb11365f782205b6a7e1 8a2f9eaad587e6288f8a323ff1c0a488698876071725077ef32326e8f829a287 Loading...

	www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true	ScriptElement	155 kB	2024-08-01	2024-08-19
Pretty URL www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-01 18:13 Last Seen2024-08-19 15:01 Times Seen2183 Hash 0a401cef0f6416821c0d1c0331fea105 a9a6a068de5ee91959d66079326da71fef82e412 b0c04ab9806ededb6cd8ae3f07e9cbf1d8f6be40f5c2f362f3ae9dba9b399dfc Loading...

	www.megacybernews.com/stage3.ps1	ScriptElement	622 B	2023-03-07	2025-06-21
Pretty URL www.megacybernews.com/stage3.ps1 IP 91.195.240.19 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02 Last Seen2025-06-21 22:57 Times Seen28009 Hash a250fbc5a068488660893f64bcbd3883 a1b5f3c0b8e3d1d4b24c80a2b0ec26e1bfdb710b c23bcb1a9582fa5e6a7640914593be32834a9f9c9996d30c430906c46a448b49 Loading...

	www.megacybernews.com/stage3.ps1	ScriptElement	5.9 kB	2024-05-23	2025-06-22
Pretty URL www.megacybernews.com/stage3.ps1 IP 91.195.240.19 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-23 11:11 Last Seen2025-06-22 04:47 Times Seen100603 Hash 978e89b89f929ebbd0a746295eafbcbe 6b92ab60432c1e5a8aebc60ebc94f1f24c28cea6 848eaac812a5c6ef9f75fc33f2bfbb7169bfea60bc4d4a28a7e77d1737ca42ac Loading...

HTTP Transactions (33)

URL IP Response Size

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
361994b45d17874f3d57044be82a542d
ddad8ebd0d7ecdc2c9d07245d5aff4df9e3e0a56
bf3643f753112c9f8fa5204e8ee172a6e0374d160407b7f14e2c0708aa0daad5

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BF3643F753112C9F8FA5204E8EE172A6E0374D160407B7F14E2C0708AA0DAAD5"
Last-Modified: Tue, 06 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10638
Expires: Wed, 07 Aug 2024 18:17:45 GMT
Date: Wed, 07 Aug 2024 15:20:27 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
75efd2f3585f3075b07d7001e610bf02
afeabc51586d1efe3d02337b8a43741c0d5a79b5
26b1b697a9cff033ffa5ef52c9261a48313b206b2093d4d0aa6a9d3e9d24ab15

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "26B1B697A9CFF033FFA5EF52C9261A48313B206B2093D4D0AA6A9D3E9D24AB15"
Last-Modified: Tue, 06 Aug 2024 06:56:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4446
Expires: Wed, 07 Aug 2024 16:34:33 GMT
Date: Wed, 07 Aug 2024 15:20:27 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
9a041998a7f05a3597d12c78ad418ec6
47926457fcb7a088f9c31d2873ef6d0fcad216e9
1b7a83f4e52229b23ed8f2831f0b93cfe270359192b0efb4fefde3225c1c844b

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1B7A83F4E52229B23ED8F2831F0B93CFE270359192B0EFB4FEFDE3225C1C844B"
Last-Modified: Tue, 06 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3994
Expires: Wed, 07 Aug 2024 16:27:02 GMT
Date: Wed, 07 Aug 2024 15:20:28 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ad08a2764470070a728a228f5cca3296
3e8d448130fe3c6ad6e88a0ff3dd170855740e6f
c508461997b3781963d5494bb2517544c6ad0b2a8029d1a1009a6bb3ff6b0fd7

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C508461997B3781963D5494BB2517544C6AD0B2A8029D1A1009A6BB3FF6B0FD7"
Last-Modified: Tue, 06 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10115
Expires: Wed, 07 Aug 2024 18:09:03 GMT
Date: Wed, 07 Aug 2024 15:20:28 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
327bc43a00e425dc5af5df4efab2ceaf
963d56a3437b86a9a87eb2aa01094b76a1b68fbb
e356c1bd222eb19ffd721062bca611a3791985070895ed0bd5f91382970e7bf9

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E356C1BD222EB19FFD721062BCA611A3791985070895ED0BD5F91382970E7BF9"
Last-Modified: Tue, 06 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6663
Expires: Wed, 07 Aug 2024 17:11:32 GMT
Date: Wed, 07 Aug 2024 15:20:29 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
327bc43a00e425dc5af5df4efab2ceaf
963d56a3437b86a9a87eb2aa01094b76a1b68fbb
e356c1bd222eb19ffd721062bca611a3791985070895ed0bd5f91382970e7bf9

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E356C1BD222EB19FFD721062BCA611A3791985070895ED0BD5F91382970E7BF9"
Last-Modified: Tue, 06 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6663
Expires: Wed, 07 Aug 2024 17:11:32 GMT
Date: Wed, 07 Aug 2024 15:20:29 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
327bc43a00e425dc5af5df4efab2ceaf
963d56a3437b86a9a87eb2aa01094b76a1b68fbb
e356c1bd222eb19ffd721062bca611a3791985070895ed0bd5f91382970e7bf9

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E356C1BD222EB19FFD721062BCA611A3791985070895ED0BD5F91382970E7BF9"
Last-Modified: Tue, 06 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6663
Expires: Wed, 07 Aug 2024 17:11:32 GMT
Date: Wed, 07 Aug 2024 15:20:29 GMT
Connection: keep-alive

megacybernews.com/

162.255.119.114

52 B

URL
megacybernews.com/
IP
162.255.119.114:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document, ASCII text
Size
52 B (52 bytes)
Hash
6b62afc2f253fccba47331111ef86fe6
311d770a584c8512b86d225eb9c690712413320f
1757d1603cf39351b4624bb21945ff08fbef85a7409c74929eb3cb1882045dec

Detections

NIDS	Severity	Alert
suricata	low	ET INFO Namecheap URL Forward

HTTP Headers

GET / HTTP/1.1
Host: megacybernews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Wed, 07 Aug 2024 15:20:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 52
Connection: keep-alive
Location: http://www.megacybernews.com/
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx

www.megacybernews.com/

91.195.240.19

8.2 kB

URL
www.megacybernews.com/
IP
91.195.240.19:0
ASN
#47846 SEDO GmbH

File type
HTML document, Unicode text, UTF-8 text, with very long lines (10840)
Size
8.2 kB (8159 bytes)
Hash
82fd56de674ae7ff17c987ca55fc1719
1175d3ad7903c67331e3b4f93df2d8f11b80bdf6
e4c1bedb8f5ba54d00c31a7e13befde4245836e4f5b0a1680e5b520f69b60c65

HTTP Headers

GET / HTTP/1.1
Host: www.megacybernews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Wed, 07 Aug 2024 15:20:31 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_EPqtJl7a5uhOGaq+BCp+aJ/5pf9c+j803OpXw+sSHidUi2aHfNBPbFW3WKtTJsZj74+ylwUE6XhiyQ8lTgZ5zg==
last-modified: Wed, 07 Aug 2024 15:20:31 GMT
x-cache-miss-from: parking-585cff59fc-xwpxx
server: Parking/1.0
content-encoding: gzip

GET megacybernews.com/stage3.ps1

162.255.119.114

62 B

URL User Request GET
megacybernews.com/stage3.ps1
IP
162.255.119.114:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document, ASCII text
Size
62 B (62 bytes)
Hash
3eefaed6c8df18f8cb7f9b6b6baab261
81b12b2e1b0784a384b00caf30e37e8ea8d252fb
ff14460eb23fa3d42e641d4dabfada4c4c1736c8717760936f69074ca71e0e8d

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO PS1 Powershell File Request
suricata	low	ET INFO Namecheap URL Forward

HTTP Headers

GET /stage3.ps1 HTTP/1.1
Host: megacybernews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Wed, 07 Aug 2024 15:20:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 62
Connection: keep-alive
Location: http://www.megacybernews.com/stage3.ps1
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx

GET img.sedoparking.com/templates/bg/arrows-curved.png

205.234.175.175

200 OK

14 kB

URL GET HTTP/2
img.sedoparking.com/templates/bg/arrows-curved.png
IP
205.234.175.175:443
ASN
#30081 CACHENETWORKS

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerGlobalSign nv-sa
Subject*.cachefly.net
Fingerprint0F:4E:B2:D7:96:B9:94:D0:35:66:76:6C:4B:16:18:49:DE:42:80:71
ValidityMon, 13 Nov 2023 19:46:02 GMT - Sat, 14 Dec 2024 19:46:01 GMT

File type
PNG image data, 413 x 594, 8-bit/color RGBA, non-interlaced
Size
14 kB (13502 bytes)
Hash
107694ee1e94990d97b7e58651ffd6a0
7dd9ae7badf78be01ea0623df1e90171348716ff
7aa2a3e9a9575a27f5593c3b0357423128c468a46ed20d284ce5a21555ee67bc

HTTP Headers

GET /templates/bg/arrows-curved.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 07 Aug 2024 15:20:32 GMT
content-type: image/png
content-length: 13502
access-control-allow-origin: *
cache-control: max-age=604800
expires: Wed, 14 Aug 2024 15:20:32 GMT
x-cfhash: "107694ee1e94990d97b7e58651ffd6a0"
x-cff: B
last-modified: Tue, 12 Oct 2021 05:19:02 GMT
x-cf3: H
cf4age: 238283
x-cf-tsc: 1711139574
cf4ttl: 31297716.000
x-cf2: H
server: CFS 1124
x-cf-reqid: 564feab4a654687da252e7f26f3f01f0
x-cf1: 11696:fD.arn1:cf:nom:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2

GET img.sedoparking.com/templates/images/hero_nc.svg

205.234.175.175

200 OK

20 kB

URL GET HTTP/2
img.sedoparking.com/templates/images/hero_nc.svg
IP
205.234.175.175:443
ASN
#30081 CACHENETWORKS

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerGlobalSign nv-sa
Subject*.cachefly.net
Fingerprint0F:4E:B2:D7:96:B9:94:D0:35:66:76:6C:4B:16:18:49:DE:42:80:71
ValidityMon, 13 Nov 2023 19:46:02 GMT - Sat, 14 Dec 2024 19:46:01 GMT

File type
SVG Scalable Vector Graphics image
Size
20 kB (20346 bytes)
Hash
5a2c392e7acdf6e9de6e00129500503c
c8d0f80381e4ce180b5eb3c4c98539907292a7bb
878da09a057ec8f1775cdc522e5f7ec44966df547a87a9c29826ba114833c24b

HTTP Headers

GET /templates/images/hero_nc.svg HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 07 Aug 2024 15:20:32 GMT
content-type: image/svg+xml
content-length: 20346
access-control-allow-origin: *
x-cff: B
last-modified: Thu, 05 Oct 2023 09:16:15 GMT
vary: Accept-Encoding
x-cf3: H
cf4age: 18658
x-cf-tsc: 1711139347
cf4ttl: 31517342.000
content-encoding: gzip
x-cf2: H
server: CFS 1124
x-cf-reqid: 9e1285599dc2a0c24f2a0cf5d2506ffe
x-cf1: 11696:fD.arn1:nom:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.131

471 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
de2fae47838b701f622e5600389b9033
e5df2d01676c0cf3169ceffe0fce4c85db555f29
a9c05da62c0aa9ade089847514e6e4d966d611aaf8d951f5ac7027f3a4d4b68b

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Aug 2024 15:20:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.131

471 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
8ef285159a6a207caf0eae0081213562
48905f4d469167408298263ac14e86a44408c048
c68101de8ebea7aaf219175e7c25c192c70dfa9d1c8ba4551e7d8a0e84cb3195

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Aug 2024 15:20:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET www.megacybernews.com/search/tsc.php?ses=ogcD2Sxt4uuSiPv_L3SEPHgxLDd_P4TgHB6ZmLBr-ZwCJgTg2us_DK3WRB-qCZB9LUit1iywe78hsiIFq6iNX3yGVVkbAulCEXx9P6O56Tz09g0udllRRo4PxrPhynH0WE4OcegpJGSia4K0rkScbhBRSofIg-ihUwnpWM3j8dfNxTYdsIOiIAx5BzpQYCVj00-VGi4J9RKiA6rLcgENR4Xox5JDzlDlUom_rOZ0zHLauDK13iRCQRCUpnXRERdeDKckEUYhGgULKrEjyJ7yrcuYmGNOeCL6THSv3nqqgbbGnstBS3EAH8P9kp07-VI0RLWXGc0iCq-kfTmbzOSeb4kGXrDeNxvFfSnQDNjQ_yNO9FBS7V9iP8n1SFbtA&cv=2

91.195.240.19

200 OK

0 B

URL GET HTTP/2
www.megacybernews.com/search/tsc.php?ses=ogcD2Sxt4uuSiPv_L3SEPHgxLDd_P4TgHB6ZmLBr-ZwCJgTg2us_DK3WRB-qCZB9LUit1iywe78hsiIFq6iNX3yGVVkbAulCEXx9P6O56Tz09g0udllRRo4PxrPhynH0WE4OcegpJGSia4K0rkScbhBRSofIg-ihUwnpWM3j8dfNxTYdsIOiIAx5BzpQYCVj00-VGi4J9RKiA6rLcgENR4Xox5JDzlDlUom_rOZ0zHLauDK13iRCQRCUpnXRERdeDKckEUYhGgULKrEjyJ7yrcuYmGNOeCL6THSv3nqqgbbGnstBS3EAH8P9kp07-VI0RLWXGc0iCq-kfTmbzOSeb4kGXrDeNxvFfSnQDNjQ_yNO9FBS7V9iP8n1SFbtA&cv=2
IP
91.195.240.19:443
ASN
#47846 SEDO GmbH

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerDigiCert Inc
Subjectwww.megacybernews.com
Fingerprint6E:DD:F1:89:5F:5B:FA:8C:56:4C:CC:70:E5:71:FE:55:39:FA:B2:71
ValidityWed, 31 Jul 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /search/tsc.php?ses=ogcD2Sxt4uuSiPv_L3SEPHgxLDd_P4TgHB6ZmLBr-ZwCJgTg2us_DK3WRB-qCZB9LUit1iywe78hsiIFq6iNX3yGVVkbAulCEXx9P6O56Tz09g0udllRRo4PxrPhynH0WE4OcegpJGSia4K0rkScbhBRSofIg-ihUwnpWM3j8dfNxTYdsIOiIAx5BzpQYCVj00-VGi4J9RKiA6rLcgENR4Xox5JDzlDlUom_rOZ0zHLauDK13iRCQRCUpnXRERdeDKckEUYhGgULKrEjyJ7yrcuYmGNOeCL6THSv3nqqgbbGnstBS3EAH8P9kp07-VI0RLWXGc0iCq-kfTmbzOSeb4kGXrDeNxvFfSnQDNjQ_yNO9FBS7V9iP8n1SFbtA&cv=2 HTTP/1.1
Host: www.megacybernews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/stage3.ps1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Wed, 07 Aug 2024 15:20:32 GMT
server: Parking/1.0
x-cache-miss-from: parking-585cff59fc-b6hcv
content-length: 0
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
43460ee6fefef66a1a48688630a564ca
da065dfa91ac02b2aab853c0370195ba74d5ce5c
5f77783374be47653559addae957398f7e7e61a1657fb200fe93811821de68ed

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Aug 2024 15:20:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
43460ee6fefef66a1a48688630a564ca
da065dfa91ac02b2aab853c0370195ba74d5ce5c
5f77783374be47653559addae957398f7e7e61a1657fb200fe93811821de68ed

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Aug 2024 15:20:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET img.sedoparking.com/templates/logos/sedo_logo.png

205.234.175.175

200 OK

15 kB

URL GET HTTP/2
img.sedoparking.com/templates/logos/sedo_logo.png
IP
205.234.175.175:443
ASN
#30081 CACHENETWORKS

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerGlobalSign nv-sa
Subject*.cachefly.net
Fingerprint0F:4E:B2:D7:96:B9:94:D0:35:66:76:6C:4B:16:18:49:DE:42:80:71
ValidityMon, 13 Nov 2023 19:46:02 GMT - Sat, 14 Dec 2024 19:46:01 GMT

File type
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Size
15 kB (15086 bytes)
Hash
def00c11b1596db4efee6a9fbe64fc27
bd298981e6d8d7e4ffa18abcf687041f4246672d
95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4

HTTP Headers

GET /templates/logos/sedo_logo.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 07 Aug 2024 15:20:32 GMT
content-type: image/png
content-length: 15086
access-control-allow-origin: *
cache-control: max-age=604800
expires: Wed, 14 Aug 2024 15:20:32 GMT
x-cfhash: "def00c11b1596db4efee6a9fbe64fc27"
x-cff: B
last-modified: Mon, 11 Jan 2021 07:44:34 GMT
x-cf3: H
cf4age: 21299
x-cf-tsc: 1711144658
cf4ttl: 31514700.000
x-cf2: H
server: CFS 1124
x-cf-reqid: a00c422dba1bd2a7e725ed167740926d
x-cf1: 11696:fD.arn1:cf:nom:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/ads/i/iframe.html

172.217.21.174

200 OK

728 B

URL GET HTTP/2
syndicatedsearch.goog/afs/ads/i/iframe.html
IP
172.217.21.174:443
ASN
#15169 GOOGLE

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintC0:13:68:7E:4C:B8:86:2A:AD:FE:9B:2F:EB:17:6F:94:F1:76:26:28
ValidityTue, 30 Jul 2024 12:54:31 GMT - Tue, 22 Oct 2024 12:54:30 GMT

File type
HTML document, ASCII text, with very long lines (1559)
Size
728 B (728 bytes)
Hash
d3f8ebad8616c97c0c6ba54724946400
d22f10c7923b476dc125986686aa008cd4c498c6
375aafd50ad45ad936d1261e28b6445ad431b71d8d7c7950fba5e5b5a425ecfa

HTTP Headers

GET /afs/ads/i/iframe.html HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/html
content-security-policy: script-src 'nonce-1tYs1yu52MzbE4iKvQDXIA' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
content-length: 728
date: Wed, 07 Aug 2024 15:20:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
last-modified: Tue, 12 Mar 2024 06:00:00 GMT
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
43460ee6fefef66a1a48688630a564ca
da065dfa91ac02b2aab853c0370195ba74d5ce5c
5f77783374be47653559addae957398f7e7e61a1657fb200fe93811821de68ed

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Aug 2024 15:20:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww.megacybernews.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjMwNDQwMzImdGNpZD13d3cubWVnYWN5YmVybmV3cy5jb202NmIzOTBjMDA1YTI3OC43NTk1OTUzNSZ0YXNrPXNlYXJjaCZkb21haW49bWVnYWN5YmVybmV3cy5jb20mYV9pZD0zJnNlc3Npb249bXpMSUtnRHhIRUtoYnRjVEtZQWQ%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3%7Cs&nocache=4711723044032524&num=0&output=afd_ads&domain_name=www.megacybernews.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1723044032533&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=657227691&rurl=https%3A%2F%2Fwww.megacybernews.com%2Fstage3.ps1

172.217.21.174

200 OK

2.9 kB

URL GET HTTP/2
syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww.megacybernews.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjMwNDQwMzImdGNpZD13d3cubWVnYWN5YmVybmV3cy5jb202NmIzOTBjMDA1YTI3OC43NTk1OTUzNSZ0YXNrPXNlYXJjaCZkb21haW49bWVnYWN5YmVybmV3cy5jb20mYV9pZD0zJnNlc3Npb249bXpMSUtnRHhIRUtoYnRjVEtZQWQ%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3%7Cs&nocache=4711723044032524&num=0&output=afd_ads&domain_name=www.megacybernews.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1723044032533&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=657227691&rurl=https%3A%2F%2Fwww.megacybernews.com%2Fstage3.ps1
IP
172.217.21.174:443
ASN
#15169 GOOGLE

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintC0:13:68:7E:4C:B8:86:2A:AD:FE:9B:2F:EB:17:6F:94:F1:76:26:28
ValidityTue, 30 Jul 2024 12:54:31 GMT - Tue, 22 Oct 2024 12:54:30 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (13779)
Size
2.9 kB (2907 bytes)
Hash
747d7e66ebc9bdd9162a13fc608eb9b3
4e4b9fa2c2e6f18e21d4683a50fe2eee426c47ad
d084cd2ce28c9071d7106761aa5ac104e813ddb0f649fefce78293d0064fc1e3

HTTP Headers

GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww.megacybernews.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjMwNDQwMzImdGNpZD13d3cubWVnYWN5YmVybmV3cy5jb202NmIzOTBjMDA1YTI3OC43NTk1OTUzNSZ0YXNrPXNlYXJjaCZkb21haW49bWVnYWN5YmVybmV3cy5jb20mYV9pZD0zJnNlc3Npb249bXpMSUtnRHhIRUtoYnRjVEtZQWQ%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3%7Cs&nocache=4711723044032524&num=0&output=afd_ads&domain_name=www.megacybernews.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1723044032533&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=657227691&rurl=https%3A%2F%2Fwww.megacybernews.com%2Fstage3.ps1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Wed, 07 Aug 2024 15:20:32 GMT
expires: Wed, 07 Aug 2024 15:20:32 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-199NCNCbebPh9W8tBNrbRw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2907
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.131

471 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fe018ebc96b419feb43c074a878577fc
47e00934d4e9eef28cc0d6643e15e09f598f7a2d
63e53078c2838e290d7cc43aad4aa1a903e8b14b67f80a4e061cc9001b03ca39

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Aug 2024 15:20:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.131

471 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fe018ebc96b419feb43c074a878577fc
47e00934d4e9eef28cc0d6643e15e09f598f7a2d
63e53078c2838e290d7cc43aad4aa1a903e8b14b67f80a4e061cc9001b03ca39

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Aug 2024 15:20:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET syndicatedsearch.goog/adsense/domains/caf.js

172.217.21.174

200 OK

56 kB

URL GET HTTP/3
syndicatedsearch.goog/adsense/domains/caf.js
IP
172.217.21.174:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww.megacybernews.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjMwNDQwMzImdGNpZD13d3cubWVnYWN5YmVybmV3cy5jb202NmIzOTBjMDA1YTI3OC43NTk1OTUzNSZ0YXNrPXNlYXJjaCZkb21haW49bWVnYWN5YmVybmV3cy5jb20mYV9pZD0zJnNlc3Npb249bXpMSUtnRHhIRUtoYnRjVEtZQWQ%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3%7Cs&nocache=4711723044032524&num=0&output=afd_ads&domain_name=www.megacybernews.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1723044032533&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=657227691&rurl=https%3A%2F%2Fwww.megacybernews.com%2Fstage3.ps1
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintC0:13:68:7E:4C:B8:86:2A:AD:FE:9B:2F:EB:17:6F:94:F1:76:26:28
ValidityTue, 30 Jul 2024 12:54:31 GMT - Tue, 22 Oct 2024 12:54:30 GMT

File type
JavaScript source, ASCII text, with very long lines (2250)
Size
56 kB (55945 bytes)
Hash
b2a92d8f7043f970db4bed58ce335d78
72cef84f4c08fa583486441b12ff3c0d392e8403
01356aca5c2df95bb4b7c3e5316b1ea8665bbc36b2e73decb3ac1ada345ef61d

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Wed, 07 Aug 2024 15:20:32 GMT
expires: Wed, 07 Aug 2024 15:20:32 GMT
cache-control: private, max-age=3600
etag: "16181460272577187522"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff

142.250.74.97

200 OK

174 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww.megacybernews.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjMwNDQwMzImdGNpZD13d3cubWVnYWN5YmVybmV3cy5jb202NmIzOTBjMDA1YTI3OC43NTk1OTUzNSZ0YXNrPXNlYXJjaCZkb21haW49bWVnYWN5YmVybmV3cy5jb20mYV9pZD0zJnNlc3Npb249bXpMSUtnRHhIRUtoYnRjVEtZQWQ%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3%7Cs&nocache=4711723044032524&num=0&output=afd_ads&domain_name=www.megacybernews.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1723044032533&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=657227691&rurl=https%3A%2F%2Fwww.megacybernews.com%2Fstage3.ps1
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintA6:0A:39:C6:7C:75:70:95:1C:CC:6E:1F:5D:AF:3C:FD:47:BB:4D:A0
ValidityTue, 30 Jul 2024 12:49:08 GMT - Tue, 22 Oct 2024 12:49:07 GMT

File type
SVG Scalable Vector Graphics image
Size
174 B (174 bytes)
Hash
11b3089d616633ca6b73b57aa877eeb4
07632f63e06b30d9b63c97177d3a8122629bda9b
809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Aug 2024 11:51:11 GMT
expires: Thu, 08 Aug 2024 10:51:11 GMT
cache-control: public, max-age=82800
age: 12561
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.131

471 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fe018ebc96b419feb43c074a878577fc
47e00934d4e9eef28cc0d6643e15e09f598f7a2d
63e53078c2838e290d7cc43aad4aa1a903e8b14b67f80a4e061cc9001b03ca39

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Aug 2024 15:20:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=8gnn0hk0vgrz&aqid=wJCzZtenJ9G0iM0Pv4OykA8&pbt=bs&adbx=490&adby=986.0499877929688&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=7%7C0%7C210%7C61%7C44&lle=0&ifv=1&hpt=0

172.217.21.174

204 No Content

0 B

URL GET HTTP/3
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=8gnn0hk0vgrz&aqid=wJCzZtenJ9G0iM0Pv4OykA8&pbt=bs&adbx=490&adby=986.0499877929688&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=7%7C0%7C210%7C61%7C44&lle=0&ifv=1&hpt=0
IP
172.217.21.174:443
ASN
#15169 GOOGLE

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintC0:13:68:7E:4C:B8:86:2A:AD:FE:9B:2F:EB:17:6F:94:F1:76:26:28
ValidityTue, 30 Jul 2024 12:54:31 GMT - Tue, 22 Oct 2024 12:54:30 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=8gnn0hk0vgrz&aqid=wJCzZtenJ9G0iM0Pv4OykA8&pbt=bs&adbx=490&adby=986.0499877929688&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=7%7C0%7C210%7C61%7C44&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-1a-wuc-ez24eWdwqYWePOA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 07 Aug 2024 15:20:34 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=re9q4k57t5u5&aqid=wJCzZtenJ9G0iM0Pv4OykA8&psid=3259787283&pbt=bs&adbx=392&adby=413.04998779296875&adbh=532&adbw=496&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=18%7C0%7C199%7C61%7C44&lle=0&ifv=1&hpt=0

172.217.21.174

204 No Content

0 B

URL GET HTTP/3
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=re9q4k57t5u5&aqid=wJCzZtenJ9G0iM0Pv4OykA8&psid=3259787283&pbt=bs&adbx=392&adby=413.04998779296875&adbh=532&adbw=496&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=18%7C0%7C199%7C61%7C44&lle=0&ifv=1&hpt=0
IP
172.217.21.174:443
ASN
#15169 GOOGLE

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintC0:13:68:7E:4C:B8:86:2A:AD:FE:9B:2F:EB:17:6F:94:F1:76:26:28
ValidityTue, 30 Jul 2024 12:54:31 GMT - Tue, 22 Oct 2024 12:54:30 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=re9q4k57t5u5&aqid=wJCzZtenJ9G0iM0Pv4OykA8&psid=3259787283&pbt=bs&adbx=392&adby=413.04998779296875&adbh=532&adbw=496&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=18%7C0%7C199%7C61%7C44&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-qECGHw-3LSezevYAnBaJWQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 07 Aug 2024 15:20:34 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=ti0haytzd79l&aqid=wJCzZtenJ9G0iM0Pv4OykA8&psid=3259787283&pbt=bv&adbx=392&adby=413.04998779296875&adbh=532&adbw=496&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=18%7C0%7C199%7C61%7C44&lle=0&ifv=1&hpt=0

172.217.21.174

204 No Content

0 B

URL GET HTTP/3
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=ti0haytzd79l&aqid=wJCzZtenJ9G0iM0Pv4OykA8&psid=3259787283&pbt=bv&adbx=392&adby=413.04998779296875&adbh=532&adbw=496&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=18%7C0%7C199%7C61%7C44&lle=0&ifv=1&hpt=0
IP
172.217.21.174:443
ASN
#15169 GOOGLE

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintC0:13:68:7E:4C:B8:86:2A:AD:FE:9B:2F:EB:17:6F:94:F1:76:26:28
ValidityTue, 30 Jul 2024 12:54:31 GMT - Tue, 22 Oct 2024 12:54:30 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=ti0haytzd79l&aqid=wJCzZtenJ9G0iM0Pv4OykA8&psid=3259787283&pbt=bv&adbx=392&adby=413.04998779296875&adbh=532&adbw=496&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=18%7C0%7C199%7C61%7C44&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-T3grkS9VL0Apottaubvk7g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 07 Aug 2024 15:20:34 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=2dx9e06jyseb&aqid=wJCzZtenJ9G0iM0Pv4OykA8&pbt=bv&adbx=490&adby=986.0499877929688&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=7%7C0%7C210%7C61%7C44&lle=0&ifv=1&hpt=0

172.217.21.174

204 No Content

0 B

URL GET HTTP/3
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=2dx9e06jyseb&aqid=wJCzZtenJ9G0iM0Pv4OykA8&pbt=bv&adbx=490&adby=986.0499877929688&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=7%7C0%7C210%7C61%7C44&lle=0&ifv=1&hpt=0
IP
172.217.21.174:443
ASN
#15169 GOOGLE

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintC0:13:68:7E:4C:B8:86:2A:AD:FE:9B:2F:EB:17:6F:94:F1:76:26:28
ValidityTue, 30 Jul 2024 12:54:31 GMT - Tue, 22 Oct 2024 12:54:30 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=2dx9e06jyseb&aqid=wJCzZtenJ9G0iM0Pv4OykA8&pbt=bv&adbx=490&adby=986.0499877929688&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=657227691&csala=7%7C0%7C210%7C61%7C44&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-2l-Lzx4Ved55lk94ZGv4CA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 07 Aug 2024 15:20:34 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET www.megacybernews.com/stage3.ps1

91.195.240.19

200 OK

25 kB

URL User Request GET HTTP/2
www.megacybernews.com/stage3.ps1
IP
91.195.240.19:443
ASN
#47846 SEDO GmbH

Certificate
IssuerDigiCert Inc
Subjectwww.megacybernews.com
Fingerprint6E:DD:F1:89:5F:5B:FA:8C:56:4C:CC:70:E5:71:FE:55:39:FA:B2:71
ValidityWed, 31 Jul 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT

File type

Size
25 kB (24779 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /stage3.ps1 HTTP/1.1
Host: www.megacybernews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 07 Aug 2024 15:20:32 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 07 Aug 2024 15:20:32 GMT
pragma: no-cache
server: Parking/1.0
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_eyxnJxSrzQ9L5vUHKA75r8RvhA8yZIvtAfjk7drF+/sh0Wnp2Hkg8hqDDFJwyqKhHeK7TjtNWX8oK0pqfSLGDg==
x-cache-miss-from: parking-585cff59fc-twmkj
X-Firefox-Spdy: h2

GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2

142.250.74.97

200 OK

391 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww.megacybernews.com%2Fcaf%2F%3Fses%3DY3JlPTE3MjMwNDQwMzImdGNpZD13d3cubWVnYWN5YmVybmV3cy5jb202NmIzOTBjMDA1YTI3OC43NTk1OTUzNSZ0YXNrPXNlYXJjaCZkb21haW49bWVnYWN5YmVybmV3cy5jb20mYV9pZD0zJnNlc3Npb249bXpMSUtnRHhIRUtoYnRjVEtZQWQ%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3%7Cs&nocache=4711723044032524&num=0&output=afd_ads&domain_name=www.megacybernews.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1723044032533&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=657227691&rurl=https%3A%2F%2Fwww.megacybernews.com%2Fstage3.ps1
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintA6:0A:39:C6:7C:75:70:95:1C:CC:6E:1F:5D:AF:3C:FD:47:BB:4D:A0
ValidityTue, 30 Jul 2024 12:49:08 GMT - Tue, 22 Oct 2024 12:49:07 GMT

File type
SVG Scalable Vector Graphics image
Size
391 B (391 bytes)
Hash
ac5de5b2153fb616405aa018d56d88e6
0e4688e0df186c6f38eb5844fdfd8f9c5ff5628e
9b69e0728184d834e455835268e4f3973f5d25e18a1089bcb1d3280589848441

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 272
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Aug 2024 05:37:21 GMT
expires: Thu, 08 Aug 2024 04:37:21 GMT
cache-control: public, max-age=82800
age: 34991
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true

142.250.74.132

200 OK

155 kB

URL GET HTTP/2
www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://www.megacybernews.com/stage3.ps1
Certificate
IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint78:90:10:00:62:E9:32:D2:E2:99:72:73:B5:44:27:CB:98:2E:AD:29
ValidityTue, 30 Jul 2024 12:50:13 GMT - Tue, 22 Oct 2024 12:50:12 GMT

File type
JavaScript source, ASCII text, with very long lines (2250)
Size
155 kB (154794 bytes)
Hash
0a401cef0f6416821c0d1c0331fea105
a9a6a068de5ee91959d66079326da71fef82e412
b0c04ab9806ededb6cd8ae3f07e9cbf1d8f6be40f5c2f362f3ae9dba9b399dfc

HTTP Headers

GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.megacybernews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Wed, 07 Aug 2024 15:20:32 GMT
expires: Wed, 07 Aug 2024 15:20:32 GMT
cache-control: private, max-age=3600
etag: "6108713120255775345"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (33)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN