| |  103.224.182.210 | 302 Found | 7 B |
URL User Request GET HTTP/1.1IP103.224.182.210:80 ASN#133618 Trellian Pty. Limited
Hashc13232650a52f062168f1ffe8d68667b 4ee143558ff78a677fc3cceff17801350c7b2ed2 a420298d6c04951af7ed2239853829d9be842137bfbd6d47d07779dec1725954
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET / HTTP/1.1
Host: mcpack.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Sat, 01 Feb 2025 20:40:08 GMT
server: Apache
set-cookie: __tad=1738442408.8377455; expires=Tue, 30-Jan-2035 20:40:08 GMT; Max-Age=315360000
location: http://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7
content-length: 7
content-type: text/html; charset=UTF-8
connection: close
|
|
| ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7 | 199.59.243.228 | 200 OK | 1.2 kB |
URL User Request GET ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7 IP199.59.243.228:0
File typeHTML document, ASCII text, with very long lines (434) Hash72fad7c94a3fcffd38442d646e0fe815 5e0dbb85c42aa1cb79352330394dc349ae3c0f21 5e191f47121bc3fadb51da623865df5caba2855f7852c35c63e33887b3fd7adb
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /?subid1=20250202-0740-08d2-becb-8070fec8a6d7 HTTP/1.1
Host: ww25.mcpack.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 01 Feb 2025 20:40:08 GMT
content-type: text/html; charset=utf-8
content-length: 1166
x-request-id: c8a3e301-556c-4961-901a-f7b427349213
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_foRw/5JaoYXvTzxRDlLYYTFSniE24pFQdlJtSVDROj6PCjWQc4oHJelDJiC/pGWJWSeQTQs/VDNDCmWGmCLAIw==
set-cookie: parking_session=c8a3e301-556c-4961-901a-f7b427349213; expires=Sat, 01 Feb 2025 20:55:09 GMT; path=/
|
|
| ww25.mcpack.zip/bpuuyApyZ.js | 199.59.243.228 | 200 OK | 35 kB |
URL GET HTTP/1.1ww25.mcpack.zip/bpuuyApyZ.js IP199.59.243.228:80
Requested byhttp://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (35078) Hash9fbdc29d846cd2a0a8faade175b0cea7 9659006260c8fb9cf25502088480157eddc57510 27254ba5b1f3a0b1b9496a245166fc3a9301228f5c5c78ba1b5e35a1356c4182
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /bpuuyApyZ.js HTTP/1.1
Host: ww25.mcpack.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7
Cookie: parking_session=c8a3e301-556c-4961-901a-f7b427349213
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 01 Feb 2025 20:40:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 35081
x-request-id: 31b503e6-c7d3-4378-a09d-39df69a3e0be
set-cookie: parking_session=c8a3e301-556c-4961-901a-f7b427349213; expires=Sat, 01 Feb 2025 20:55:09 GMT
|
|
| ww25.mcpack.zip/_fd?subid1=20250202-0740-08d2-becb-8070fec8a6d7 | 199.59.243.228 | 200 OK | 5.3 kB |
URL POST HTTP/1.1ww25.mcpack.zip/_fd?subid1=20250202-0740-08d2-becb-8070fec8a6d7 IP199.59.243.228:80
Requested byhttp://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7
File typeASCII text, with very long lines (5269), with no line terminators Hash4e3f3ae411f1a310debcec32f728cd1f 14089daef06be580f441b00156d7ed388a124d49 9468cc00d3a037b7ee58e2035c8881cf7d5531e7e620c887cd5efca772dea7fe
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO HTTP Request to a *.zip Domain |
POST /_fd?subid1=20250202-0740-08d2-becb-8070fec8a6d7 HTTP/1.1
Host: ww25.mcpack.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7
Content-Type: application/json
Origin: http://ww25.mcpack.zip
DNT: 1
Connection: keep-alive
Cookie: parking_session=c8a3e301-556c-4961-901a-f7b427349213
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200 OK
date: Sat, 01 Feb 2025 20:40:09 GMT
content-type: application/json; charset=utf-8
content-length: 5269
x-request-id: 00c4a353-eda9-42a2-8354-87e1c72edc1b
set-cookie: parking_session=c8a3e301-556c-4961-901a-f7b427349213; expires=Sat, 01 Feb 2025 20:55:09 GMT
|
|
| www.google.com/adsense/domains/caf.js?abp=1&bodis=true | 142.250.74.68 | 200 OK | 54 kB |
URL GET HTTP/2www.google.com/adsense/domains/caf.js?abp=1&bodis=true IP142.250.74.68:443
Requested byhttp://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7 CertificateIssuerGoogle Trust Services Subjectwww.google.com FingerprintA5:8A:8C:6D:C5:D6:86:EA:BD:43:96:00:02:99:B8:C6:97:0C:AF:E5 ValidityMon, 20 Jan 2025 08:37:54 GMT - Mon, 14 Apr 2025 08:37:53 GMT
File typegzip compressed data, max compression Hash425928d1896e84714f4ee07ca0e440f7 72f09952596b26a2cb44411087a601bd067d743f bcb32018bd9f47175e6a5fa4ff911f6c2ec0966050f5490137dd5fa85dea055f
GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.mcpack.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 01 Feb 2025 20:40:09 GMT
expires: Sat, 01 Feb 2025 20:40:09 GMT
cache-control: private, max-age=3600
etag: "16197818528327903789"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol120%2Cpid-bodis-gcontrol482%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.mcpack.zip%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250202-0740-08d2-becb-8070fec8a6d7&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2589285024539458&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301266%2C72717108&format=r3&nocache=8761738442409901&num=0&output=afd_ads&domain_name=ww25.mcpack.zip&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738442409903&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=721100514&rurl=http%3A%2F%2Fww25.mcpack.zip%2F%3Fsubid1%3D20250202-0740-08d2-becb-8070fec8a6d7 | 216.58.207.238 | 200 OK | 2.7 kB |
URL GET HTTP/2syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol120%2Cpid-bodis-gcontrol482%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.mcpack.zip%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250202-0740-08d2-becb-8070fec8a6d7&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2589285024539458&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301266%2C72717108&format=r3&nocache=8761738442409901&num=0&output=afd_ads&domain_name=ww25.mcpack.zip&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738442409903&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=721100514&rurl=http%3A%2F%2Fww25.mcpack.zip%2F%3Fsubid1%3D20250202-0740-08d2-becb-8070fec8a6d7 IP216.58.207.238:443
Requested byhttp://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78 ValidityMon, 20 Jan 2025 08:39:11 GMT - Mon, 14 Apr 2025 08:39:10 GMT
File typeHTML document, ASCII text, with very long lines (13218) Hash9c8ba4d31e8ebdfbcf1977f10992a409 924c2b3a8d6c34ed2a01bdf16ce8f4b6ef583a91 deb6a33f02aac5054e11d613aa46e9cab5cfbffd70f5749b59aac09f02e1b34b
GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol120%2Cpid-bodis-gcontrol482%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.mcpack.zip%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250202-0740-08d2-becb-8070fec8a6d7&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2589285024539458&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301266%2C72717108&format=r3&nocache=8761738442409901&num=0&output=afd_ads&domain_name=ww25.mcpack.zip&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738442409903&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=721100514&rurl=http%3A%2F%2Fww25.mcpack.zip%2F%3Fsubid1%3D20250202-0740-08d2-becb-8070fec8a6d7 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.mcpack.zip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Sat, 01 Feb 2025 20:40:10 GMT
expires: Sat, 01 Feb 2025 20:40:10 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Vjg-YkaZplwLFnGkfZZ1Cw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2743
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ww25.mcpack.zip/_tr | 199.59.243.228 | 200 OK | 2 B |
IP199.59.243.228:80
Requested byhttp://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /_tr HTTP/1.1
Host: ww25.mcpack.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7
Content-Type: application/json
Content-Length: 2009
Origin: http://ww25.mcpack.zip
DNT: 1
Connection: keep-alive
Cookie: parking_session=c8a3e301-556c-4961-901a-f7b427349213
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 01 Feb 2025 20:40:09 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-request-id: 50189adc-6910-4816-a974-9607230db5d2
set-cookie: parking_session=c8a3e301-556c-4961-901a-f7b427349213; expires=Sat, 01 Feb 2025 20:55:10 GMT
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff | 142.250.74.33 | 200 OK | 174 B |
URL GET HTTP/2afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol120%2Cpid-bodis-gcontrol482%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.mcpack.zip%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250202-0740-08d2-becb-8070fec8a6d7&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2589285024539458&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301266%2C72717108&format=r3&nocache=8761738442409901&num=0&output=afd_ads&domain_name=ww25.mcpack.zip&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738442409903&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=721100514&rurl=http%3A%2F%2Fww25.mcpack.zip%2F%3Fsubid1%3D20250202-0740-08d2-becb-8070fec8a6d7 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintC8:CC:73:3C:09:B6:EA:83:B3:FA:9E:8C:00:A3:C5:10:94:1A:0A:E7 ValidityMon, 20 Jan 2025 08:37:02 GMT - Mon, 14 Apr 2025 08:37:01 GMT
File typeSVG Scalable Vector Graphics image Hash11b3089d616633ca6b73b57aa877eeb4 07632f63e06b30d9b63c97177d3a8122629bda9b 809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Feb 2025 08:32:58 GMT
expires: Sun, 02 Feb 2025 07:32:58 GMT
cache-control: public, max-age=82800
age: 43632
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b | 142.250.74.33 | 200 OK | 174 B |
URL GET HTTP/2afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol120%2Cpid-bodis-gcontrol482%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.mcpack.zip%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250202-0740-08d2-becb-8070fec8a6d7&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2589285024539458&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301266%2C72717108&format=r3&nocache=8761738442409901&num=0&output=afd_ads&domain_name=ww25.mcpack.zip&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738442409903&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=721100514&rurl=http%3A%2F%2Fww25.mcpack.zip%2F%3Fsubid1%3D20250202-0740-08d2-becb-8070fec8a6d7 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintC8:CC:73:3C:09:B6:EA:83:B3:FA:9E:8C:00:A3:C5:10:94:1A:0A:E7 ValidityMon, 20 Jan 2025 08:37:02 GMT - Mon, 14 Apr 2025 08:37:01 GMT
File typeSVG Scalable Vector Graphics image Hashd47125b2ba92be53dcff07ba322ce1de e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28 5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 31 Jan 2025 22:14:05 GMT
expires: Sat, 01 Feb 2025 21:14:05 GMT
cache-control: public, max-age=82800
age: 80765
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=7jpp3e8ovbha&aqid=qoaeZ-K7BJ-AxdwP3bG2-AQ&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=721100514&csala=6%7C0%7C356%7C96%7C15&lle=0&ifv=1&hpt=0 | 216.58.207.238 | 204 No Content | 0 B |
URL GET HTTP/3syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=7jpp3e8ovbha&aqid=qoaeZ-K7BJ-AxdwP3bG2-AQ&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=721100514&csala=6%7C0%7C356%7C96%7C15&lle=0&ifv=1&hpt=0 IP216.58.207.238:443
Requested byhttp://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78 ValidityMon, 20 Jan 2025 08:39:11 GMT - Mon, 14 Apr 2025 08:39:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=7jpp3e8ovbha&aqid=qoaeZ-K7BJ-AxdwP3bG2-AQ&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=721100514&csala=6%7C0%7C356%7C96%7C15&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.mcpack.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-rDrcSJbOFsIgOjwjwvLsow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 01 Feb 2025 20:40:11 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=du5ji17oojpu&aqid=qoaeZ-K7BJ-AxdwP3bG2-AQ&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=721100514&csala=6%7C0%7C356%7C96%7C15&lle=0&ifv=1&hpt=0 | 216.58.207.238 | 204 No Content | 0 B |
URL GET HTTP/3syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=du5ji17oojpu&aqid=qoaeZ-K7BJ-AxdwP3bG2-AQ&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=721100514&csala=6%7C0%7C356%7C96%7C15&lle=0&ifv=1&hpt=0 IP216.58.207.238:443
Requested byhttp://ww25.mcpack.zip/?subid1=20250202-0740-08d2-becb-8070fec8a6d7 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78 ValidityMon, 20 Jan 2025 08:39:11 GMT - Mon, 14 Apr 2025 08:39:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=du5ji17oojpu&aqid=qoaeZ-K7BJ-AxdwP3bG2-AQ&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=721100514&csala=6%7C0%7C356%7C96%7C15&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.mcpack.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-f9dBjJqOP_d65fGmLMA-HA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 01 Feb 2025 20:40:11 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| syndicatedsearch.goog/adsense/domains/caf.js | 216.58.207.238 | 200 OK | 147 kB |
URL GET HTTP/3syndicatedsearch.goog/adsense/domains/caf.js IP216.58.207.238:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol120%2Cpid-bodis-gcontrol482%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.mcpack.zip%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250202-0740-08d2-becb-8070fec8a6d7&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2589285024539458&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301266%2C72717108&format=r3&nocache=8761738442409901&num=0&output=afd_ads&domain_name=ww25.mcpack.zip&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738442409903&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=721100514&rurl=http%3A%2F%2Fww25.mcpack.zip%2F%3Fsubid1%3D20250202-0740-08d2-becb-8070fec8a6d7 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78 ValidityMon, 20 Jan 2025 08:39:11 GMT - Mon, 14 Apr 2025 08:39:10 GMT
File typeJavaScript source, ASCII text, with very long lines (1869) Size147 kB (147307 bytes) Hash62ccc4d5eff9de5890fa2873f19f289e ff430cba780044079004224def0289e2b4e278fd 5c108610973cb98ff2f2f057c0d54489ffbb5d12b30779501ff8df672e008135
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 01 Feb 2025 20:40:10 GMT
expires: Sat, 01 Feb 2025 20:40:10 GMT
cache-control: private, max-age=3600
etag: "5049438898672631220"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
103.224.182.210