urlquery.net
WEBSITE ANALYSIS REPORT

http://zpaste.net/p/tftqt

public
Report tags
Submit tags
Request review

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://zpaste.net/p/tftqt
Submitted IP / ASN
Country unknown 104.21.91.46 AS13335 · CLOUDFLARENET
Final URL
https://zpaste.net/p/tftqt
Final IP / ASN
Country unknown 172.67.166.185 AS13335 · CLOUDFLARENET

Final page

Page title
RoadCraft Rebuild Edition | MEDIAFIRE - zPaste.net
Final DOM MIME
Not recorded
Final DOM size
Not recorded

Detections

URLQuery
0
IDS
4
TDS
10

Activity

HTTP requests
73
Observed hosts
24
Script records
59

Estimated HTTP data

Sent
~51.6 KB
Received
~6.29 MB

Page capture

Final browser state

Recorded title

RoadCraft Rebuild Edition | MEDIAFIRE - zPaste.net

Unknown final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

Threat Detection Systems

6

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Hagezi Threat Feed Sinkholed

VerdictMalicious
Severitymedium

DNS0 Zero Sinkholed

VerdictMalicious
Severitymedium

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium

IDS

1

Suricata IDS ET INFO Session Traversal Utilities for NAT (STUN Binding Request)

VerdictVerdict not recorded
Severitylow

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
onetag-sys.com 10472015-04-052015-04-082025-10-203.7 KB3.7 KBUnited Kingdom 51.89.9.254
6.adsco.re 916272017-02-142018-01-152025-10-23841 B989 BCountry unknown 104.17.138.102
vpaid.vidoomy.com 394022017-02-222021-01-212025-10-23870 B1.05 MBSweden 185.76.9.27
www.google.com 221997-09-152015-05-102025-10-192.5 KB89.3 KBUnited States 142.250.178.36
usrpubtrk.com 3 alerts68242025-06-162025-06-172025-10-22481 B534 BCountry unknown 172.67.186.11
fonts.gstatic.com N/A2008-02-112014-04-022025-10-19525 B15.8 KBUnited States 142.250.74.35
c.adsco.re 1007692017-02-142017-11-292025-10-20507 B78.5 KBCountry unknown 104.17.138.102
www.cdn4ads.com 4415942020-04-182020-04-192025-10-21461 B41.5 KBNorway 95.173.205.15
acscdn.com 2 alerts187692020-05-052020-05-062025-10-20827 B184.3 KBCountry unknown 104.18.16.201
cdn4ads.com 442682020-04-182020-04-192025-10-211.7 KB257 BUnited States 216.59.63.128
pzzkk1k2q720.s4.adsco.re N/A2017-02-142025-10-262025-10-26432 B0 BCountry unknown 0.0.0.0
xa.workcahoots.com 5 alerts37261342025-03-032025-03-262025-10-18422 B1.5 KBThe Netherlands 172.255.106.53
pzzkk1k2q720.n4.adsco.re N/A2017-02-142025-10-262025-10-26432 B0 BCountry unknown 0.0.0.0
zpaste.net 5828732019-11-192019-11-192025-10-2412.8 KB857.7 KBCountry unknown 172.67.166.185
adexchangeclear.com 2 alerts249432015-04-272025-07-162025-10-201.1 KB1.6 KBCountry unknown 104.21.78.155
d.vidoomy.com 2909272017-02-222021-03-172025-10-2310.6 KB3.4 KBSpain 212.36.83.245
ad.vidoomy.com 2407622017-02-222023-10-232025-10-236.9 KB10.5 KBSpain 212.36.83.215
www.gstatic.com 1460472008-02-112012-05-292025-10-193.3 KB3.32 MBUnited States 142.250.74.131
www.googletagmanager.com 2832011-11-112012-10-042025-10-19880 B676.5 KBUnited States 142.250.178.40
zshorte.net 31448682020-06-162020-06-192025-10-24410 B3.2 KBCountry unknown 104.21.89.60
ads.vidoomy.com 2940462017-02-222017-10-132025-10-21418 B4.8 KBUnited States 37.19.207.209
4.adsco.re 955322017-02-142021-01-042025-10-23841 B0 BCountry unknown 0.0.0.0
adsco.re 30692017-02-142017-04-032025-10-21440 B1.8 KBUnited States 162.252.214.5
pzzkk1k2q720.l4.adsco.re N/A2017-02-142025-10-262025-10-26432 B463 BUnited Kingdom 185.200.118.62
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot