Report - paste.fo/7de04e8eacc8/unlock/7de04e8eacc8/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!

Report Overview

Submitted URL
paste.fo/7de04e8eacc8/unlock/7de04e8eacc8/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
IP
104.21.28.76
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 01:15:31
Access
public
Website Title
paste.fo
Final URL
paste.fo/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
78

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-05-07	415 B	95 kB	142.250.74.168
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-07	2.1 kB	90 kB	216.58.207.227
u.paste.fo	unknown	2022-08-23	2023-05-13	2023-12-04	776 B	1.1 kB	172.67.144.225
paste.fo	unknown	2022-08-23	2022-09-02	2024-04-18	20 kB	309 kB	172.67.144.225
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-06	441 B	20 kB	104.17.24.14
api2.hcaptcha.com	unknown	2018-01-12	2023-05-02	2024-05-06	597 B	1.5 kB	104.18.124.91
newassets.hcaptcha.com	11055	2018-01-12	2021-03-22	2024-05-07	1.5 kB	860 kB	104.18.124.91
js.hcaptcha.com	23463	2018-01-12	2021-07-30	2024-05-06	393 B	388 kB	104.18.124.91
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-07	548 B	27 kB	142.250.74.138
static.cloudflareinsights.com	1294	2019-08-30	2019-09-24	2024-05-07	480 B	7.5 kB	104.16.79.73

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed
2024-05-07	medium	paste.fo	Sinkholed

ThreatFox

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	paste.fo/	0 B	2023-03-07	2024-05-19
Pretty URL paste.fo/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-19 20:58:28 Times Seen37842975 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	paste.fo/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-05-19
Pretty URL paste.fo/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 172.67.144.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-19 20:56:41 Times Seen57707 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

	static.cloudflareinsights.com/beacon.min.js/vedd3670a3b1c4e178fdfb0cc912d969e1713874337387	19 kB	2024-04-24	2024-05-19
Pretty URL static.cloudflareinsights.com/beacon.min.js/vedd3670a3b1c4e178fdfb0cc912d969e1713874337387 IP 104.16.79.73 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 00:56:41 Last Seen2024-05-19 20:55:43 Times Seen2543 Hash 4c980ee97cb5c001b4d19e2895fa5603 2c6fe998aa7486c4becd74cf253bdd82666a64c3 d2e817d2c44b9cf45f0e45cfa351abba3203af38f5aa1c8576a2db69ebd15192 Loading...

	newassets.hcaptcha.com/c/f922a41/hsw.js	470 kB	2024-05-03	2024-05-14
Pretty URL newassets.hcaptcha.com/c/f922a41/hsw.js IP 104.18.124.91 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-03 01:29:42 Last Seen2024-05-14 03:33:19 Times Seen288 Hash a015c3f04def6c02f6d3a815ff97f100 2322366db22def41a31f2dae0a2133ad75e6d1ac 42d9a4011ac36ae483e8e3cb4bb2b3829b96bf366bbc1c0e2ab40d4d7deb9240 Loading...

	www.googletagmanager.com/gtag/js?id=G-HKXR34F8P3	274 kB	2024-05-08	2024-05-08
Pretty URL www.googletagmanager.com/gtag/js?id=G-HKXR34F8P3 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 03:15:32 Last Seen2024-05-08 03:15:32 Times Seen2 Hash b8e6e0daf075a2665edcf5b0715a232c 97aa60e73f578a902ceab91981c61661b4dc87e3 ad02d4c4460afbe16e3c19368f559eb9d11431c3b9a0248adee3003062b3703e Loading...

	paste.fo/?error=404%20Not%20Found!	153 B	2023-03-08	2024-05-19
Pretty URL paste.fo/?error=404%20Not%20Found! IP 172.67.144.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 13:42:02 Last Seen2024-05-19 19:23:03 Times Seen906 Hash 2bc0082aba5a35e515758023fa651be0 a8db1112fc735be0d64a64e864a52131f7eaf878 75367336210d6cc8328fad7ddbdcf9afaceae3dae97c2a2e6b95a6ae82d8bc1f Loading...

	unknown	48 B	2023-04-11	2024-05-19
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 22:45:29 Last Seen2024-05-19 19:52:42 Times Seen19454 Hash 43d643e449b4ea13394fe737b1d6a447 1c03d56d955fd266d7659379e63d5711bd5382db 4817661f6ac7d2e1691bc3aeb9966e66012891ccda569ff872dc0932010c540d Loading...

	unknown	247 B	2024-05-08	2024-05-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 03:15:32 Last Seen2024-05-08 03:15:32 Times Seen1 Hash 304dffa15b777c9e989d67c01ea09e56 56b9fb1862a892908c0ae3117880c91e8e673cc7 c46cc2961f9b778d943d471ce149f5b2418a71fcad77816f14acedbcdae80792 Loading...

	paste.fo/node_modules/sweetalert2/dist/sweetalert2.min.js	43 kB	2023-03-08	2024-05-19
Pretty URL paste.fo/node_modules/sweetalert2/dist/sweetalert2.min.js IP 172.67.144.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 13:42:02 Last Seen2024-05-19 19:23:04 Times Seen1827 Hash f15be88a3c9bf40debcc080b125c7e91 4a636976285768dd43278f43d63ba5779f3f493d 8c80ad67878fb50120f124f112bf665e7804452332970d3279b571b13a26d910 Loading...

	paste.fo/?error=404%20Not%20Found!	286 B	2023-09-28	2024-05-18
Pretty URL paste.fo/?error=404%20Not%20Found! IP 172.67.144.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-28 18:17:48 Last Seen2024-05-18 03:26:07 Times Seen62 Hash 3f3760c31928819a611a5869aaa0258c 78542ca7cfb521db3b8a92abf5f52c12447bb8af 9134d0d627dd4500ca681559dddb4af5d9fb2d313a7e342c32c9b15c0320b2c6 Loading...

	paste.fo/?error=404%20Not%20Found!	145 B	2023-09-28	2024-05-18
Pretty URL paste.fo/?error=404%20Not%20Found! IP 172.67.144.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-28 06:42:18 Last Seen2024-05-18 03:26:07 Times Seen162 Hash 36e97978a5902a9ed59a25ed9719d631 e37e9d696e9e72e29302d72b0a25ca70f2dcecea 9f8fc37cdccc3e35efb7df99137992fe00a01f010ee5ba6fd231625c5aa122ba Loading...

	js.hcaptcha.com/1/api.js	387 kB	2024-05-07	2024-05-13
Pretty URL js.hcaptcha.com/1/api.js IP 104.18.124.91 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 21:01:15 Last Seen2024-05-13 11:03:32 Times Seen269 Hash 4d80931f436a73b647471384c48e1604 ae59d307aa2d23a6bf38ba532bae9cbd67c5a3e9 d196d722737dff0be8bdbf3dbd35e00b8af3437be8424e83abc1cfb5b5983e64 Loading...

	paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js	7.9 kB	2024-05-08	2024-05-08
Pretty URL paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 172.67.144.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 02:50:29 Last Seen2024-05-08 03:15:32 Times Seen6 Hash 405d344baa50438012a89515cbfcf9e0 4aaaf4d8a0510e9b3f68230ff1245e1752b1b7e2 1cfc3b6c1244daf2ac7ffb6a4b3d858b9936190cf85fa972e443042da245f9dc Loading...

HTTP Transactions (52)

URL IP Response Size

paste.fo/node_modules/sweetalert2/dist/sweetalert2.min.js

172.67.144.225

200 OK

14 kB

URL GET HTTP/3
paste.fo/node_modules/sweetalert2/dist/sweetalert2.min.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (42951), with no line terminators
Size
14 kB (13750 bytes)
Hash
f15be88a3c9bf40debcc080b125c7e91
4a636976285768dd43278f43d63ba5779f3f493d
8c80ad67878fb50120f124f112bf665e7804452332970d3279b571b13a26d910

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /node_modules/sweetalert2/dist/sweetalert2.min.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: application/javascript
content-length: 13750
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
etag: "a7c7-614ce4ab9fa71-gzip"
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 134
accept-ranges: bytes
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=49HSySQQdw6b5yx8ZkAVzZmicJ4P8cO6tqvAS02BE%2FVi31QrYEbJiXVkeXB9aweOpu%2FI9GBhITWIPlgh%2Bv3dIpIl2FwMQmOlmA28yDWTQC8gDtxDbANG3%2B2EBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598bebe43b51e-OSL
alt-svc: h3=":443"; ma=86400

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css

104.17.24.14

200 OK

19 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (52276)
Size
19 kB (18752 bytes)
Hash
ded1c367363e8b20bdc6a19b8350a737
8c06d82739d14b094ff6d9036021a252bd1d985d
1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf

HTTP Headers

GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/css; charset=utf-8
content-length: 18752
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6421d693-4940"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2868
expires: Mon, 28 Apr 2025 01:15:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=io%2Fye4vMCMo%2BxkpEthcrdAikUwmmgImDw4J9OUG%2FKN4k%2FlpTY0mIh9e89%2Br%2BESj7MuvsuJpNewHPWcv45gq2aUOzzxF6UFLidPB9YxbgqoXJlWBuxvVSfn7jlEp8Gs9GuMCrV9mz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880598bf2aaf56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-HKXR34F8P3

142.250.74.168

200 OK

95 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-HKXR34F8P3
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (3034)
Size
95 kB (94661 bytes)
Hash
b8e6e0daf075a2665edcf5b0715a232c
97aa60e73f578a902ceab91981c61661b4dc87e3
ad02d4c4460afbe16e3c19368f559eb9d11431c3b9a0248adee3003062b3703e

HTTP Headers

GET /gtag/js?id=G-HKXR34F8P3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 01:15:05 GMT
expires: Wed, 08 May 2024 01:15:05 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94661
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Source+Code+Pro:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap

142.250.74.138

200 OK

26 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Source+Code+Pro:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
gzip compressed data, max compression
Size
26 kB (26140 bytes)
Hash
e8ea592b7e547d7e6809681c563d248d
69924f6d2c9319307748d1821366295be2990da8
5e4d179bab4effdfe4035829efe9bd8d30f52a4e9d2d7bc28b651a58fad593aa

HTTP Headers

GET /css2?family=Source+Code+Pro:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 01:15:05 GMT
date: Wed, 08 May 2024 01:15:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

paste.fo/codemirror/mode/sql/sql.js

172.67.144.225

403 Forbidden

1.0 kB

URL GET HTTP/3
paste.fo/codemirror/mode/sql/sql.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
1.0 kB (1023 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/sql/sql.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=itVzamsXIwe4clp7vCGU46vVC15OUUZJv6e9PrSOIOm%2BPOawpgKgi8nIpSC02iOnzshSD4k%2BkREyh%2F2SkXIy%2BaFe84c2nt3keTs%2FqiM%2FuEpGCbUeoCxjpMr3kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598bede55b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/0C496038MC0D4512441202491E514B505B534B575B1F7B1B7E4A304F1AMF1B52425351024F5248075102525B52070F060C17560C52.jpg

172.67.144.225

403 Forbidden

22 kB

URL GET HTTP/3
paste.fo/0C496038MC0D4512441202491E514B505B534B575B1F7B1B7E4A304F1AMF1B52425351024F5248075102525B52070F060C17560C52.jpg
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
22 kB (22079 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0C496038MC0D4512441202491E514B505B534B575B1F7B1B7E4A304F1AMF1B52425351024F5248075102525B52070F060C17560C52.jpg HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; _ga_HKXR34F8P3=GS1.1.1715130906.1.0.1715130906.0.0.0; _ga=GA1.1.628772289.1715130906
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:06 GMT
content-type: text/html
retry-after: 9
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oMmWIH%2FzE7aMHVwd39k2if0vneAffSduV64WuFkSg%2FUy0rwDChZCQ6IOA8u9OaK7DJP4kYGyaRiPF63RAk%2FyZelqeXx3EITsWpnuGKtS07reZgC%2Bh0eSUVmEcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c428bbb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/shell/shell.js

172.67.144.225

403 Forbidden

1.0 kB

URL GET HTTP/3
paste.fo/codemirror/mode/shell/shell.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
1.0 kB (1023 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/shell/shell.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wsVkEcjujVPp%2B9%2B1iXZZCV%2B0crXbLYC1zdnes55oyYUc1jxHYj5upp%2FTFCIY0Fhpy7YZ3tEVY2Qi66ovVLIPQR7a6Hw2b29pVbKAAjRFZ98KszPgMtHpDzlHPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598bede59b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/clike/clike.js

172.67.144.225

403 Forbidden

1.0 kB

URL GET HTTP/3
paste.fo/codemirror/mode/clike/clike.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
1.0 kB (1023 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/clike/clike.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Aom%2BaBqmtcOOQkXrhP6QmmGj4FPObuC1EgcnU0WWXCaYZQJHbabHxbmTYzW4eJt0PfA%2FSxgE3vTqpIYngf9jag7suiIgtvlh8Zqt1FGoMALlQNb7ZHULXFlElA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598bede5ab51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/css/css.js

172.67.144.225

403 Forbidden

23 kB

URL GET HTTP/3
paste.fo/codemirror/mode/css/css.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
23 kB (23181 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/css/css.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:06 GMT
content-type: text/html
retry-after: 9
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zNrX93Uiw22Megy1Xs8Z3bpooznzmFincnJBZ3tcLCc%2BeSJBayqgqwI%2BEaN9jZpHdXr4q7hrxqz5XN1svHL5%2BSsQU7yr6V8B1kdIXHXWpFmH%2FA%2FZc39kH2VlpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c2c81fb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/shell/shell.js

172.67.144.225

403 Forbidden

23 kB

URL GET HTTP/3
paste.fo/codemirror/mode/shell/shell.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
23 kB (22630 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/shell/shell.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; _ga_HKXR34F8P3=GS1.1.1715130906.1.0.1715130906.0.0.0; _ga=GA1.1.628772289.1715130906
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:06 GMT
content-type: text/html
retry-after: 9
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VjY3xrk%2FRvvLLWax9g%2FaAKASKfEtXbWt22PgXZ%2Fize0EUDyuYLA%2BpwDOwDaxYEkEmkZRVcAXwY0lOXCbJORsYU6X3DUyqDMK7494BAeFod4bo4YNoSPcER%2BcAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c3d88fb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/assets/svg/discord.php

172.67.144.225

200 OK

1.2 kB

URL GET HTTP/3
paste.fo/assets/svg/discord.php
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
exported SGML document, ASCII text, with very long lines (1557)
Size
1.2 kB (1239 bytes)
Hash
9e11d725232644a01452b56fe0fa8bcc
72bd4257388bceb963492b4e6c4a72cad7d3be96
99d543831ee87e57ca87d24cc16028b0e7784a41754b95ade07e069ef56ff8a3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/svg/discord.php HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: image/svg+xml
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BcVR1FCW9FLIMpeoAusZBNSuL1fvJf2otHB8dmlXZIcRWHZyULV0eQ1B44MDGdLCpx%2BGbc3gnbLUqPOh2eHGd%2FQzEXpUOHr%2FclNo7eG3tDPVzC5k46ri%2Fpqv0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598beee60b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

172.67.144.225

200 OK

655 B

URL GET HTTP/3
paste.fo/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1238)
Size
655 B (655 bytes)
Hash
9e8f56e8e1806253ba01a95cfc3d392c
a8af90d7482e1e99d03de6bf88fed2315c5dd728
2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: application/javascript
last-modified: Fri, 03 May 2024 18:04:18 GMT
etag: W/"66352722-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Unj8JXQZqwa6SuIGlgiJLn7NCHTlSjI3ELqGNj5o1Z9XpRtM24%2FwsIWMYFP6dB3uzW%2FdZFZiecwN77WqWwhKF45fbCsQzMIIzP%2FjAQt%2Bq1qN%2BSSzFMoC21xRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598beee66b51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 10 May 2024 01:15:05 GMT
cache-control: max-age=172800, public
content-encoding: gzip

paste.fo/cdn-cgi/challenge-platform/h/b/jsd/r/880598bbeca256ca

172.67.144.225

200 OK

0 B

URL POST HTTP/3
paste.fo/cdn-cgi/challenge-platform/h/b/jsd/r/880598bbeca256ca
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/jsd/r/880598bbeca256ca HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12118
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; _ga_HKXR34F8P3=GS1.1.1715130906.1.0.1715130906.0.0.0; _ga=GA1.1.628772289.1715130906
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:06 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
priority: u=3,i=?0
set-cookie: cf_clearance=NLMe34BgedXdQ3G8JpeyaH_XxGJAoDdS42UrK.hdRnM-1715130906-1.0.1.1-0MdD0YLHDo8M1Qt_FS3I2S7ACgwwQ9EoBXYpxRrSTKSL4djugfR1Eu_TfUEgZiDDXeW7gniTjZTjyzAz.h4Gdg; Path=/; Expires=Thu, 08-May-25 01:15:06 GMT; Domain=.paste.fo; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FKFTL8XlYmEFl86Y8axulIOoZfrf4La%2Frjes%2FiCpjAmeDFWpKFs116BlpYTg9c%2FE0Af7gNTCw5afpwSUOjXIMdFjKtP%2F%2BMXNrAiRV%2F%2FO4aw5j%2FbXTxdx7XnMcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598c6c9cfb51e-OSL
alt-svc: h3=":443"; ma=86400

paste.fo/3076A27CMC59454D15440B4C490B185B005A4D545A1A7AM705684F02586A197B565B4219501B56585F.jpg

172.67.144.225

403 Forbidden

22 kB

URL GET HTTP/3
paste.fo/3076A27CMC59454D15440B4C490B185B005A4D545A1A7AM705684F02586A197B565B4219501B56585F.jpg
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
22 kB (22079 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /3076A27CMC59454D15440B4C490B185B005A4D545A1A7AM705684F02586A197B565B4219501B56585F.jpg HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; _ga_HKXR34F8P3=GS1.1.1715130906.1.0.1715130906.0.0.0; _ga=GA1.1.628772289.1715130906
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:06 GMT
content-type: text/html
retry-after: 9
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q06YAfa2Ine8QgcJPbTmmyAwR2ot13NiCXFqlBwwczWUZnc8O%2FoZfTFy%2FKh9rB3Q%2FV0fwKBvAKBrs5lUnqpzPjx9kF4ZMIQLfZGLWWaNIiKVRG0QJ7vqr%2FAcAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c438c3b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/php/php.js

172.67.144.225

403 Forbidden

551 B

URL GET HTTP/3
paste.fo/codemirror/mode/php/php.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
551 B (551 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/php/php.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=okhnCYOPLyM%2FK%2FUwKHuZlXkAWn9bFi0uMSxpWeVgJkUBEdRIq%2FyizNg3ZET4fYr3ivLBRbovIxIekRV%2BLwZBFfQmDspuL8LsjkFvI21D0d2%2FBefYzA9irUzfYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598bede57b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.cloudflareinsights.com/beacon.min.js/vedd3670a3b1c4e178fdfb0cc912d969e1713874337387

104.16.79.73

200 OK

7.1 kB

URL GET HTTP/2
static.cloudflareinsights.com/beacon.min.js/vedd3670a3b1c4e178fdfb0cc912d969e1713874337387
IP
104.16.79.73:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subjectcloudflareinsights.com
Fingerprint73:92:5A:16:97:55:FC:A5:32:7C:F3:9D:0C:84:EF:F3:2F:AA:B5:00
ValiditySun, 10 Mar 2024 02:33:42 GMT - Sat, 08 Jun 2024 02:33:41 GMT

File type
gzip compressed data, from Unix
Size
7.1 kB (7078 bytes)
Hash
76cdb36dc0fd70261b856c646ba4da83
5e6b20bbede6e414a9c77bc7474fc37590d6fb23
9be7755eaaf1f4befa038d4623ba83023519280ab1ddc5cc8702a595fd1b0c74

HTTP Headers

GET /beacon.min.js/vedd3670a3b1c4e178fdfb0cc912d969e1713874337387 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.4.1"
last-modified: Mon, 06 May 2024 19:01:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598bf4bf2569a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

paste.fo/codemirror/mode/javascript/javascript.js

172.67.144.225

403 Forbidden

10 kB

URL GET HTTP/3
paste.fo/codemirror/mode/javascript/javascript.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
10 kB (10470 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/javascript/javascript.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:06 GMT
content-type: text/html
retry-after: 9
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fi0uHiU7PO5IFbJYDH6yp3umXpi2jWD8v4Y%2F1gLtHpVbMRf%2BdVqTE5nq6I%2FHxn3gqivLMRyEq47sMYs8oiyFwjw7u6ORNVEmnz7HwRo3gn%2BWEedcZHgwMXlW%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c2a811b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/theme/material-palenight.css

172.67.144.225

403 Forbidden

11 kB

URL GET HTTP/3
paste.fo/codemirror/theme/material-palenight.css
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
11 kB (10748 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/theme/material-palenight.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WYi2jmh%2By%2BgzEmDLmaOOxpnR2qQZh%2BUSnwaz%2BOGJdPLeD8udgcxZwt3ubRn0B2vTwUtT78JCa%2B2OoEVE09O4fBQDx9bLbJx8ybq8sw89%2FM47rhz1vFp9kHUcFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598bede4db51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/htmlmixed/htmlmixed.js

172.67.144.225

403 Forbidden

11 kB

URL GET HTTP/3
paste.fo/codemirror/mode/htmlmixed/htmlmixed.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
11 kB (10627 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/htmlmixed/htmlmixed.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MjFbPT0DiBcfqOKWFpBcSvjz180%2BJfPjydIegpxApIGoJGu1uGTG%2BPZ4%2B5TVQvGSywq5yVRz5RpNSzlB0TEJHBOGFOGgSvNkpC7YN5X9KeRPei5S5Y%2BtjZSOGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598bede5bb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/CSSm022d9d539ba3.css

172.67.144.225

403 Forbidden

7.7 kB

URL GET HTTP/3
paste.fo/CSSm022d9d539ba3.css
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
7.7 kB (7724 bytes)
Hash
7be6216a205b83c724bed7c8724e6ba6
9b9b8b3a980d1d4c3d8c4168065c9d11fe32b7fc
d04b43daf0c4e200b091bfefde1324543682266f2201c6c8e38d06249e1087ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /CSSm022d9d539ba3.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V62x5ZtUUE%2Fw6TmQazUJUYpRSZQdcAWGw4CL4lh%2BHK0QOWnm1OKPkAr%2BQMgyeWJ%2Bn9ss2QbBZoXUr%2BetFsk4G7d4I%2BdkX3eX7k%2BhIYJ5O5I33a4Kn%2FMbB5gfLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598beee5eb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js

172.67.144.225

200 OK

3.6 kB

URL GET HTTP/3
paste.fo/cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (7850), with no line terminators
Size
3.6 kB (3587 bytes)
Hash
405d344baa50438012a89515cbfcf9e0
4aaaf4d8a0510e9b3f68230ff1245e1752b1b7e2
1cfc3b6c1244daf2ac7ffb6a4b3d858b9936190cf85fa972e443042da245f9dc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; _ga_HKXR34F8P3=GS1.1.1715130906.1.0.1715130906.0.0.0; _ga=GA1.1.628772289.1715130906
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:06 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YMqUUO8VhrfnNRJt4QSYSgnxh9zu3GLJU%2FQRMDcRd6wOueVCrGUXbGqi72bkURjSVpjtfXkSJp7M9KdmA5NxuNayN0IfI1w9JhD6kQMVlBEQX7KZN6UhMLXCsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c5a960b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/lib/codemirror.js

172.67.144.225

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/lib/codemirror.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/lib/codemirror.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jmIrlFgvi52nHzTOOd9HZrLQNTBe4V%2BNcgfymQ7BAeEYsJ7WIT4eppJMLc73Xt39kUeFUd7DzQXmkp4Zs4iD55ZQSp%2FUF52Aoce7Ll2guLTdt02dbkZ04TEKMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c27800b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Size
22 kB (21528 bytes)
Hash
6113a25a586aeb6d0d3af5b5b652b973
25619eeae1fe17389310e4d392c427b7711dba44
539bdb4bd9bb71c694451bbf2d5d7c0b2849e3584f0b50be3588a07605d3337f

HTTP Headers

GET /s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:38 GMT
expires: Sat, 03 May 2025 16:31:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:21:57 GMT
content-type: font/woff2
age: 377008
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

api2.hcaptcha.com/checksiteconfig?v=18fa736&host=paste.fo&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&sc=1&swa=1&spst=0

104.18.124.91

200 OK

718 B

URL POST HTTP/3
api2.hcaptcha.com/checksiteconfig?v=18fa736&host=paste.fo&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&sc=1&swa=1&spst=0
IP
104.18.124.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/18fa736/static/hcaptcha.html#frame=challenge&id=0pxx7jn6q9mj&host=paste.fo&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&endpoint=https%3A%2F%2Fapi2.hcaptcha.com&theme=light&origin=https%3A%2F%2Fpaste.fo&size=invisible
Certificate
IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (734), with no line terminators
Size
718 B (718 bytes)
Hash
b9083a04fd72518db0172d027c474209
52a09377da3c8a52eec8e829c7c3dac272b2fb84
e8d658284a885e9f1cd5fb0b3db67d852752938f193fea0631bf32d628165d94

HTTP Headers

POST /checksiteconfig?v=18fa736&host=paste.fo&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&sc=1&swa=1&spst=0 HTTP/1.1
Host: api2.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://newassets.hcaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:06 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent
access-control-allow-methods: GET, HEAD, POST, OPTIONS
access-control-allow-origin: https://newassets.hcaptcha.com
vary: Origin, Accept-Encoding
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28vk2VKwPbLoawFj9mU2fhedYxxWRCq8zarqhgAih; SameSite=None; Secure; path=/; expires=Wed, 08-May-24 01:45:06 GMT; HttpOnly
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 880598c7f99d56c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/python/python.js

172.67.144.225

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/python/python.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/python/python.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; _ga_HKXR34F8P3=GS1.1.1715130906.1.0.1715130906.0.0.0; _ga=GA1.1.628772289.1715130906
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:06 GMT
content-type: text/html
retry-after: 9
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ALX3gh0BylRORHtbd8i5ktF6CVNnrSvtIx7HcQvz%2BBATbA4gJf6g%2FaS4m%2F4f7NHEO9aLFJrEO2abvHccepoo8mugzM%2FEJNyNYkgE%2FPDThkEzwXS1WV0nXjGyzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c3b885b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

u.paste.fo/script.js

172.67.144.225

403 Forbidden

0 B

URL GET HTTP/3
u.paste.fo/script.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /script.js HTTP/1.1
Host: u.paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wU8pcIulzp5gSVUvjKZTXtAWDbd2vcoNi2geIUEUBJpSKg5NLb%2FkWtBwNfYAkXbXoltSo5FBfWLNIbYNNPwiIDUqiiMINhRMPLcikzKguxCFwxReCBcrPcQOO59x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c27ffeb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/?error=404%20Not%20Found!

172.67.144.225

200 OK

20 kB

URL User Request GET HTTP/2
paste.fo/?error=404%20Not%20Found!
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1494)
Size
20 kB (19495 bytes)
Hash
c8a67f33403ac4e4326cdc12858b6632
fbe425cbbc98fe40a2bff240bae3968f17d7db5f
5d92d9f6f8d2464280040d3cd2f28199c64adbcf26d156851a39549a71741549

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?error=404%20Not%20Found! HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=3mm7jrjd1jfa79656hnujeoehh; path=/
token=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bIIeC21TchNAmZKExFgoSyBcZ4vLCgJTpTD2%2Fx9mEKqmzEGGWkCuAIfRyGFMQkiTHYaZGV6Ez86CrH8TA7%2FwDcguF7KOor3m%2FwIDgNL%2BKqMPMLfEayfPWhzXrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598bbeca256ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

paste.fo/codemirror/lib/codemirror.js

172.67.144.225

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/lib/codemirror.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/lib/codemirror.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V8spMHdpsog79Xor8HupG4wth2dKBA2hJV6CRS8ow8mYxDQFD638Brip5drzPT3MxLASRv5uceBeZ07mrZym3U4C8HeI6JC%2Fe7C9%2F0tlK4fhxgu36P84SAQ%2FYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598bede50b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

newassets.hcaptcha.com/captcha/v1/18fa736/hcaptcha.js

104.18.124.91

200 OK

387 kB

URL GET HTTP/3
newassets.hcaptcha.com/captcha/v1/18fa736/hcaptcha.js
IP
104.18.124.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/18fa736/static/hcaptcha.html#frame=challenge&id=0pxx7jn6q9mj&host=paste.fo&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&endpoint=https%3A%2F%2Fapi2.hcaptcha.com&theme=light&origin=https%3A%2F%2Fpaste.fo&size=invisible
Certificate
IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT

File type

Size
387 kB (387161 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /captcha/v1/18fa736/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/18fa736/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:06 GMT
content-type: application/javascript
etag: W/"53dd4c97b84fc9233d1e06e83a19de29"
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Wed, 22 May 2024 01:15:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 880598c6592d56c4-OSL
content-encoding: br

newassets.hcaptcha.com/c/f922a41/hsw.js

104.18.124.91

200 OK

470 kB

URL GET HTTP/3
newassets.hcaptcha.com/c/f922a41/hsw.js
IP
104.18.124.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://newassets.hcaptcha.com/captcha/v1/18fa736/static/hcaptcha.html#frame=challenge&id=0pxx7jn6q9mj&host=paste.fo&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=9c54b617-bd43-4858-a8c9-83ce00be8180&endpoint=https%3A%2F%2Fapi2.hcaptcha.com&theme=light&origin=https%3A%2F%2Fpaste.fo&size=invisible
Certificate
IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT

File type

Size
470 kB (469642 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c/f922a41/hsw.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/18fa736/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:06 GMT
content-type: application/javascript
etag: W/"a015c3f04def6c02f6d3a815ff97f100"
cache-control: public, max-age=3024000
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Wed, 12 Jun 2024 01:15:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 880598c869c856c4-OSL
content-encoding: br

paste.fo/codemirror/mode/xml/xml.js

172.67.144.225

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/xml/xml.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/xml/xml.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:06 GMT
content-type: text/html
retry-after: 9
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7vziQ39zKZlm6AYomwu%2BzLiOr8dJ08K7qfDx3PdDmSTjevQ6xa5UDg%2BendJruCOu62l%2BdY%2BO10W7TtHe8XjICWtFNgKn2qdhK2W4H6C6w7jzOHsmmC8qRZ7sDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c29807b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Size
22 kB (21528 bytes)
Hash
6113a25a586aeb6d0d3af5b5b652b973
25619eeae1fe17389310e4d392c427b7711dba44
539bdb4bd9bb71c694451bbf2d5d7c0b2849e3584f0b50be3588a07605d3337f

HTTP Headers

GET /s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:38 GMT
expires: Sat, 03 May 2025 16:31:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:21:57 GMT
content-type: font/woff2
age: 377008
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

paste.fo/assets/css/cio.css

172.67.144.225

200 OK

1.2 kB

URL GET HTTP/3
paste.fo/assets/css/cio.css
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1152), with no line terminators
Size
1.2 kB (1152 bytes)
Hash
6a91b9352b213689c0432bb87eddb2ae
4a9beb1f3a827dee5a03a246a296fac2f3677165
5721962451086a4c469a6d1b1e4cc133f03c3ea0377916a91b45373463855620

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/cio.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1653
etag: W/"675-614ce4abcf80d-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 134
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EPqZFZRT2NjfICV2BXOB7L8090%2Bn7IHDT2V1c6kO3O4L8i42s3TDtVXT4N7rkyTiiaenMEepoX5UqOK%2FX2J8MX9lNm4MvIPkmw%2F2UmeI%2B3YcLiZIeqNZJ7RZOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598bebe3ab51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

js.hcaptcha.com/1/api.js

104.18.124.91

200 OK

387 kB

URL GET HTTP/2
js.hcaptcha.com/1/api.js
IP
104.18.124.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT

File type

Size
387 kB (387161 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /1/api.js HTTP/1.1
Host: js.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: application/javascript
etag: W/"53dd4c97b84fc9233d1e06e83a19de29"
cache-control: max-age=300
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Wed, 22 May 2024 01:15:05 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
age: 0
cross-origin-resource-policy: cross-origin
server: cloudflare
cf-ray: 880598bf4f36569b-OSL
content-encoding: br
X-Firefox-Spdy: h2

paste.fo/assets/svg/email.php

172.67.144.225

200 OK

577 B

URL GET HTTP/3
paste.fo/assets/svg/email.php
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
exported SGML document, ASCII text, with very long lines (586), with no line terminators
Size
577 B (577 bytes)
Hash
3f774fd678c6e100c4d914d9afc0dc8b
bab6ac432d913ee0d99dae0a7caafcea559222bd
e7f5c890c6acb9078887bbeab309ff5771782edac2444c647126072427cdc336

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/svg/email.php HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: image/svg+xml
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=okZaTCA%2BppvGyT7iqAWL6jnMCd0Cnt38Gq%2BdA%2B%2BNK6ipkVj5L7vdWwl7yDTyao2tHavU9HQDSaOok0YKgEG2a%2Bx%2B4pZOdog3TJ9vX3fziyf0JVbPWOaLvyxVig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598beee65b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/assets/svg/twitter.php

172.67.144.225

200 OK

1.1 kB

URL GET HTTP/3
paste.fo/assets/svg/twitter.php
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
exported SGML document, ASCII text, with very long lines (1064), with no line terminators
Size
1.1 kB (1055 bytes)
Hash
52ada42cb5438b7b0421018fd75f361e
d5e00f0d91ac0e644fa97b585fa704764276830b
5814970c931c847c4acc7c25ce39b1f9abbed82f7642c2da34a93f895d875746

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/svg/twitter.php HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: image/svg+xml
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J%2BfA4BHlJ97N8Yzou7H6FJpqqgoUIArVfEESM6xXJ6NSsPC0eO1KI%2B7l%2FwhXIN7vbEY6IW2dcGRxL%2FGIDeDfyZZUdXNE3V3JUHo0oTGryc6jjIzYWb56E8J6LA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598beee61b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/7de04e8eacc8/unlock/7de04e8eacc8/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!

172.67.144.225

302 Found

20 kB

URL User Request GET HTTP/2
paste.fo/7de04e8eacc8/unlock/7de04e8eacc8/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
20 kB (19495 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /7de04e8eacc8/unlock/7de04e8eacc8/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found! HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 08 May 2024 01:15:04 GMT
content-type: text/html; charset=UTF-8
location: /?error=404 Not Found!
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Jr1jgsQdGLJqpfgHdfyOFVovrGgtcMETKr44JKqxSyTAK%2BmygzXYS1d2Zygs7x9V0U69v9YPUuaYXmp7PYNO8nRG4UAYplkyusBByUjGK3%2Bs6Q8dISZmd%2Bb%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598bb1c3756ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

paste.fo/node_modules/@sweetalert2/theme-dark/dark.css

172.67.144.225

200 OK

24 kB

URL GET HTTP/3
paste.fo/node_modules/@sweetalert2/theme-dark/dark.css
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (24342), with no line terminators
Size
24 kB (24342 bytes)
Hash
80b002261f8a746e3756d6883342252a
c8282deb8dfdcdf89ca54c6d6e34b23bc2beeb22
6b7dfdcc77e85a9db663a990f749d892c774f63254404cf2a72b312a8136bfd1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /node_modules/@sweetalert2/theme-dark/dark.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=30018
etag: W/"7542-614ce4ab9ead1-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 134
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yGexio45w2ZOwETyx%2BcQ6KwPAee0L%2F7v3HVpJXZZ4g0xsvqyIjRl5VUt9QH8Ulhkvrgi7pY%2Fvh1fsltDPMLAbx0Cw2iZUbFuiLiz0OsOsEBCT1guTvj7ycA3FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598bebe3eb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/assets/css/style.css

172.67.144.225

200 OK

11 kB

URL GET HTTP/3
paste.fo/assets/css/style.css
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (10693), with no line terminators
Size
11 kB (10693 bytes)
Hash
a9579467f8b95bbcdbd6232105e6a253
df9b19ccebf1eca5fe14169881b132813919345d
22877d598e09dd9f8452f52a500181eae909e3f4aaa4d4c49e0b0b18cfbd60da

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/style.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=15702
etag: W/"3d56-614ce4abcf80d-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 134
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BnJS2az9%2F6gDThV21iIhOjk%2BOzyQx5Qqg%2BWfrjXTvzp8SOU2JWiQ3QjThMfPusLunPx3vFUJi%2B0nj0HoQa%2FT6G6fumwvbtqdPawWUuJ00in2AUKrCC%2F%2BNHT7OA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598beae34b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Size
22 kB (21528 bytes)
Hash
6113a25a586aeb6d0d3af5b5b652b973
25619eeae1fe17389310e4d392c427b7711dba44
539bdb4bd9bb71c694451bbf2d5d7c0b2849e3584f0b50be3588a07605d3337f

HTTP Headers

GET /s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:38 GMT
expires: Sat, 03 May 2025 16:31:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:21:57 GMT
content-type: font/woff2
age: 377008
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js

172.67.144.225

302 Found

7.9 kB

URL GET HTTP/3
paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
7.9 kB (7850 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; _ga_HKXR34F8P3=GS1.1.1715130906.1.0.1715130906.0.0.0; _ga=GA1.1.628772289.1715130906
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 302 Found
date: Wed, 08 May 2024 01:15:06 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vYSQHspmpuRLSWeBcuzGbMyPPbWHS4asUN%2Btzo6UTxktDEhvgE%2FH00JwmQ%2FUW%2FJPtpY8Qjfo7IXTEZprGjbm%2BIuFUXHgm%2FdTBD9UKR1kmNF9cBfLJZiCAruIMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c58955b51e-OSL
alt-svc: h3=":443"; ma=86400

paste.fo/assets/img/bg1.gif

172.67.144.225

200 OK

25 kB

URL GET HTTP/3
paste.fo/assets/img/bg1.gif
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
25 kB (24898 bytes)
Hash
dcab8f9443952c7589be3e4db6072853
824ca8c921eeca604844d3f00d08691631199201
a1a2a8e83029575fa6afde2c7b946fd3d98407fccf673c587aac398cd2fc8cef

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/bg1.gif HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; _ga_HKXR34F8P3=GS1.1.1715130906.1.0.1715130906.0.0.0; _ga=GA1.1.628772289.1715130906
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:06 GMT
content-type: image/gif
content-length: 24898
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
etag: "6142-614ce4abce86d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 134
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8aaPxYWI80VPMkbmzMJVxM7dEJDtG8OdGTfZnvtFGqY0Bd0QOvBNgsgolSkH2cb88GpY%2B6S60vjTpWasi%2FepDUWLgtLwkYjyns8SHvKMfyZJoW5JKKhYFDoIEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c438c4b51e-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2

216.58.207.227

200 OK

22 kB

URL GET HTTP/2
fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Size
22 kB (21528 bytes)
Hash
6113a25a586aeb6d0d3af5b5b652b973
25619eeae1fe17389310e4d392c427b7711dba44
539bdb4bd9bb71c694451bbf2d5d7c0b2849e3584f0b50be3588a07605d3337f

HTTP Headers

GET /s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:38 GMT
expires: Sat, 03 May 2025 16:31:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:21:57 GMT
content-type: font/woff2
age: 377008
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

paste.fo/assets/css/responsive.css

172.67.144.225

200 OK

4.6 kB

URL GET HTTP/3
paste.fo/assets/css/responsive.css
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (4570), with no line terminators
Size
4.6 kB (4570 bytes)
Hash
85e024d58588895496ff6e65f47a0484
ff6cb78df5ee61dffa425ace5283407ee562e4af
fd51897bd68e6bdf326bfb11b3580be32da026ab50c5e494677b202f93822877

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/responsive.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7512
etag: W/"1d58-614ce4abcf80d-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 134
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LJLEpFHtsgXoxs0KuvpOMiSiPGNeBX3urIi%2BhWb4J%2BnIBpUH9SZg5kY7QMVG3vRhBhQ6cdI6hz03mOOHHf6T%2Fl1r2ViOH9xjiwV%2Bm6s8zES8dJ1bXUksSDbuDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598bebe39b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/python/python.js

172.67.144.225

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/python/python.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/python/python.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rXz40t87NFqbKcON5xVeyWTkByxP4JNyqbb%2Bc%2FdvKymnQuSYgWW%2BAOfiRVjLfSn46DrsFH%2Fn8mvNqgNcezK924aeLyI1d3mtWTOH7UumJedBcHUXkL1f4m1YOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598bede58b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/assets/css/user.css

172.67.144.225

200 OK

5.2 kB

URL GET HTTP/3
paste.fo/assets/css/user.css
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (5248), with no line terminators
Size
5.2 kB (5216 bytes)
Hash
7690e1f323bfc9cd0658b8355ec967ae
f6556ee7ace5044dcc0a5a8db6a4cc2b76dfcec2
2b878eddd32ef75f04d6923d6bc597d06e0f41d6988ef952edd17dfbacc6b849

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/user.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7053
etag: W/"1b8d-614ce4abcf80d-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 134
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CLE%2FtQnjddLN0OEo0z0%2FetiOWa8ulopoHFblAn2viUHcHOdLcXgEhyhz2d1FOdWzYqSxsN9g4iUg3TTeh%2BzB9FKpaT1coal1AQdNnnKRYVKJYQJJHYkGCBR%2B%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598bebe37b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/favicon.ico

172.67.144.225

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/favicon.ico
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; _ga_HKXR34F8P3=GS1.1.1715130906.1.0.1715130906.0.0.0; _ga=GA1.1.628772289.1715130906
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:06 GMT
content-type: text/html
retry-after: 9
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bo%2Bi%2BIyph5RMMd7PRCVXSc731GumVoW%2By%2BzSQrdAszJRl7DQj7HsZTXsl7pGjqp98tLNYKmCXC5xk0Y0xOQH4jtzcZHc4NkcR1asggu7dudNsDEh%2FYntcG%2FwUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598c58952b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/mode/xml/xml.js

172.67.144.225

403 Forbidden

1.1 kB

URL GET HTTP/3
paste.fo/codemirror/mode/xml/xml.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1160), with no line terminators
Size
1.1 kB (1106 bytes)
Hash
42f525f14b991861e94a60dc4bc7af66
d632ba79d34c33e93dbf89bfa872c6a861199d61
1af41f38e7033b546dc179ac78bc0b36a05681b5d78e6e01943d56e85de42269

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/mode/xml/xml.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O955Rq7PIQc7hhFy%2BR%2BbxV0migbXjhVfoIIL3zQfzXF0gFxikbQCBkh19E5W6Xkysg%2FO4uF5%2BdA94Ghy6s9l2i5A5KD17CvsdVGO1Cx57aGx%2FSL20yKhN59MEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598bede52b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

newassets.hcaptcha.com/captcha/v1/18fa736/static/hcaptcha.html

104.18.124.91

200 OK

1.8 kB

URL GET HTTP/3
newassets.hcaptcha.com/captcha/v1/18fa736/static/hcaptcha.html
IP
104.18.124.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT

File type
HTML document, ASCII text, with very long lines (1803), with no line terminators
Size
1.8 kB (1758 bytes)
Hash
a4b0cd73823c04eac73b745bac712a18
52a8be2d8367580c2aff2f27db4e4252489e1ad6
57d905cf66dbb89494f60aebd3925345e5458f77ac172f2e78fdd15480060eb6

HTTP Headers

GET /captcha/v1/18fa736/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:06 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Wed, 22 May 2024 01:15:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 880598c578ef56c4-OSL
content-encoding: br

paste.fo/cdn-cgi/rum?

172.67.144.225

204 No Content

0 B

URL POST HTTP/3
paste.fo/cdn-cgi/rum?
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /cdn-cgi/rum? HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1052
Origin: https://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7; _ga_HKXR34F8P3=GS1.1.1715130906.1.0.1715130906.0.0.0; _ga=GA1.1.628772289.1715130906; cf_clearance=NLMe34BgedXdQ3G8JpeyaH_XxGJAoDdS42UrK.hdRnM-1715130906-1.0.1.1-0MdD0YLHDo8M1Qt_FS3I2S7ACgwwQ9EoBXYpxRrSTKSL4djugfR1Eu_TfUEgZiDDXeW7gniTjZTjyzAz.h4Gdg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
date: Wed, 08 May 2024 01:15:06 GMT
access-control-allow-origin: https://paste.fo
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 880598c84adfb51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff

u.paste.fo/script.js

172.67.144.225

403 Forbidden

0 B

URL GET HTTP/3
u.paste.fo/script.js
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /script.js HTTP/1.1
Host: u.paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/html
retry-after: 10
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ov6kQSSUbl6ODbnL4JXvhMJE9W%2FT5kW7wHO%2BzygB9wLjPikTogkWbdLzSjKl4U%2FvA%2F23VvgYJIWCzhez8WYGu77ktmBxSeUESAcUJhChZepdtZMyDCwqz6oT0nYb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880598beee5fb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

paste.fo/codemirror/lib/codemirror.css

172.67.144.225

200 OK

6.3 kB

URL GET HTTP/3
paste.fo/codemirror/lib/codemirror.css
IP
172.67.144.225:443
ASN
#13335 CLOUDFLARENET

Requested by
https://paste.fo/?error=404%20Not%20Found!
Certificate
IssuerCloudflare, Inc.
Subjectpaste.fo
Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22
ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (6275), with no line terminators
Size
6.3 kB (6275 bytes)
Hash
2562bc2e52c5852b18e87ec08978ba49
54c7e49460f3235492050057453609fedcc01e09
73d08a4fac48937ec5ce812b154c088351783009eba0c22644ec91ef9a0c0ff2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /codemirror/lib/codemirror.css HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://paste.fo/?error=404%20Not%20Found!
Cookie: PHPSESSID=g9jq1rfbavbm4ntbcna5l8guf7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 01:15:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=8720
etag: W/"2210-614ce4aba67d0-gzip"
last-modified: Fri, 29 Mar 2024 15:28:29 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 134
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6zlecMfs9Bi5V%2FlCiT4JhYx5UrfL%2B%2BC2GiaiSE8qH2TDEAqWnaS%2BiGesgJY3UNwjK8P2cTuV6r3x5CIKmDpGJaAXzUg476KrNmIV404q2Nc6W3klIBYXsh14ug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880598bece49b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by