Report - megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==

Report Overview

Visited public
2024-07-08 17:12:08
Tags
URL
megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Finishing URL
megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
IP / ASN
188.114.96.1
#13335 CLOUDFLARENET
Title
S01E03-Human Shock [E4FBFDCA].mkv

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-07 18:12:32	2.3 kB	6.2 kB	23.36.77.32
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2024-07-07 20:20:21	424 B	30 kB	104.17.24.14
proftrafficcounter.com	unknown	2023-11-16	2023-11-21 09:55:14	2024-07-08 02:03:11	906 B	706 B	3.124.140.205
megaf.cc	unknown	2024-06-23	2024-06-24 08:27:08	2024-07-05 08:03:44	4.0 kB	317 kB	188.114.96.1
unseenreport.com	unknown	2022-03-30	2022-03-30 16:33:17	2024-07-07 20:10:08	728 B	471 B	192.243.59.12
recordedthereby.com	unknown	2024-05-08	2024-05-14 07:24:53	2024-07-07 19:33:46	395 B	86 kB	172.67.208.217
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-07-07 18:18:08	327 B	887 B	23.33.119.57
precedelaxative.com	unknown	2024-06-13	2024-06-17 09:27:27	2024-07-07 23:32:10	431 B	18 kB	172.240.108.76
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21 01:06:24	2024-07-08 05:24:12	338 B	942 B	108.156.16.76
capaciousdrewreligion.com	unknown	2023-11-07	2023-11-27 13:27:45	2024-07-07 23:32:11	407 B	375 B	192.243.61.225

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-07-08	medium	unseenreport.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	From	Size	First Seen	Last Seen
	unknown	ScriptElement	32 B	2023-03-07	2025-04-11
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:24 Last Seen2025-04-11 19:07 Times Seen188 Hash 16952761300c866b8cd44e2c66250ed3 b46eda62fd58298bac362e61042293f38304b3b9 7653f123e669cb603e8c8f870e9f02b9669d7af8780311e97f7dcdd3e895787a Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/1.9.0/jquery.min.js	ScriptElement	93 kB	2023-03-07	2025-05-02
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/1.9.0/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-05-02 13:13 Times Seen1724 Hash 0652da382b6fceb033dfe2b6c06d4d11 002da8cbe90fcf32fbdebb72386125079e3805ee 7fa0d5c3f538c76f878e012ac390597faecaabfe6fb9d459b919258e76c5df8e Loading...

	capaciousdrewreligion.com/advertisers.js	ScriptElement	0 B	0001-01-01	2025-05-03
Pretty URL capaciousdrewreligion.com/advertisers.js IP 192.243.61.225 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen0001-01-01 00:00 Last Seen2025-05-03 03:23 Times Seen4599507 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	megaf.cc/futoken	ScriptElement	257 B	2024-08-19	2024-08-19
Pretty URL megaf.cc/futoken IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-19 17:36 Last Seen2024-08-19 17:36 Times Seen1 Hash d07f7a9176d8cc4985464b79d52d3964 a0a2adb82a9151884d9695fedd428eb741e585a0 d2ae8fda1024acc43fe899a7227a26f5f6743b30572ae5050239b929687af7c4 Loading...

	megaf.cc/assets/megaf/min/embed.js?v=190828e02c2	ScriptElement	192 kB	2024-07-07	2024-08-19
Pretty URL megaf.cc/assets/megaf/min/embed.js?v=190828e02c2 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-07-07 21:58 Last Seen2024-08-19 17:41 Times Seen4 Hash 14b28d720c9b4e9cf4f066749fbf08be b3ca0ca733712680fb75f2eb76bc007709c2e6e2 c58e51880b319bee25d83f127cbf26b6f34e2bae675f04111221d2b0e52e89e4 Loading...

	recordedthereby.com/sfp.js	ScriptElement	85 kB	2024-05-17	2025-01-21
Pretty URL recordedthereby.com/sfp.js IP 172.67.208.217 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-17 16:43 Last Seen2025-01-21 11:22 Times Seen13574 Hash 7e3e44049654b6e244c1777e68ffb8e7 8f2a8298666d607afd92a0baa362ef4dc9ccd039 4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b Loading...

	megaf.cc/assets/players/jwplayer-8.26.9/jwplayer.js?v1	ScriptElement	110 kB	2024-04-24	2024-08-29
Pretty URL megaf.cc/assets/players/jwplayer-8.26.9/jwplayer.js?v1 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 22:22 Last Seen2024-08-29 18:14 Times Seen164 Hash a27042e4168b8224e40c7f36c3a36d1e ba1f8b5fc524e8e96a57682a00bb689d174fb600 a37e9266fd7dad068329b7af30e5c3c4982611b2be7cceb649aa9b61f4fc68cf Loading...

	precedelaxative.com/52/ba/41/52ba419ba307b72ff4090aea25de5317.js	ScriptElement	41 kB	2024-08-19	2024-08-19
Pretty URL precedelaxative.com/52/ba/41/52ba419ba307b72ff4090aea25de5317.js IP 172.240.108.76 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-19 17:36 Last Seen2024-08-19 17:36 Times Seen1 Hash 4c6a4428bfe713d236bbbf327802b94c fd3d614569865f702e2140af46c51e50f9c4167b c97d98a307893a830ab0da54a78d70128b35fd8a3080cb040c9fc3298a2724f0 Loading...

HTTP Transactions (24)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
b34ca6af54e2b9fea57d418f5d1928f7
510b69f4470789a573217726d6f1a3d6ee765460
41e6a348aac9e9db44bfa14b3aa29d411f4489b375ae1f1be6b0d280af98541d

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "41E6A348AAC9E9DB44BFA14B3AA29D411F4489B375AE1F1BE6B0D280AF98541D"
Last-Modified: Mon, 08 Jul 2024 01:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6365
Expires: Mon, 08 Jul 2024 18:57:47 GMT
Date: Mon, 08 Jul 2024 17:11:42 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
abec3934929082bd707108b7042796da
4f200b04ad1c6fcac9833107c492a59ebf36dc6e
8e27309b919c0dcb3b0736dd99dad8c7d3bc16b4816dd982e6af6b79d7ead9ed

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8E27309B919C0DCB3B0736DD99DAD8C7D3BC16B4816DD982E6AF6B79D7EAD9ED"
Last-Modified: Sun, 07 Jul 2024 03:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19566
Expires: Mon, 08 Jul 2024 22:37:48 GMT
Date: Mon, 08 Jul 2024 17:11:42 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
41036a4c62e61466443bce27a927e029
39a2a8a258c5feaf020246696135700b0c30740d
e38b3080a1752122f5a174604bd307c54be31c02e0cdb8e2d9354e2a04e1b50f

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E38B3080A1752122F5A174604BD307C54BE31C02E0CDB8E2D9354E2A04E1B50F"
Last-Modified: Sun, 07 Jul 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11169
Expires: Mon, 08 Jul 2024 20:17:52 GMT
Date: Mon, 08 Jul 2024 17:11:43 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
c1f3573a71cfe2a8f30b3fbc7d2d3453
101371f5030c41e4dad4e1e6ac102342db020318
74180138e5609f4047b5a20bc58bfd360dea9bba200acf14fd43fc2d6b5da34b

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "74180138E5609F4047B5A20BC58BFD360DEA9BBA200ACF14FD43FC2D6B5DA34B"
Last-Modified: Sun, 07 Jul 2024 04:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15583
Expires: Mon, 08 Jul 2024 21:31:26 GMT
Date: Mon, 08 Jul 2024 17:11:43 GMT
Connection: keep-alive

cdnjs.cloudflare.com/ajax/libs/jquery/1.9.0/jquery.min.js

104.17.24.14

200 OK

30 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/1.9.0/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT

File type
JavaScript source, ASCII text, with very long lines (32132)
Size
30 kB (29505 bytes)
Hash
0652da382b6fceb033dfe2b6c06d4d11
002da8cbe90fcf32fbdebb72386125079e3805ee
7fa0d5c3f538c76f878e012ac390597faecaabfe6fb9d459b919258e76c5df8e

HTTP Headers

GET /ajax/libs/jquery/1.9.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 08 Jul 2024 17:11:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 29505
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-16b8c"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 146695
expires: Sat, 28 Jun 2025 17:11:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4et03SCaVLUf4zR8nk8tQoWLALy10iAUeIZvUaS73JiEFftbw1jPwYiqslilMVg3RWdmpPmmnSr6oJbk%2FAHgrKg7jZJ7WeO57sbC%2FZBiaNv46GkOynjE%2BWUF3PWxOHufPp93F%2FPA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a01b1f22e21712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

r11.o.lencr.org/

23.33.119.57

504 B

URL
r11.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
62f5d3df49667b57d2cd255f0e1419bf
e0f2238fe7fd4944428eb639518e5dad4cf747f1
96f6dea70d67e66b307cb8f9c36392b7084b8b2b42f4a9321494132c7b69578f

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "96F6DEA70D67E66B307CB8F9C36392B7084B8B2B42F4A9321494132C7B69578F"
Last-Modified: Sat, 06 Jul 2024 14:06:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3890
Expires: Mon, 08 Jul 2024 18:16:33 GMT
Date: Mon, 08 Jul 2024 17:11:43 GMT
Connection: keep-alive

precedelaxative.com/52/ba/41/52ba419ba307b72ff4090aea25de5317.js

172.240.108.76

200 OK

17 kB

URL GET HTTP/1.1
precedelaxative.com/52/ba/41/52ba419ba307b72ff4090aea25de5317.js
IP
172.240.108.76:443
ASN
#7979 SERVERS-COM

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerLet's Encrypt
Subjectprecedelaxative.com
Fingerprint7B:48:55:CB:3B:08:29:E9:A7:CF:74:37:13:68:94:14:E1:C9:18:46
ValidityThu, 13 Jun 2024 12:28:58 GMT - Wed, 11 Sep 2024 12:28:57 GMT

File type
JavaScript source, ASCII text, with very long lines (40631), with no line terminators
Size
17 kB (16674 bytes)
Hash
4c6a4428bfe713d236bbbf327802b94c
fd3d614569865f702e2140af46c51e50f9c4167b
c97d98a307893a830ab0da54a78d70128b35fd8a3080cb040c9fc3298a2724f0

HTTP Headers

GET /52/ba/41/52ba419ba307b72ff4090aea25de5317.js HTTP/1.1
Host: precedelaxative.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 08 Jul 2024 17:11:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: bdbd5e27ec13c1b6b338ddd70f19937d
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

ocsp.r2m03.amazontrust.com/

108.156.16.76

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
108.156.16.76:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
27583430e8a7459b4afab90de9e527d4
47838cb55ded3cf9b39be3da96f01da8c2e9e943
a00287a67674077542c20368501fe76aad7e7a3c17a4c3cb44823ada80c50260

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 08 Jul 2024 17:11:44 GMT
Last-Modified: Mon, 08 Jul 2024 16:01:31 GMT
Server: ECAcc (ska/F77E)
X-Cache: Miss from cloudfront
Via: 1.1 d3e98d8cca4d16199794e4f4191b942c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HEL51-P1
X-Amz-Cf-Id: URnx5x9EigAfnRx0U8q_y4jdiE9UIYNzs95Vm2o6HYxtmw_QVtNNqg==
Age: 4213

proftrafficcounter.com/stats

3.124.140.205

200 OK

40 B

URL GET HTTP/2
proftrafficcounter.com/stats
IP
3.124.140.205:443
ASN
#16509 AMAZON-02

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
fe9ce2042680163dd8f5bb42b1e032d8
c398c42723646577aa641249274595fab66c5c8f
f1a62a7dcf015d33d710d3fc00f8ecab6fe466260b61d5c315c86b263e4d504d

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://megaf.cc
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 08 Jul 2024 17:11:44 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://megaf.cc
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=ff094f5e-b312-4e26-820d-20db1b38244c:2:1; expires=Thu, 06 Jul 2034 17:11:44 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

proftrafficcounter.com/stats

3.124.140.205

200 OK

40 B

URL GET HTTP/2
proftrafficcounter.com/stats
IP
3.124.140.205:443
ASN
#16509 AMAZON-02

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
fe9ce2042680163dd8f5bb42b1e032d8
c398c42723646577aa641249274595fab66c5c8f
f1a62a7dcf015d33d710d3fc00f8ecab6fe466260b61d5c315c86b263e4d504d

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://megaf.cc
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/
Cookie: uid_id2=ff094f5e-b312-4e26-820d-20db1b38244c:2:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 08 Jul 2024 17:11:44 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://megaf.cc
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2

megaf.cc/mediainfo/XXFPuqkC5oLQroElKbttTjDCIvAYkwg=,131,159,135,199,226,220,206,180?autostart=true&t=4xjSCfEjDFUOzw==

188.114.96.1

200 OK

47 B

URL GET HTTP/3
megaf.cc/mediainfo/XXFPuqkC5oLQroElKbttTjDCIvAYkwg=,131,159,135,199,226,220,206,180?autostart=true&t=4xjSCfEjDFUOzw==
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerGoogle Trust Services
Subjectmegaf.cc
FingerprintF3:DD:CD:2C:5A:AD:29:04:14:E0:66:92:F0:1E:57:F1:21:59:C2:97
ValiditySun, 23 Jun 2024 00:35:22 GMT - Sat, 21 Sep 2024 00:35:21 GMT

File type
JSON text data
Size
47 B (47 bytes)
Hash
dda637063babed9e547b6c184601870e
59fea41b192a803d60d99bdd8feed46e789764ff
fbf9f1885d6ae7bedd2c616dd2522ababc010c1e69977c8be6ebd32ce7af8762

HTTP Headers

GET /mediainfo/XXFPuqkC5oLQroElKbttTjDCIvAYkwg=,131,159,135,199,226,220,206,180?autostart=true&t=4xjSCfEjDFUOzw== HTTP/1.1
Host: megaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 08 Jul 2024 17:11:44 GMT
content-type: application/json
content-encoding: gzip
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8g0A2Qkx2e7N5mnashIG6yHRB4FOJ4344B9GFkBYwfKz0v1r2wEyyfPM4n5HCSj8RlftF8oUInbZtvScSIdJ4sPjUrezcWU2o41bfGGlkfY94pAt8Z6JEaGewA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a01b1f738c85694-OSL
alt-svc: h3=":443"; ma=86400

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
4a706e8efcbd81e50fd7519ec3b0c6b8
c88a67043e8ffce764e9b8846b01129caa90f585
5e757464f414933a51343953a555d26d54121572e798bf63ae8c1a02c2e93a05

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5E757464F414933A51343953A555D26D54121572E798BF63AE8C1A02C2E93A05"
Last-Modified: Sun, 07 Jul 2024 21:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8732
Expires: Mon, 08 Jul 2024 19:37:16 GMT
Date: Mon, 08 Jul 2024 17:11:44 GMT
Connection: keep-alive

capaciousdrewreligion.com/advertisers.js

192.243.61.225

200 OK

0 B

URL GET HTTP/1.1
capaciousdrewreligion.com/advertisers.js
IP
192.243.61.225:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerLet's Encrypt
Subjectcapaciousdrewreligion.com
Fingerprint4F:7A:98:8B:B8:01:70:75:3B:62:EF:6C:AD:DF:DE:E7:07:37:5E:83
ValidityFri, 05 Jul 2024 07:55:21 GMT - Thu, 03 Oct 2024 07:55:20 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 08 Jul 2024 17:11:45 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8bc5cb3dddeb5a5fe21a739dbac8ee1d
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

unseenreport.com/pxf.gif?uuid=ff094f5e-b312-4e26-820d-20db1b38244c&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=52ba419ba307b72ff4090aea25de5317&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17

192.243.59.12

200 OK

1 B

URL GET HTTP/1.1
unseenreport.com/pxf.gif?uuid=ff094f5e-b312-4e26-820d-20db1b38244c&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=52ba419ba307b72ff4090aea25de5317&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerLet's Encrypt
Subject*.unseenreport.com
FingerprintF5:95:0F:2B:01:D6:36:49:AB:2E:61:76:F7:EC:A5:45:3D:F1:0E:59
ValidityTue, 21 May 2024 07:36:27 GMT - Mon, 19 Aug 2024 07:36:26 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pxf.gif?uuid=ff094f5e-b312-4e26-820d-20db1b38244c&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=52ba419ba307b72ff4090aea25de5317&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 08 Jul 2024 17:11:45 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d450ecc0c36306a5a1797d433e5ec8bc
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
d7b2c37e4b6c062d80ad32046f42d3d8
131cd5c2ca2a258c3cf11746f94cfd43a6a4f04c
317f60a1498c7b52833955e8a54a0ba66b5b8dc9e9862c2ac262b874d491fce2

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "317F60A1498C7B52833955E8A54A0BA66B5B8DC9E9862C2AC262B874D491FCE2"
Last-Modified: Mon, 08 Jul 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6442
Expires: Mon, 08 Jul 2024 18:59:07 GMT
Date: Mon, 08 Jul 2024 17:11:45 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
d7b2c37e4b6c062d80ad32046f42d3d8
131cd5c2ca2a258c3cf11746f94cfd43a6a4f04c
317f60a1498c7b52833955e8a54a0ba66b5b8dc9e9862c2ac262b874d491fce2

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "317F60A1498C7B52833955E8A54A0BA66B5B8DC9E9862C2AC262B874D491FCE2"
Last-Modified: Mon, 08 Jul 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6442
Expires: Mon, 08 Jul 2024 18:59:07 GMT
Date: Mon, 08 Jul 2024 17:11:45 GMT
Connection: keep-alive

megaf.cc/favicon.ico

188.114.96.1

200 OK

0 B

URL GET HTTP/3
megaf.cc/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerGoogle Trust Services
Subjectmegaf.cc
FingerprintF3:DD:CD:2C:5A:AD:29:04:14:E0:66:92:F0:1E:57:F1:21:59:C2:97
ValiditySun, 23 Jun 2024 00:35:22 GMT - Sat, 21 Sep 2024 00:35:21 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: megaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=ff094f5e-b312-4e26-820d-20db1b38244c%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 08 Jul 2024 17:11:44 GMT
content-type: image/x-icon
content-length: 0
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Sun, 07 Jul 2024 21:21:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fkeUc%2FoOO5EBc7Tt%2BkYqGHqScEHKfqVD0tJgbXj99eFyedTa%2Fa%2B0q7SorhjMyEvJx07%2BfD9OOPDKQxIXrYB4MfPzeqOioUhzuIFEUslEtqw5NfLhMhVkwy514A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a01b1f7e94c5694-OSL
alt-svc: h3=":443"; ma=86400

megaf.cc/futoken

188.114.96.1

200 OK

257 B

URL GET HTTP/3
megaf.cc/futoken
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerGoogle Trust Services
Subjectmegaf.cc
FingerprintF3:DD:CD:2C:5A:AD:29:04:14:E0:66:92:F0:1E:57:F1:21:59:C2:97
ValiditySun, 23 Jun 2024 00:35:22 GMT - Sat, 21 Sep 2024 00:35:21 GMT

File type
JavaScript source, ASCII text, with no line terminators
Size
257 B (257 bytes)
Hash
d07f7a9176d8cc4985464b79d52d3964
a0a2adb82a9151884d9695fedd428eb741e585a0
d2ae8fda1024acc43fe899a7227a26f5f6743b30572ae5050239b929687af7c4

HTTP Headers

GET /futoken HTTP/1.1
Host: megaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 08 Jul 2024 17:11:43 GMT
m-cache: MISS
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tsvk1zKbAgoj7IMCoGzeBBIAt1aTsBnigLYsrcTWBafXAZxEwx5UwD5CM7TgI%2F7%2BEypMxE2JzLY4b5O4MeGHr3NvVOwickVLp2GHquTayWhfF2aIp7a7jetx7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a01b1f1db7e5694-OSL
alt-svc: h3=":443"; ma=86400

megaf.cc/assets/players/jwplayer-8.26.9/jwplayer.js?v1

188.114.96.1

200 OK

110 kB

URL GET HTTP/3
megaf.cc/assets/players/jwplayer-8.26.9/jwplayer.js?v1
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerGoogle Trust Services
Subjectmegaf.cc
FingerprintF3:DD:CD:2C:5A:AD:29:04:14:E0:66:92:F0:1E:57:F1:21:59:C2:97
ValiditySun, 23 Jun 2024 00:35:22 GMT - Sat, 21 Sep 2024 00:35:21 GMT

File type

Size
110 kB (109779 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/players/jwplayer-8.26.9/jwplayer.js?v1 HTTP/1.1
Host: megaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 08 Jul 2024 17:11:43 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 22:03:52 GMT
etag: W/"6508c948-1acd3"
content-encoding: gzip
m-cache: MISS
expires: Sun, 04 Aug 2024 08:45:51 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 289552
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z5NHCAxC5fhT0P1eEmuwBxR6UQG3Qo%2Fv0Ibpx72veI9qfaFVAtnL4lcr3AncaAgJIJbMpXqm02alT3gOshlBMvq6q8sgw8MwckGllgBp8n7ZV0GUbRhcpB4uNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a01b1f1db7f5694-OSL
alt-svc: h3=":443"; ma=86400

megaf.cc/views/4560192

188.114.96.1

200 OK

2 B

URL GET HTTP/3
megaf.cc/views/4560192
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerGoogle Trust Services
Subjectmegaf.cc
FingerprintF3:DD:CD:2C:5A:AD:29:04:14:E0:66:92:F0:1E:57:F1:21:59:C2:97
ValiditySun, 23 Jun 2024 00:35:22 GMT - Sat, 21 Sep 2024 00:35:21 GMT

File type
ASCII text, with no line terminators
Size
2 B (2 bytes)
Hash
287cd259983857b60dc5dbd6a4646622
90830c99d74f2659a1de25cfc7462300ff6a707a
d7ba931039dc47c9446b4a5fabc6b7044d758be4d858c142eed91fdc7565ee1c

HTTP Headers

GET /views/4560192 HTTP/1.1
Host: megaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 08 Jul 2024 17:11:44 GMT
content-type: text/html
m-cache: BYPASS
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KeOtiKU0omcpEPH%2F32K7zCrYzCFM%2F5%2F4nroeBPM8AbCtTl6s%2Fg88pxcNiCm%2BBWt4CvbLCL%2BmhwqzD8WxvMJbWAcDj1sjgq4jLoIWZ%2FRpn81Kbo1Nwlix2NR8TQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a01b1f708985694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

recordedthereby.com/sfp.js

172.67.208.217

200 OK

85 kB

URL GET HTTP/2
recordedthereby.com/sfp.js
IP
172.67.208.217:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerGoogle Trust Services
Subjectrecordedthereby.com
FingerprintA1:CB:3E:AF:CE:F5:E9:D2:26:FB:E2:D4:FE:4B:29:D2:B3:C9:AD:3B
ValiditySat, 06 Jul 2024 15:25:15 GMT - Fri, 04 Oct 2024 15:25:14 GMT

File type

Size
85 kB (85378 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 08 Jul 2024 17:11:44 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, max-age=0, private, no-cache
x-request-id: 162c6876a9df7ebe9faa4189bf0b4e7e
pragma: no-cache
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vXAS7LGowSfcOFqPoaR%2FvHbqLht2xVPVNNQ2NMWgMj6jx35mSGUVw4YS2wgQT4BF1II47m06i8CXZ%2BSB0tF0A%2F3IudJcHvb9RRwUlpE0HSrJd%2FC1SZKQ6APANyWigKTfKcxWxkeg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a01b1f5ca2d1c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

megaf.cc/assets/megaf/min/embed.css?v=190828cf0c7

188.114.96.1

200 OK

8.5 kB

URL GET HTTP/3
megaf.cc/assets/megaf/min/embed.css?v=190828cf0c7
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerGoogle Trust Services
Subjectmegaf.cc
FingerprintF3:DD:CD:2C:5A:AD:29:04:14:E0:66:92:F0:1E:57:F1:21:59:C2:97
ValiditySun, 23 Jun 2024 00:35:22 GMT - Sat, 21 Sep 2024 00:35:21 GMT

File type
ASCII text, with very long lines (8532), with no line terminators
Size
8.5 kB (8530 bytes)
Hash
18049c2b04cd6ed86be6844b36b28b5e
422fb6b1b0335cbbd45c0f8495d70ef39ccfc696
83dd4a0a093dfe32c6ea13157c9479c3b76faded4a7ae38a38e3dff9d6541d7b

HTTP Headers

GET /assets/megaf/min/embed.css?v=190828cf0c7 HTTP/1.1
Host: megaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 08 Jul 2024 17:11:43 GMT
content-type: text/css
last-modified: Fri, 05 Jul 2024 10:59:53 GMT
etag: W/"6687d229-2152"
content-encoding: gzip
m-cache: MISS
expires: Sun, 04 Aug 2024 11:01:07 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 281436
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7zvKjh3uk%2Bu%2FsiYNNztjKtEZljOpyL6rI9i718ereQhhbRzHGMcdp9ClAzPRsuAA6xT08%2FJd6PEbG5PuWpBQ%2BOyy5x5CtbS2OatZm7WiqOXr2apz6Rb1U1lMXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a01b1f1cb7b5694-OSL
alt-svc: h3=":443"; ma=86400

megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==

188.114.96.1

200 OK

1.0 kB

URL User Request GET HTTP/2
megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectmegaf.cc
FingerprintF3:DD:CD:2C:5A:AD:29:04:14:E0:66:92:F0:1E:57:F1:21:59:C2:97
ValiditySun, 23 Jun 2024 00:35:22 GMT - Sat, 21 Sep 2024 00:35:21 GMT

File type
HTML document, ASCII text, with very long lines (1077), with no line terminators
Size
1.0 kB (1029 bytes)
Hash
1962af626f952175426772f15bca433e
933672d56ba092b44363ca98d96e2669fafc73d4
6a21403acf1149bfad51aa72a182964e7e49e830468ce6bfb31f6bf799c58c5d

HTTP Headers

GET /e/686599?autostart=true&t=4xjSCfEjDFUOzw== HTTP/1.1
Host: megaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 08 Jul 2024 17:11:43 GMT
content-type: text/html; charset=UTF-8
m-cache: HIT
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YvLmGbR2FFdOIIQj%2BVoHxriJ8W9csUJcdeKyXZzfckcGQPgWVTcfnnzZ9Wzdh1tuGUPDSPKixIgAxBvNVxjauJPuWOaL61x4kuJNh36OyNAx0%2FQTEijfyMWHnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a01b1ee2f92b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

megaf.cc/assets/megaf/min/embed.js?v=190828e02c2

188.114.96.1

200 OK

192 kB

URL GET HTTP/3
megaf.cc/assets/megaf/min/embed.js?v=190828e02c2
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Certificate
IssuerGoogle Trust Services
Subjectmegaf.cc
FingerprintF3:DD:CD:2C:5A:AD:29:04:14:E0:66:92:F0:1E:57:F1:21:59:C2:97
ValiditySun, 23 Jun 2024 00:35:22 GMT - Sat, 21 Sep 2024 00:35:21 GMT

File type

Size
192 kB (191869 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/megaf/min/embed.js?v=190828e02c2 HTTP/1.1
Host: megaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaf.cc/e/686599?autostart=true&t=4xjSCfEjDFUOzw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 08 Jul 2024 17:11:43 GMT
content-type: application/javascript
last-modified: Fri, 05 Jul 2024 11:01:03 GMT
etag: W/"6687d26f-2ed7d"
content-encoding: gzip
m-cache: MISS
expires: Sun, 04 Aug 2024 11:01:07 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 281436
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d%2F5PDAfG6dqDxJnKK3QZv39Ll5IE%2BUgFxEyAmxQ%2FFlN9vZV0M21qRzSS98TeHj1cXJUy0SFOBsmumjlGw4es6EHZ%2FRQwDycvFlT%2B9rxSs9W9nUC%2F%2Fl%2F2B83ljA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a01b1f1db895694-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (24)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash