Report - paste.fo/raw/297ac0c3d3feoffonallonall2wCONOUT$c:/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!

Report Overview

Submitted URL
paste.fo/raw/297ac0c3d3feoffonallonall2wCONOUT$c:/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
IP
104.21.28.76
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-20 05:44:41
Access
public
Website Title
paste.fo
Final URL
paste.fo/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
92

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-19	441 B	20 kB	104.17.24.14
js.hcaptcha.com	23463	2018-01-12	2021-07-30	2024-04-18	391 B	110 kB	104.18.124.91
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-20	550 B	41 kB	142.250.74.106
newassets.hcaptcha.com	11055	2018-01-12	2021-03-22	2024-04-18	1.5 kB	919 kB	104.18.124.91
u.paste.fo	unknown	2022-08-23	2023-05-13	2024-04-18	776 B	1.1 kB	104.21.28.76
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-19	415 B	94 kB	142.250.74.72
paste.fo	unknown	2022-08-23	2022-09-02	2024-04-18	23 kB	239 kB	104.21.28.76
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-20	1.1 kB	45 kB	216.58.207.227
static.cloudflareinsights.com	1294	2019-08-30	2019-09-24	2024-04-19	480 B	31 kB	104.16.80.73
api.hcaptcha.com	63834	2018-01-12	2021-07-31	2024-04-18	596 B	1.3 kB	104.18.124.91

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed
2024-04-20	medium	paste.fo	Sinkholed

ThreatFox

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	www.googletagmanager.com/gtag/js?id=G-HKXR34F8P3	270 kB	2024-04-20	2024-04-20
Pretty URL www.googletagmanager.com/gtag/js?id=G-HKXR34F8P3 IP 142.250.74.72 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-20 07:44:34 Last Seen2024-04-20 07:44:43 Times Seen4 Hash 20f55b6ebf407c17ca4025ac9252ca55 74aec2685d02c298f6280e0a5f221c58836de3ec 83a31cf73194492b3fd03f8451d68791f46c7e126fbb6bd8dbbea6942b1b0340 Loading...

	paste.fo/	0 B	2023-03-07	2024-05-03
Pretty URL paste.fo/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-03 12:09:51 Times Seen37303464 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793	19 kB	2024-04-17	2024-05-03
Pretty URL static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 IP 104.16.80.73 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 04:05:01 Last Seen2024-05-03 04:44:29 Times Seen1486 Hash 3be93fd15d2f7dee2fc0c8981c6fa5c6 8cd88c36fad3e96641dbc4d781f5ddbe5123312f 17106bf803d42bcf2f2bdf778ece084d3f91c68e7ea41dae7bff61fefa573dee Loading...

	paste.fo/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-05-03
Pretty URL paste.fo/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 104.21.28.76 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-03 11:59:20 Times Seen55814 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

	unknown	247 B	2024-04-20	2024-04-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-20 07:44:42 Last Seen2024-04-20 07:44:42 Times Seen1 Hash 5142ebc43ce227a3c1395e969233e1c4 6729f9483653ff73c97c8176c46a52268160676f 17641d466810676b547236e4f25eb5451d656a8fe4e1f1df4e36f99089139552 Loading...

	newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js	387 kB	2024-04-04	2024-04-30
Pretty URL newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js IP 104.18.124.91 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-04 18:06:19 Last Seen2024-04-30 11:09:09 Times Seen1327 Hash 052bf4abb4128ef78b68c418f7d94678 2b6c44a8cc009017a2909c7afd71e371e82b7d27 01908359050da30c842f89d13af0447be961b00b67b46eb61114d1fa48f1bdc9 Loading...

	newassets.hcaptcha.com/c/e78a38c/hsw.js	528 kB	2024-04-18	2024-05-02
Pretty URL newassets.hcaptcha.com/c/e78a38c/hsw.js IP 104.18.124.91 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 00:35:22 Last Seen2024-05-02 08:39:08 Times Seen473 Hash 4342b00f906eea1d05b94293d52aa8b3 ba41f9126678214599e77d71d64bdbde14cf65e6 a2a6e347030a794ca08af4a84555d466ffeb098d7c09abe76851f5be84a5da08 Loading...

	paste.fo/node_modules/sweetalert2/dist/sweetalert2.min.js	43 kB	2023-03-08	2024-05-01
Pretty URL paste.fo/node_modules/sweetalert2/dist/sweetalert2.min.js IP 104.21.28.76 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 13:42:02 Last Seen2024-05-01 03:22:30 Times Seen1433 Hash f15be88a3c9bf40debcc080b125c7e91 4a636976285768dd43278f43d63ba5779f3f493d 8c80ad67878fb50120f124f112bf665e7804452332970d3279b571b13a26d910 Loading...

	paste.fo/?error=404%20Not%20Found!	153 B	2023-03-08	2024-05-01
Pretty URL paste.fo/?error=404%20Not%20Found! IP 104.21.28.76 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 13:42:02 Last Seen2024-05-01 03:22:30 Times Seen707 Hash 2bc0082aba5a35e515758023fa651be0 a8db1112fc735be0d64a64e864a52131f7eaf878 75367336210d6cc8328fad7ddbdcf9afaceae3dae97c2a2e6b95a6ae82d8bc1f Loading...

	paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js	7.8 kB	2024-04-20	2024-04-20
Pretty URL paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.28.76 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-20 07:44:42 Last Seen2024-04-20 07:44:43 Times Seen2 Hash 5a60b28cdcfa8c537f6d1bf2751feddb e8eeefbed3279bf77b5e44b876cebd4eb0bb5631 8b9da43f66b826c82426218dfe72500acd2b5c8895865aa30af0f730930d1e8b Loading...

	unknown	48 B	2023-04-11	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 22:45:29 Last Seen2024-05-03 06:50:29 Times Seen19087 Hash 43d643e449b4ea13394fe737b1d6a447 1c03d56d955fd266d7659379e63d5711bd5382db 4817661f6ac7d2e1691bc3aeb9966e66012891ccda569ff872dc0932010c540d Loading...

	paste.fo/?error=404%20Not%20Found!	286 B	2023-09-28	2024-04-28
Pretty URL paste.fo/?error=404%20Not%20Found! IP 104.21.28.76 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-28 18:17:48 Last Seen2024-04-28 18:25:12 Times Seen39 Hash 3f3760c31928819a611a5869aaa0258c 78542ca7cfb521db3b8a92abf5f52c12447bb8af 9134d0d627dd4500ca681559dddb4af5d9fb2d313a7e342c32c9b15c0320b2c6 Loading...

	paste.fo/?error=404%20Not%20Found!	145 B	2023-09-28	2024-04-30
Pretty URL paste.fo/?error=404%20Not%20Found! IP 104.21.28.76 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-28 06:42:18 Last Seen2024-04-30 11:08:59 Times Seen128 Hash 36e97978a5902a9ed59a25ed9719d631 e37e9d696e9e72e29302d72b0a25ca70f2dcecea 9f8fc37cdccc3e35efb7df99137992fe00a01f010ee5ba6fd231625c5aa122ba Loading...

HTTP Transactions (57)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css

104.17.24.14

200 OK

19 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (52276)
Size
19 kB (18752 bytes)
Hash
ded1c367363e8b20bdc6a19b8350a737
8c06d82739d14b094ff6d9036021a252bd1d985d
1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf

HTTP Headers

GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/css; charset=utf-8
content-length: 18752
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6421d693-4940"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 388351
expires: Thu, 10 Apr 2025 05:44:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BN0%2Fkl7u%2FE%2Fa9KUxM7FmG%2Be5kKKbYt9aTvM3yeKYGLz1gqAhUM%2Fh%2F7oDVP8mXdYRopS5cX9bu8F6z%2FDhg9Kv8D98CNtmpBFF0FBJk0a9FOT2fOy%2FOYwmTvw1kxNhWnFtVzOXVBwn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8772d24c6b0356c7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-HKXR34F8P3

142.250.74.72

200 OK

93 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-HKXR34F8P3
IP
142.250.74.72:443
ASN
#15169 GOOGLE

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type
JavaScript source, ASCII text, with very long lines (3034)
Size
93 kB (93367 bytes)
Hash
20f55b6ebf407c17ca4025ac9252ca55
74aec2685d02c298f6280e0a5f221c58836de3ec
83a31cf73194492b3fd03f8451d68791f46c7e126fbb6bd8dbbea6942b1b0340

HTTP Headers

GET /gtag/js?id=G-HKXR34F8P3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 20 Apr 2024 05:44:16 GMT
expires: Sat, 20 Apr 2024 05:44:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93367
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

paste.fo/codemirror/mode/shell/shell.js

104.21.28.76

403 Forbidden

25 kB

URL GET HTTP/3
paste.fo/codemirror/mode/shell/shell.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
25 kB (25449 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/shell/shell.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UHQD7rF%2BwLS3SQQ6OAGT7KTD2Edjd8kZYNCFWQY2IXDkZv6xsub5PJY2eLQNZbuO1WkoWANvO9gEkyhh3Khcc7O6sALoqKw6ko7Z3bevSGPrHAoNaY4nFnryWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24f7a3eb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/lib/codemirror.css

104.21.28.76

200 OK

1.6 kB

URL GET HTTP/3
paste.fo/codemirror/lib/codemirror.css
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (6275), with no line terminators
Size
1.6 kB (1594 bytes)
Hash
2562bc2e52c5852b18e87ec08978ba49
54c7e49460f3235492050057453609fedcc01e09
73d08a4fac48937ec5ce812b154c088351783009eba0c22644ec91ef9a0c0ff2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/lib/codemirror.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=8720
etag: W/"2210-614ce4aba67d0-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1362
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LLX%2Fkxpj2nuRJaUa720WhT%2BC3SabAgFisqME3bkX3HvC0vtDDCFaG7pm9CthtH8nCH9dqwJGtgmiJokEuLVqo2EuVg%2BG9f9qonbhHo5ARQ6f9D3aTdPgegLS1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d24c1ffbb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/node_modules/sweetalert2/dist/sweetalert2.min.js

104.21.28.76

200 OK

14 kB

URL GET HTTP/3
paste.fo/node_modules/sweetalert2/dist/sweetalert2.min.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (42951), with no line terminators
Size
14 kB (14524 bytes)
Hash
f15be88a3c9bf40debcc080b125c7e91
4a636976285768dd43278f43d63ba5779f3f493d
8c80ad67878fb50120f124f112bf665e7804452332970d3279b571b13a26d910

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /node_modules/sweetalert2/dist/sweetalert2.min.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: application/javascript
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
etag: W/"a7c7-614ce4ab9fa71-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1369
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nZNWDgRKQepFaqWG0gUw57NvCnAdqhd9Db9qJ96XCHZll2ps%2BZ%2B183Tv7yT6wB6ZGxLxnNFJb%2FCUBhOLlcQo4%2FRYW5MHDZY86uXyHe9KSTlsvNWrE8I2siplBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d24c0ff8b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

js.hcaptcha.com/1/api.js

104.18.124.91

200 OK

110 kB

URL GET HTTP/2
js.hcaptcha.com/1/api.js
IP
104.18.124.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (41625)
Size
110 kB (109624 bytes)
Hash
052bf4abb4128ef78b68c418f7d94678
2b6c44a8cc009017a2909c7afd71e371e82b7d27
01908359050da30c842f89d13af0447be961b00b67b46eb61114d1fa48f1bdc9

HTTP Headers

GET /1/api.js HTTP/1.1
Host: js.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: application/javascript
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
cache-control: max-age=300
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Sat, 04 May 2024 05:44:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
age: 0
cross-origin-resource-policy: cross-origin
server: cloudflare
cf-ray: 8772d24c7842568e-OSL
content-encoding: br
X-Firefox-Spdy: h2

paste.fo/codemirror/theme/material-palenight.css

104.21.28.76

403 Forbidden

25 kB

URL GET HTTP/3
paste.fo/codemirror/theme/material-palenight.css
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
25 kB (24834 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/theme/material-palenight.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qr%2BfWUwqRuetmQZec3c7QNv5TjlS560hKTaDjVDjOVAUxx7cmw3TP9nmRKCM4Dkgy6eJee3eekbsPMPPcZHSxm%2BmFTDP5CJIF0ndke4PWgINdgys5LMxrBR47w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24e6979b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Size
22 kB (21528 bytes)
Hash
6113a25a586aeb6d0d3af5b5b652b973
25619eeae1fe17389310e4d392c427b7711dba44
539bdb4bd9bb71c694451bbf2d5d7c0b2849e3584f0b50be3588a07605d3337f

HTTP Headers

GET /s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:41:33 GMT
expires: Fri, 18 Apr 2025 17:41:33 GMT
cache-control: public, max-age=31536000
age: 129763
last-modified: Wed, 13 Sep 2023 23:21:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793

104.16.80.73

200 OK

31 kB

URL GET HTTP/2
static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793
IP
104.16.80.73:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subjectcloudflareinsights.com
Fingerprint73:92:5A:16:97:55:FC:A5:32:7C:F3:9D:0C:84:EF:F3:2F:AA:B5:00
ValiditySun, 10 Mar 2024 02:33:42 GMT - Sat, 08 Jun 2024 02:33:41 GMT

File type
gzip compressed data, from Unix
Size
31 kB (31028 bytes)
Hash
e5c6ff498540f8d78ce03ece0a4bb01c
eed1aeb44d3d661df750de6685b98e430ff47831
936563520d411669fd31c326a1e4041716c4f6bf1cdd69556fcf9f648f751021

HTTP Headers

GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.4.0"
last-modified: Mon, 15 Apr 2024 22:09:58 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c7b0c56a8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

paste.fo/raw/297ac0c3d3feoffonallonall2wCONOUT$c:/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!

104.21.28.76

302 Found

9.6 kB

URL User Request GET HTTP/2
paste.fo/raw/297ac0c3d3feoffonallonall2wCONOUT$c:/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3
Size
9.6 kB (9585 bytes)
Hash
5746d8597c4b940daec47deb69dfae24
86e12b70d6a26955533aeff2253d1c9794dfaff9
ca07671506294be0715e84fa78d3b01ddfeda4e0d0a6aae27540e34a85b29adb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /raw/297ac0c3d3feoffonallonall2wCONOUT$c:/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found! HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sat, 20 Apr 2024 05:44:15 GMT
content-type: text/html; charset=UTF-8
location: /?error=404 Not Found!
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D%2B0zpUiqmuk7%2FwnvtiF0oki6oU90Nd%2FybGPdkBiN6ggUZI9y8gzOsu5Kw6ZP8ju4Qs98zGDUJ1fWfSrMjj3ELswtlpGOtlnPm3I4ZZHw5BvxssaV2WKRblhc7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d2491f110b55-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

paste.fo/cdn-cgi/challenge-platform/h/b/jsd/r/8772d249ff5a0b55

104.21.28.76

200 OK

0 B

URL POST HTTP/3
paste.fo/cdn-cgi/challenge-platform/h/b/jsd/r/8772d249ff5a0b55
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/jsd/r/8772d249ff5a0b55 HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12116
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
priority: u=3,i=?0
set-cookie: cf_clearance=gYgi0JFOxj9cG8VHMLSzxpZ4BN62vnDrqm9xuYO3vGE-1713591856-1.0.1.1-l6O.d0VqMXT46220CTlcoNnlWs4nbPBHit5tdLfx3.TrJ8NT3ZfUhKxEsyom9UMsYLrXm6MJcicW0lHwxOv.xg; path=/; expires=Sun, 20-Apr-25 05:44:16 GMT; domain=.paste.fo; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vH9aNNULXM8nFH4DUTxnAS%2FfASw0M60mf0s5C0fCr3Ki03ykFCIlI%2FZCAELN1mCw44qekeTDEQo8%2B2E%2FVAo2BtOyPE1HfbvwXp21Wg8U947%2FkC%2BCgjsqHloUtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d2521bf7b51e-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Size
22 kB (21528 bytes)
Hash
6113a25a586aeb6d0d3af5b5b652b973
25619eeae1fe17389310e4d392c427b7711dba44
539bdb4bd9bb71c694451bbf2d5d7c0b2849e3584f0b50be3588a07605d3337f

HTTP Headers

GET /s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:41:33 GMT
expires: Fri, 18 Apr 2025 17:41:33 GMT
cache-control: public, max-age=31536000
age: 129764
last-modified: Wed, 13 Sep 2023 23:21:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

paste.fo/cdn-cgi/rum?

104.21.28.76

204 No Content

0 B

URL POST HTTP/3
paste.fo/cdn-cgi/rum?
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /cdn-cgi/rum? HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1052
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856; cf_clearance=gYgi0JFOxj9cG8VHMLSzxpZ4BN62vnDrqm9xuYO3vGE-1713591856-1.0.1.1-l6O.d0VqMXT46220CTlcoNnlWs4nbPBHit5tdLfx3.TrJ8NT3ZfUhKxEsyom9UMsYLrXm6MJcicW0lHwxOv.xg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Sat, 20 Apr 2024 05:44:17 GMT
access-control-allow-origin: https://paste.fo
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8772d2539cbbb51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff

paste.fo/cdn-cgi/rum?

104.21.28.76

204 No Content

0 B

URL POST HTTP/3
paste.fo/cdn-cgi/rum?
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /cdn-cgi/rum? HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 448
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/3 204 No Content
date: Sat, 20 Apr 2024 05:44:39 GMT
access-control-allow-origin: https://paste.fo
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8772d2df8b06b51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff

paste.fo/cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js

104.21.28.76

200 OK

7.8 kB

URL GET HTTP/3
paste.fo/cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (7823), with no line terminators
Size
7.8 kB (7823 bytes)
Hash
5a60b28cdcfa8c537f6d1bf2751feddb
e8eeefbed3279bf77b5e44b876cebd4eb0bb5631
8b9da43f66b826c82426218dfe72500acd2b5c8895865aa30af0f730930d1e8b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
cache-control: max-age=14400, public
vary: accept-encoding
x-content-type-options: nosniff
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EIrwjZiSsX6jSUpRD5OTrVTz241Vhgn7FVuEVfc%2B9weMGtCLf3gsoFmjhP5ie%2BPzvuQJptIDqK9x7hLWTf%2FvjJXCGEUZIaFnViOAd2vqQFWFwDPRErushiOdwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d250ab19b51e-OSL
alt-svc: h3=":443"; ma=86400

paste.fo/assets/css/style.css

104.21.28.76

200 OK

11 kB

URL GET HTTP/3
paste.fo/assets/css/style.css
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (10693), with no line terminators
Size
11 kB (10693 bytes)
Hash
a9579467f8b95bbcdbd6232105e6a253
df9b19ccebf1eca5fe14169881b132813919345d
22877d598e09dd9f8452f52a500181eae909e3f4aaa4d4c49e0b0b18cfbd60da

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/style.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=15702
etag: W/"3d56-614ce4abcf80d-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1369
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AaNqC05HdEqlWCjekxbZcB5qxclgZTEp9UrbuXeN9Q6fLH3%2Bp31MJgAecducUEdiBitkJPROqPxkoMOoWq8nqRUDk0jj8i92CiLf%2BQ%2BczNlCVSIiEWWNf5oPLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d24c0fefb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/javascript/javascript.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/javascript/javascript.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/javascript/javascript.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tX98O6QaTQEuaXYc9XqUTVV3%2FPf8tdNfaK%2BmakeLuT%2BmDllDWCVOYM%2BRbSUaAJmnmnzuxHHHiObd95yxOlcZ9qNJRjsKhfndTnISc21hBlDm0DHRdu5iZWplug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c1804b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/xml/xml.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/xml/xml.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/xml/xml.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cODPESO64V1uzpjUUWwcWY%2F9GEBhN5VMgFkoYuv5OguprOX6J47%2FOS9YXf3e1sUIxTlmnKeGE5YlkQKi%2FV9qwKikNRIIhx1pXeIAFD0w39t%2Fsg86P8zyW8WHSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24e8995b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/python/python.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/python/python.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/python/python.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rhp6oQZfUeEX4u5zRNlr5BS6DFNXRQ8zPuGHNQjrmU1fGZ2holFKxQummrrBTqlue7FG%2FmwJ4%2BSZPbWv1lKlGpQolKUUChVU%2FMObiv3AxrMA22HKSgGz2jH2Aw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24f6a31b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/favicon.ico

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/favicon.ico
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=izyDj1kQZLeO3Ak%2FebSnqKbfQxff8S18PBLJpUtKL%2BblqQv7Fd8US513VShImX6232dq6d5f2W5ZBMwUJbGbLBxz44rTY0gA4ZlYynAvAx1K%2B4c0UVg9Wq877A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d2518ba9b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/php/php.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/php/php.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/php/php.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aRqXX3iMCIalihZA9iUVnooCG4aOTcTEX%2BMgjt0PdgU8FTRSGYSl4PS33Ykn0lHWYS2JfwlxXxVaoLhwcTD6npnO5J5TJvGyZ5CAFbKE%2Fs%2Byz86BVkRy8QmcBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24f4a27b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/lib/codemirror.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/lib/codemirror.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/lib/codemirror.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2F6wgE3PozN24M%2FEslGsva1bzM%2Ff2hhQQfgMmGO0OQ7WRmLUWbbhK1Lu8hNG8XGp3rY26dDpwLVxyTZv9nknTiNiBTikOjSY68r2oOLmRUVT8ymW2xC2pIwQjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24e6980b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/F2191B6BMC0C174146125F1D175A185F075B1B055B4B46011E07597E0AM61A044B510F541A524901570F565C020E5504524B5E5C00.jpg

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/F2191B6BMC0C174146125F1D175A185F075B1B055B4B46011E07597E0AM61A044B510F541A524901570F565C020E5504524B5E5C00.jpg
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /F2191B6BMC0C174146125F1D175A185F075B1B055B4B46011E07597E0AM61A044B510F541A524901570F565C020E5504524B5E5C00.jpg HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BVCE9Eq13yD4Dk%2B1ZWyswSv5UXtogzpYNso7XQTs5Mvr9rekBiC%2BseTMBwxkyqevMSC25raYUI8R%2Fxy7u%2FHg3zmQ3w6fBeiD9XkoO2neecsPNFJ%2Fd0gAsMRcCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24fea8cb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/C2B6E767MC0D41474747091918081A0B5A0210451AMF575D0B164232574B51624319010850.jpg

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/C2B6E767MC0D41474747091918081A0B5A0210451AMF575D0B164232574B51624319010850.jpg
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /C2B6E767MC0D41474747091918081A0B5A0210451AMF575D0B164232574B51624319010850.jpg HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FsSPL%2BjRX2qns0X1YlelS%2FSsav3zU0KXhJWR6Z7qkzIJxUOzVWS3lvAFki8yizymwPYnrjH0eG%2FNb2pAVHXpznsmL%2Fy4Ifo9tS%2FoqtWFD25XbC7Wn08hawjHqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24fea8db51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/?error=404%20Not%20Found!

104.21.28.76

200 OK

19 kB

URL User Request GET HTTP/2
paste.fo/?error=404%20Not%20Found!
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1494)
Size
19 kB (19407 bytes)
Hash
2870c53d8bab8cd0600654424eec671b
56718f53ec87c9cf5d381600a67b0b8c385e0b08
0be3b2496e709089b8c3bb45f3dae822992a55e1ff4c732e6f26d42908eb6352

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?error=404%20Not%20Found! HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:44:15 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=nfcdfqj07kpk1eqf467fuqql1i; path=/
token=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
PHPSESSID=d0b7su94si892957p4ufeuo8ct; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vOTSXIB1i6KBF%2Bi1cQUMi03%2BHYgKNf%2FEOSj29XNW4o8UUD%2Bs5yY6uCFd39VX9RVbrae%2FbcPWJhufIiHxAklJR8Tw7Lg80YuuDJ2Pw%2Bi29ppQ5qUL%2FCMRjlkVzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d249ff5a0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

paste.fo/codemirror/mode/css/css.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/css/css.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/css/css.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W1LIjEQn8aBChQuz0dYyg1vN0GNdb0yoSVbPoawbedKL1uVh6a7rv5p08hr584knQTM16YEksiJ%2FWJTBvlKTsz40%2BpE4JoaKuwXGAYlW%2B8Johd275CvymnEj5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c180ab51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css2?family=Source+Code+Pro:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap

142.250.74.106

200 OK

40 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Source+Code+Pro:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text
Size
40 kB (40360 bytes)
Hash
fb9a01c247c59daca77d5e373217b0b1
df072c2f05f7e6884df927cf8b4d2144937b8cbe
f6ce0c3fb43d72007637cf61a13dc4c6a0cb1111d2f457dc1386008f83fe13c3

HTTP Headers

GET /css2?family=Source+Code+Pro:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 20 Apr 2024 05:44:16 GMT
date: Sat, 20 Apr 2024 05:44:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

paste.fo/assets/svg/email.php

104.21.28.76

200 OK

577 B

URL GET HTTP/3
paste.fo/assets/svg/email.php
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
exported SGML document, ASCII text, with very long lines (586), with no line terminators
Size
577 B (577 bytes)
Hash
3f774fd678c6e100c4d914d9afc0dc8b
bab6ac432d913ee0d99dae0a7caafcea559222bd
e7f5c890c6acb9078887bbeab309ff5771782edac2444c647126072427cdc336

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/svg/email.php HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: image/svg+xml
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v6UXBurH7g%2Fs57jWWp3bBHOvDQ%2FUKF9qRvKFrlmCPUza1M%2FQqiUEzmZ7%2F37SClmPo2hW9nY9JJqVpUjC5vSMqkTKDW9PNrBClywaxfenHzXogiGObHzNnntHZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d24c3829b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/htmlmixed/htmlmixed.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/htmlmixed/htmlmixed.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/htmlmixed/htmlmixed.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fxfC%2BQRseMEodqoVH7RkyjV8VYKW%2BQfTnI9OUOa2xPLjHQgDhim5IhoHek2i1xHW4SpGXGmTxC6t1GQ45y0NrByKFrfJnpHX1DJ7cspVwxASoWCrbrJhdSAXfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24f9a55b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

newassets.hcaptcha.com/c/e78a38c/hsw.js

104.18.124.91

200 OK

528 kB

URL GET HTTP/3
newassets.hcaptcha.com/c/e78a38c/hsw.js
IP
104.18.124.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0mlskguk8tlq&host=paste.fo&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&theme=light&origin=https%3A%2F%2Fpaste.fo&size=invisible
Certificate
IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT

File type

Size
528 kB (528392 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c/e78a38c/hsw.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:17 GMT
content-type: application/javascript
etag: W/"4342b00f906eea1d05b94293d52aa8b3"
cache-control: public, max-age=3024000
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Sat, 25 May 2024 05:44:17 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8772d2539eb856cc-OSL
content-encoding: br

paste.fo/codemirror/mode/css/css.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/css/css.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/css/css.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2BRJQ1i0%2BgMrOttcJsU0cxg%2B6oFgrhyXNyTIVXIBsUMx3pdb%2FB1mOWCASryuezfXCWzrG2ugu1R7NOgpXZGOncI35u8w5X3Qr2GzLlINjhQCgHbN5Gtcc6ueKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24ef9d7b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/sql/sql.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/sql/sql.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/sql/sql.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BQmYB798tsk6eF%2B%2B%2FZiVXA7Xi0j5%2BaswdbIMfDsg6h7Qz4akbMLieuuAGdUYO84d%2BVb4TLCV40mwSk8g1H%2FESF8bZE%2FZydUJXnRC51p0LiulYSpJNf5Urtu9lg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24f3a15b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/assets/css/user.css

104.21.28.76

200 OK

5.2 kB

URL GET HTTP/3
paste.fo/assets/css/user.css
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (5248), with no line terminators
Size
5.2 kB (5216 bytes)
Hash
7690e1f323bfc9cd0658b8355ec967ae
f6556ee7ace5044dcc0a5a8db6a4cc2b76dfcec2
2b878eddd32ef75f04d6923d6bc597d06e0f41d6988ef952edd17dfbacc6b849

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/user.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7053
etag: W/"1b8d-614ce4abcf80d-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1369
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5XjTuTL%2BtUd49sqehkEQ3VfsQTRlyHC2bc7%2B32ZQhuowaNQXOVTHoPKWeO3wuTltM1%2B63cnLcKu4763od%2FCoS3vw1rH2A%2BbfBmJlV%2FdunJ1kvUsN92WnqhvYOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d24c0ff0b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/node_modules/@sweetalert2/theme-dark/dark.css

104.21.28.76

200 OK

24 kB

URL GET HTTP/3
paste.fo/node_modules/@sweetalert2/theme-dark/dark.css
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (24342), with no line terminators
Size
24 kB (24342 bytes)
Hash
80b002261f8a746e3756d6883342252a
c8282deb8dfdcdf89ca54c6d6e34b23bc2beeb22
6b7dfdcc77e85a9db663a990f749d892c774f63254404cf2a72b312a8136bfd1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /node_modules/@sweetalert2/theme-dark/dark.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=30018
etag: W/"7542-614ce4ab9ead1-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1369
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YQbzm8FJ66PzKmd85PS9FGMoTMZXeM5GlvCvpYK6R4IHZNR6Y0hxByi68PZuvkXFQQsBN9rtTz%2FXFBla8LorElCcSQv2p0h1JT8QGpwfyJSN9v%2BpAmg6acYRYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d24c0ff6b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/python/python.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/python/python.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/python/python.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ooJ1C%2FmyTTLeXdAYmS%2B9IDguxlRM1xVQBh53NKjb%2Fb4R0GlsaXt%2BfhLA0k8g2QvBD1tpqysVOhqsrZc5LjVf%2B1OjlujkyxB6%2Fijgs6Dj9PsDNnHexKzVJFI3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c180db51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/javascript/javascript.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/javascript/javascript.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/javascript/javascript.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=481ddZ%2B6TQLKZjGqx%2BmWWuENhfDO38cF1Zzo4W%2BA2NZZjPqYv3aIJxkxUK9Yy%2FOc5kTXYLbHiXLT%2FGZagx00qIRaGoCzJkkPnqBd0y9%2FnhhbltRrZcEgCHA3WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24e999fb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/assets/svg/twitter.php

104.21.28.76

200 OK

1.1 kB

URL GET HTTP/3
paste.fo/assets/svg/twitter.php
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
exported SGML document, ASCII text, with very long lines (1064), with no line terminators
Size
1.1 kB (1055 bytes)
Hash
52ada42cb5438b7b0421018fd75f361e
d5e00f0d91ac0e644fa97b585fa704764276830b
5814970c931c847c4acc7c25ce39b1f9abbed82f7642c2da34a93f895d875746

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/svg/twitter.php HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: image/svg+xml
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uY3gqVO3AHhudeq3Dv6JLB85iPaQhgR7y2n7XioBRv%2BnHmxRO6b%2BjRMhYKqOHjJnUZ9jHWP%2BuhauN%2FCoONyNXsl%2FRdCDb41W%2F0II%2B%2BK7KtYH5Hs2eWXHmrRCMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d24c281cb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

104.21.28.76

200 OK

1.2 kB

URL GET HTTP/3
paste.fo/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1271), with no line terminators
Size
1.2 kB (1239 bytes)
Hash
40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: application/javascript
last-modified: Tue, 16 Apr 2024 15:45:04 GMT
etag: W/"661e9d00-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2sPitCug%2F8H4ELMd9qiU5O69NgW7PlgVrc4JNmULoJetjbxR90gIDqQHYAqEwFrfbWITccYOQ1HGElRTgUa4Cqi4Mk9QLc5lhPKjTuiCMQAI%2FcJDjWciGFEbtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c382ab51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Mon, 22 Apr 2024 05:44:16 GMT
cache-control: max-age=172800, public
content-encoding: gzip

newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html

104.18.124.91

200 OK

1.7 kB

URL GET HTTP/3
newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
IP
104.18.124.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT

File type
HTML document, ASCII text, with very long lines (1768), with no line terminators
Size
1.7 kB (1725 bytes)
Hash
825c2f21a9a22bd9911e6686ced37ded
74f703bdafeabb1aad6a04b073d1745298c111dc
0624e04628b8b0d5f77b594b9ef1408296a1774109a47d7c1ac402e1d2636350

HTTP Headers

GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Sat, 04 May 2024 05:44:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8772d2505cea56cc-OSL
content-encoding: br

paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js

104.21.28.76

302 Found

7.8 kB

URL GET HTTP/3
paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
7.8 kB (7823 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 302 Found
date: Sat, 20 Apr 2024 05:44:16 GMT
content-length: 0
cache-control: max-age=300, public
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ThmtVNNFd3QLvDjzs7YkB5yqxqikHNciKnsB%2F48ivmBE04MNJ0awh4dAmw9MkDwI3wczK%2F8rAMOh1s4kbgqo2BufXLVk3%2BEu5Un%2FY4izyYiYZAHcnoHfr%2F6EZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d2506af7b51e-OSL
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/clike/clike.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/clike/clike.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/clike/clike.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=idlMTNJbwpygciY4P0wTX4Ui0tgdbnojcuWMQoDRKhtkvqjF3FkR6iDbzY4gkM%2F1p9geK2gERwLhjENBiHo1m9Vq6XhqOnDCxRre1xJ3J43oyDpNatgEYdEiYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c2816b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/clike/clike.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/clike/clike.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/clike/clike.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2FVMOukoyRdkEnSWZ9ZRMfFuGy4sED%2BgGtKuqaTyawFiUx8elvtAQGRfnytg5kXefH4wD%2FTQUX35qleXrETEQPu%2FR2a8I6ItB5VO%2BShP9f8IfnLFzMmMr5t9og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24f8a47b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

u.paste.fo/script.js

104.21.28.76

403 Forbidden

0 B

URL GET HTTP/3
u.paste.fo/script.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /script.js HTTP/1.1
Host: u.paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nwm9Kh%2FmpSnTqPJWaQntbsCfzbJwsvrZD%2BzS0t07%2FNFS9e%2BSgTBBZ50z4jpHmCKx66ZWKh%2BSQI%2BkDeu%2BrlxSsNzxGXVO2HnCtgsNBXGba%2BuqRTvN2ooerKe6NkVH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c1ffcb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/assets/css/cio.css

104.21.28.76

200 OK

1.2 kB

URL GET HTTP/3
paste.fo/assets/css/cio.css
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1152), with no line terminators
Size
1.2 kB (1152 bytes)
Hash
6a91b9352b213689c0432bb87eddb2ae
4a9beb1f3a827dee5a03a246a296fac2f3677165
5721962451086a4c469a6d1b1e4cc133f03c3ea0377916a91b45373463855620

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/cio.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1653
etag: W/"675-614ce4abcf80d-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1369
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aE6hlcEuV6PDJjcfNldooanTJgZ2nEcNl9kXI4F9ApSso7tBvAzkcoiu9kA7OwjWhxhIVtSxnqxbz9wJTXepAGpEkHyYS%2BUxxtXk3DAMyli%2FRFkbp4Spk1rhKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d24c0ff4b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/sql/sql.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/sql/sql.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/sql/sql.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vy8KhrwOW3CcD5B0ihC5%2FQuSlXDUa2BVoPNyqS1NoFsRWOj26fiLtoL3fZU3H3SvX%2BBAF%2B8Kf4FOs3AIgRTEUhd6ATykqX3d5nJ6ixBZHPxd5vxMvbZLVk9geA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c180bb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js

104.18.124.91

200 OK

387 kB

URL GET HTTP/3
newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js
IP
104.18.124.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0mlskguk8tlq&host=paste.fo&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&theme=light&origin=https%3A%2F%2Fpaste.fo&size=invisible
Certificate
IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT

File type

Size
387 kB (387091 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /captcha/v1/b1c589a/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: application/javascript
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Sat, 04 May 2024 05:44:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8772d251ddad56cc-OSL
content-encoding: br

paste.fo/assets/svg/discord.php

104.21.28.76

200 OK

1.6 kB

URL GET HTTP/3
paste.fo/assets/svg/discord.php
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
exported SGML document, ASCII text, with very long lines (1567), with no line terminators
Size
1.6 kB (1558 bytes)
Hash
f25e187801ad4549ff6d1f7923827d9e
682ad175492f0c7ca063eb8b29df8e5fb92ab3ce
c4c482f2711284ca3fb68e15af960645b841af8880e7e86ea031ca86470c5e22

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/svg/discord.php HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: image/svg+xml
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MR3ySo0s%2BRjEpb88K0vNRzbrgySyC8XLC2hbH9%2FTxI0nrYmsOELEb9qGXeHbmOA6P21RpTEwhk8DtbrwWUEmTmViF3h2BfL%2BKfvAX8kw%2F4dQC2lRpkiMXuP%2Bqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d24c281bb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/assets/css/responsive.css

104.21.28.76

200 OK

4.6 kB

URL GET HTTP/3
paste.fo/assets/css/responsive.css
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (4570), with no line terminators
Size
4.6 kB (4570 bytes)
Hash
85e024d58588895496ff6e65f47a0484
ff6cb78df5ee61dffa425ace5283407ee562e4af
fd51897bd68e6bdf326bfb11b3580be32da026ab50c5e494677b202f93822877

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/responsive.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7512
etag: W/"1d58-614ce4abcf80d-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1369
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53VeyWefz8cKyVf89iWYHxq0rlWuTcclUVj%2BirH5zfWcZJ7r6hCD9rCZiRs2cfrhiroNbn4cXyK%2B4uoa2ggQNuF9tWgi6w5moA4XT%2BBs4nkddF0M2F0pUvXxzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8772d24c0ff2b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/xml/xml.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/xml/xml.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/xml/xml.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h0l%2FvN3d2GFisArsAREdjsGUKan%2FZE2QkFMv9VWRIYNF3ho%2BKnfBXjCkTitcGV3ajuCBfwTpgJJjmghslMNiRvUq4DJTowcN275y7EvVFRbNESN6Ns1vHbWvwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c1801b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/lib/codemirror.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/lib/codemirror.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/lib/codemirror.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K7GHZ5HwTCv5qiRen%2Fr1ixkpMxZF23aUIpS%2Bnj0vdhb0HblRNGKP11siFgDLxIHULVa7OPJRvFFZH1YBK1RTGcK%2BI03R0dd03jW5zLE8fzwbaqiDXe1kktb9eA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c1fffb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/CSSh8ec0072b.css

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/CSSh8ec0072b.css
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /CSSh8ec0072b.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xHXiAszCUmJLc7jjMWBQxdHKcEKFt8CgAUtex%2FRKRnWhR3xa9H1Sp4JpWzds0TwAK%2B3e9n6cECqM%2FKQT9u1FBGl0rO99IGt7dMBRpFNNKl%2B4JiBNmqmA2jtYJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24fca74b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

api.hcaptcha.com/checksiteconfig?v=b1c589a&host=paste.fo&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&sc=1&swa=1&spst=0

104.18.124.91

200 OK

718 B

URL POST HTTP/3
api.hcaptcha.com/checksiteconfig?v=b1c589a&host=paste.fo&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&sc=1&swa=1&spst=0
IP
104.18.124.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0mlskguk8tlq&host=paste.fo&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&theme=light&origin=https%3A%2F%2Fpaste.fo&size=invisible
Certificate
IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (734), with no line terminators
Size
718 B (718 bytes)
Hash
4e8e76097665ebab54136ceec314b943
d8431dff5c49f8fc01a64c96b94a8a8f7ad1b9ff
05da791b24d44eac6c36c7f4cbea4bb6311b4ca4a99d5052ff07f32a62a85d5a

HTTP Headers

POST /checksiteconfig?v=b1c589a&host=paste.fo&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&sc=1&swa=1&spst=0 HTTP/1.1
Host: api.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://newassets.hcaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:17 GMT
content-type: application/json
access-control-allow-origin: https://newassets.hcaptcha.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent
access-control-allow-methods: GET, HEAD, POST, OPTIONS
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8772d2535e9a56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/php/php.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/php/php.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/php/php.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eCKtGnxYnE%2BvSKr0d7nRt1CNxk%2FJvWdh1SE53fZzuMXecLLFIBlvfNyhFAtMj7zkHmsiQl9f2zvXi6ZE%2BIgL0vfO3j%2B7MFKdeh4PyIqLpPDtDn%2FuTzc5%2FzoiCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c180cb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/htmlmixed/htmlmixed.js

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/htmlmixed/htmlmixed.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/htmlmixed/htmlmixed.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SMRsNryL12J4BxuMDrxfZtQwytHMAP0Rr8CC36UTiTGN5KTHZ38tyLAx2B6vO9%2B1vA7jULWMBZU7bhEsP%2BZ6Cn62D2BiljH%2B8st1o6X7FR8cKOUR05kYcOaa4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c2819b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/CSSh8ec0072b.css

104.21.28.76

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/CSSh8ec0072b.css
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /CSSh8ec0072b.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3YfXtNBjgy%2BW21yRcrkj%2FshpzqWwiunZ89BlXPgk6JeodLpf%2Bk6jhDcnPNg6h7z5r4VcEHIqTXd7sU6sOHIJI9TILihU0InkQW6%2BjmUpTXSgNvKMrPVE0OdlrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24c281ab51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

u.paste.fo/script.js

104.21.28.76

403 Forbidden

0 B

URL GET HTTP/3
u.paste.fo/script.js
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /script.js HTTP/1.1
Host: u.paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ha9fh7pKZHAav1tTbqbjADEjJF4Thnt9GiAwgumYqJCcizfwVQJfRoI%2FFUT9Im1S0EYGDNnv2jy6g5raTW5brNp0dAAihZ%2BZcpHa2iym03Saf5NSgQphJZeoTy38"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24e6973b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/assets/img/bg1.gif

104.21.28.76

200 OK

25 kB

URL GET HTTP/3
paste.fo/assets/img/bg1.gif
IP
104.21.28.76:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
25 kB (24898 bytes)
Hash
dcab8f9443952c7589be3e4db6072853
824ca8c921eeca604844d3f00d08691631199201
a1a2a8e83029575fa6afde2c7b946fd3d98407fccf673c587aac398cd2fc8cef

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/bg1.gif HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Cookie: PHPSESSID=d0b7su94si892957p4ufeuo8ct; _ga_HKXR34F8P3=GS1.1.1713591856.1.0.1713591856.0.0.0; _ga=GA1.1.604832186.1713591856
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:44:16 GMT
content-type: image/gif
content-length: 24898
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
etag: "6142-614ce4abce86d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1368
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eC%2FSn32R6bIz%2FGYVSonzIQ40z5XINtNEpJRaxnJ12t%2FNE9bpxmNPfxZH5t9RMf7zIBTmg8u9iuPffXVBtnFlBXBGriDphszGwFDMhGHvJaQMWqmPlFFup9QWkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772d24fea94b51e-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL