200 OK 3.6 kB URL User Request GET HTTP/2 IP
ASN #21501 Host Europe GmbH
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (557)
Hash ef99e3a6795cea6bf491296bbbe1d1b1
0d7d83fca3ebec4a5e4905dc72626ed8f68d73e2
1ddd9328f79603788d28b7771fe3ec6e5e9bc6fd0a6318c5a90473cb61f3cde0
GET /zLUd HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de; path=/
vary: Accept-Encoding
content-encoding: br
content-length: 3564
content-type: text/html; charset=UTF-8
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
justpaste.me/css/jpm.css
200 OK 359 B IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
Hash e88e73735c3c02f9d1e2fa9a69553667
b6c69aaf5130b191a4f7116b09f2919286febe15
6acb6d8f7acad7e9e60a55b2ba10588b1709f45972bc4ac418da3f76e9a5b8a4
GET /css/jpm.css HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Oct 2021 22:16:24 GMT
etag: "70a1d84-2e1-5cf852d79a6a0-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 359
content-type: text/css
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
justpaste.me/css/swipebox.css
200 OK 1.0 kB URL GET HTTP/2 justpaste.me/css/swipebox.css
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
Hash 541a40d5b875fabb0fddb5ee7ae19ac2
6164fbd8baa1b8a6e661365fab379c3572a5a2ea
b0320f4fe9087231c2b75557d7735efef8a4dbd8d3d4aed1ecd2e9fbbc5cfe6c
GET /css/swipebox.css HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:26:28 GMT
etag: "70a1d86-110a-5759942715438-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1011
content-type: text/css
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
justpaste.me/js/share42/share42.js
200 OK 1.7 kB URL GET HTTP/2 justpaste.me/js/share42/share42.js
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type HTML document, ASCII text, with very long lines (3761)
Hash a33d222efe1c9bcd896f2c2b45b4dcc7
35c79f40feb885b744c547e1747d14cb696dab0b
e2bf3fe85a8f101cc67e10f85f9a9d7e82ccb2d30f51a7885f96ea1007456ea4
GET /js/share42/share42.js HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:26:31 GMT
etag: "70a1db0-edc-5759942980a83-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1722
content-type: application/javascript
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
justpaste.me/img/logo.png
200 OK 21 kB URL GET HTTP/2 justpaste.me/img/logo.png
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type PNG image data, 236 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash bd1616dd28abe2395812c4b00e5fd0f0
0d04f784508c9b7ced5e1cf13401856f754c70e6
ff0289cdf8239173d75a9949bbd71ab39aa20614484f3277d4affcc11521f04a
GET /img/logo.png HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:26:30 GMT
etag: "70a1d9e-521e-575994287a724"
accept-ranges: bytes
content-length: 21022
content-type: image/png
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
justpaste.me/img/img_justpaste_me.gif
200 OK 8.3 kB URL GET HTTP/2 justpaste.me/img/img_justpaste_me.gif
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type GIF image data, version 89a, 236 x 40\012- data
Hash 6d657f55923196e0446d57b3ab488f51
ad31093ab67971367b3831e145ea663ab77dcb83
bfe4d4ba846d1d31db98ffc402513d68316b80a38ef7d02143ac62ece490aded
GET /img/img_justpaste_me.gif HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:26:30 GMT
etag: "70a1da0-204e-5759942879784"
accept-ranges: bytes
content-length: 8270
content-type: image/gif
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
justpaste.me/css/bootstrap.min.css
200 OK 18 kB URL GET HTTP/2 justpaste.me/css/bootstrap.min.css
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type ASCII text, with very long lines (65371)
Hash ec3bb52a00e176a7181d454dffaea219
6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68
f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /css/bootstrap.min.css HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:26:28 GMT
etag: "70a1d85-1d970-575994272bf82-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 18167
content-type: text/css
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
justpaste.me/js/jquery.swipebox.js
200 OK 4.0 kB URL GET HTTP/2 justpaste.me/js/jquery.swipebox.js
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type ASCII text, with very long lines (14677)
Hash 5f4cc67ad066dde63adfc91f354f5b4e
978b74abfa160cef8e8831edb6ca979720894010
7dce1ef59f9f53100db1f7d34c0feaf180b47876bb7330e500d968938c209eb5
GET /js/jquery.swipebox.js HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:26:30 GMT
etag: "70a1da9-3efb-5759942900b9c-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 3997
content-type: application/javascript
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
justpaste.me/js/bootstrap.min.js
200 OK 9.5 kB URL GET HTTP/2 justpaste.me/js/bootstrap.min.js
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type ASCII text, with very long lines (32033)
Hash 5869c96cc8f19086aee625d670d741f9
430a443d74830fe9be26efca431f448c1b3740f9
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
GET /js/bootstrap.min.js HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:26:30 GMT
etag: "70a1da7-90b5-57599428f966b-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 9522
content-type: application/javascript
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
justpaste.me/js/jquery-1.10.2.js
200 OK 32 kB URL GET HTTP/2 justpaste.me/js/jquery-1.10.2.js
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type ASCII text, with very long lines (32072)
Hash e3f24f23b859cf718282e3806ed5ce38
c92a61cb4fbc23adb05973638f60e2999bed4a26
e0108076470765be9ef1e9b242b8a52ef78c8f4532c7263426abc05ea4b60240
GET /js/jquery-1.10.2.js HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:26:30 GMT
etag: "70a1da4-16bab-5759942925976-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 31907
content-type: application/javascript
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash a371f086dbd536eca594de4a2287078e
c571bdb6b8f590dde562ca5fe7bdbea2e3b43c59
4e630bdcf1332869210318d0f5c8b35dc7f9cb5c11dd12a2f19ed3cd2fd26b8b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Oct 2023 20:50:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
justpaste.me/app/plugins/tinymce/tinymce.min.js
200 OK 122 kB URL GET HTTP/2 justpaste.me/app/plugins/tinymce/tinymce.min.js
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type ASCII text, with very long lines (32030)
Size 122 kB (121864 bytes)
Hash bb16520a021ae170a7019675f2f5f81f
da748d8ac26bd4148bb8972b93efbb5f808474aa
02e49d109a4e1853eca8f64a65fdcb7a8d042ae08ec802026357f0a7c8e2c307
GET /app/plugins/tinymce/tinymce.min.js HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:25:46 GMT
etag: "70a199e-5e039-575993ff1c369-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 121864
content-type: application/javascript
date: Sun, 22 Oct 2023 20:50:51 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash c5cdec318e07f9e0da1a09a8c9b1d15d
3b7d38cabf6e06bc945559648b78fb6a7bc2ab4f
5360852752c9dee7df2cafbf35628a64e84e9a169ea988472b1c085daf74a01b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Oct 2023 20:50:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pl17792100.profitablegatetocontent.com/e4/27/a9/e427a9148361046fb1389c0427165509.js
200 OK 14 kB URL GET HTTP/1.1 pl17792100.profitablegatetocontent.com/e4/27/a9/e427a9148361046fb1389c0427165509.js
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectprofitablegatetocontent.com
Fingerprint03:BE:52:85:1D:5A:C2:F1:5C:73:AD:DF:34:DB:52:60:B4:B5:CE:BB
ValidityMon, 28 Aug 2023 06:48:07 GMT - Sun, 26 Nov 2023 06:48:06 GMT
File type ASCII text, with very long lines (40509), with no line terminators
Hash 6df9cf8554c8942048f00c92667a51e8
7b2e5bc8296ec3cf065f038bb13f6b696966881d
a7a8405425c377f24a56eb998f8f9a4f6abf82e5a6b8aa340273fe49c8dacdbf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /e4/27/a9/e427a9148361046fb1389c0427165509.js HTTP/1.1
Host: pl17792100.profitablegatetocontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 20:50:52 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b426954ed0883cc6eea1b3cff38cd8f0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.effectivecreativeformats.com/eecfd8a81f18a005b6403b46fa58fb16/invoke.js
200 OK 11 kB URL GET HTTP/1.1 www.effectivecreativeformats.com/eecfd8a81f18a005b6403b46fa58fb16/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjecteffectivecreativeformats.com
FingerprintA0:E6:FF:DB:91:48:01:05:BD:DA:F6:48:00:75:7F:B5:53:81:1F:1D
ValiditySat, 09 Sep 2023 06:28:05 GMT - Fri, 08 Dec 2023 06:28:04 GMT
File type exported SGML document, ASCII text, with very long lines (29631), with no line terminators
Hash f8eebe0e6393dd36287b243ffea18e86
3d8aba98a6d5324f67abe128eda3088c52b00d75
4062a3d277361cce84ef2c3a415e9a993c0eecbc5f3063e92cbd29918195d6f7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /eecfd8a81f18a005b6403b46fa58fb16/invoke.js HTTP/1.1
Host: www.effectivecreativeformats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 20:50:52 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f5607996c08f5abe44da21ab93b756bc
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
justpaste.me/js/share42/icons.png
200 OK 6.4 kB URL GET HTTP/2 justpaste.me/js/share42/icons.png
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type PNG image data, 160 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash a1e21d40d2b325f2c8d4868e564734f6
8da9782b455e63cb786018f1a3cea3a3ef698ae7
5a626c757d6a449ac24a5e694d9b15f2921a5fc1e8bdf6c006e0265e9c18f022
GET /js/share42/icons.png HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:26:31 GMT
etag: "70a1daf-18ee-5759942993364"
accept-ranges: bytes
content-length: 6382
content-type: image/png
date: Sun, 22 Oct 2023 20:50:53 GMT
server: Apache
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js
200 OK 1.0 kB URL GET HTTP/2 www.google.com/recaptcha/api.js
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint3D:4A:6B:FD:30:97:01:E9:C1:38:5F:67:2B:A6:A3:43:7B:2E:72:45
ValidityThu, 28 Sep 2023 05:32:37 GMT - Thu, 21 Dec 2023 05:32:36 GMT
File type gzip compressed data\012- data
Hash 70bf52715d38071ebac546202215c8d9
14d0e8ee551b32905821ae8609e3818d494c8f37
809e6a8123c5511ba7d40541a9aa87f793e1a8f26633db7672f3e14b9e42a986
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Sun, 22 Oct 2023 20:50:51 GMT
date: Sun, 22 Oct 2023 20:50:51 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash ed2e24057f1333d118418b86288bf5c0
a569a908e714e5609438d5eae0553e60ae3fe342
1c562f3476b94ff38282c60a24cbd0cc3276048ae02fce4047e923dd7d76db6d
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 22 Oct 2023 20:50:53 GMT
Last-Modified: Sun, 22 Oct 2023 20:45:51 GMT
Server: ECAcc (ska/F776)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2vDgpLgfC8dGXQONGf4XThH1zSwOs5QPBn-jpn5o3l8LkqVHfIgaYg==
Age: 302
professionalswebcheck.com/stats
200 OK 40 B URL GET HTTP/2 professionalswebcheck.com/stats
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerAmazon
Subjectprofessionalswebcheck.com
Fingerprint75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash c565a500a0f270e436021ca8db376b3a
6464bd993aa6dc2c3dd0aa8a4fa2fcd4bb104d30
4ed0d75b63bc07b01d97da33a1df53d333babbc6bb610e8a3bf518754f3685f5
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:53 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://justpaste.me
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=ad0b05f4-f7e8-4730-ab3d-dbf91462f504:2:1; expires=Wed, 19 Oct 2033 20:50:53 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
professionalswebcheck.com/stats
200 OK 40 B URL GET HTTP/2 professionalswebcheck.com/stats
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerAmazon
Subjectprofessionalswebcheck.com
Fingerprint75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 87dcefb124ff8e51c8a053d8d3ad0b22
6d76d9f7c4a0539888fd1d028b3d3d6e1083b2be
487f9b954f39ff85ecca75a82969c1d970f83d2a28c0a74c1eb20e5d34bb1000
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:53 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://justpaste.me
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8:1:1; expires=Wed, 19 Oct 2033 20:50:53 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
justpaste.me/img/favicon.ico
200 OK 116 B URL GET HTTP/2 justpaste.me/img/favicon.ico
IP
ASN #21501 Host Europe GmbH
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectjustpaste.me
Fingerprint69:5A:5F:DD:DD:75:9B:01:5E:EF:01:59:90:BB:FF:CF:73:18:39:ED
ValidityMon, 18 Sep 2023 09:45:00 GMT - Sun, 17 Dec 2023 09:44:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 623b6f9ac5562d5dbaed730f07a6ace7
9bf88d8fb7c0404fa95ee87e81db52111c682fea
d4e91fd2b2246b21fe204d38e545294d83d29bc8a84d6e7cd6c04db53fe12bbb
GET /img/favicon.ico HTTP/1.1
Host: justpaste.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/zLUd
Cookie: PHPSESSID=2a3a0f0f9003ed4047ba1da9f6d198de; dom3ic8zudi28v8lr6fgphwffqoz0j6c=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8%3A1%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 11 Sep 2018 14:26:30 GMT
etag: "70a1d9f-47e-57599428610e3-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 116
content-type: image/x-icon
date: Sun, 22 Oct 2023 20:50:53 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash d62d26bfdc78b03095b3b1ed71acbb77
8b17c7417306c2f5bfce55e5f4ca4cd0efab3284
7f23891dee43724ec01fae6da9ce6e6ea0d4dc3034e4f9a2bf43dd30da1a4646
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Oct 2023 20:50:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
200 OK 189 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (689)
Size 189 kB (188860 bytes)
Hash 4efc45f285352a5b252b651160e1ced9
c7ba19e7058ec22c8d0f7283ab6b722bb7a135d7
253627a82794506a7d660ee232c06a88d2eaafb6174532f8c390bb69ade6636a
GET /recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 188860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 22 Oct 2023 15:21:50 GMT
expires: Mon, 21 Oct 2024 15:21:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2023 04:01:46 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 19743
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash d62d26bfdc78b03095b3b1ed71acbb77
8b17c7417306c2f5bfce55e5f4ca4cd0efab3284
7f23891dee43724ec01fae6da9ce6e6ea0d4dc3034e4f9a2bf43dd30da1a4646
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Oct 2023 20:50:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
reliablemiraculouscaleb.com/watch.453859992397.js?key=eecfd8a81f18a005b6403b46fa58fb16&kw=%5B%22just%22%2C%22paste%22%2C%22me%22%5D&refer=https%3A%2F%2Fjustpaste.me%2FzLUd&tz=0&dev=e&res=14.2079&uuid=ad0b05f4-f7e8-4730-ab3d-dbf91462f504%3A2%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 reliablemiraculouscaleb.com/watch.453859992397.js?key=eecfd8a81f18a005b6403b46fa58fb16&kw=%5B%22just%22%2C%22paste%22%2C%22me%22%5D&refer=https%3A%2F%2Fjustpaste.me%2FzLUd&tz=0&dev=e&res=14.2079&uuid=ad0b05f4-f7e8-4730-ab3d-dbf91462f504%3A2%3A1
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectreliablemiraculouscaleb.com
FingerprintB0:CB:B2:A8:72:53:1B:CF:E0:77:F1:45:F2:12:5A:26:1F:A2:04:41
ValidityTue, 10 Oct 2023 08:24:28 GMT - Mon, 08 Jan 2024 08:24:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.453859992397.js?key=eecfd8a81f18a005b6403b46fa58fb16&kw=%5B%22just%22%2C%22paste%22%2C%22me%22%5D&refer=https%3A%2F%2Fjustpaste.me%2FzLUd&tz=0&dev=e&res=14.2079&uuid=ad0b05f4-f7e8-4730-ab3d-dbf91462f504%3A2%3A1 HTTP/1.1
Host: reliablemiraculouscaleb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 20:50:53 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://justpaste.me
Access-Control-Allow-Origin: https://justpaste.me
Access-Control-Allow-Credentials: true
Location: https://reliablemiraculouscaleb.com/watch.453859992397.js?key=eecfd8a81f18a005b6403b46fa58fb16&kw=%5B%22just%22%2C%22paste%22%2C%22me%22%5D&refer=https%3A%2F%2Fjustpaste.me%2FzLUd&tz=0&dev=e&res=14.2079&uuid=ad0b05f4-f7e8-4730-ab3d-dbf91462f504%3A2%3A1&shu=6e8d8f0f4505513060a293290ce4e06edbb242321cd6e1330aa6fd5a7a00cc5cba200c98a11ba6cfe5a65b6d9db1dd24583122e9e2833b4d7db5c33d1a53b588ed75dd5ec7123bdd9b476ff04b2035ba5faa4bf90ed2dab2bf3bb1684dd9ec27&pst=1698007913&rmtc=t
Set-Cookie: u_pl=17443720; expires=Mon, 23 Oct 2023 20:50:53 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.7hW9zGX0_xD0NGkUZhx9h-z1JA3dphvDSUwlEqviweQ; expires=Sun, 22 Oct 2023 20:51:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8e5fdd3c350ac54f43e97c5005478ad7
Strict-Transport-Security: max-age=0; includeSubdomains
reliablemiraculouscaleb.com/watch.453859992397.js?key=eecfd8a81f18a005b6403b46fa58fb16&kw=%5B%22just%22%2C%22paste%22%2C%22me%22%5D&refer=https%3A%2F%2Fjustpaste.me%2FzLUd&tz=0&dev=e&res=14.2079&uuid=ad0b05f4-f7e8-4730-ab3d-dbf91462f504%3A2%3A1&shu=6e8d8f0f4505513060a293290ce4e06edbb242321cd6e1330aa6fd5a7a00cc5cba200c98a11ba6cfe5a65b6d9db1dd24583122e9e2833b4d7db5c33d1a53b588ed75dd5ec7123bdd9b476ff04b2035ba5faa4bf90ed2dab2bf3bb1684dd9ec27&pst=1698007913&rmtc=t
200 OK 2.0 kB URL GET HTTP/1.1 reliablemiraculouscaleb.com/watch.453859992397.js?key=eecfd8a81f18a005b6403b46fa58fb16&kw=%5B%22just%22%2C%22paste%22%2C%22me%22%5D&refer=https%3A%2F%2Fjustpaste.me%2FzLUd&tz=0&dev=e&res=14.2079&uuid=ad0b05f4-f7e8-4730-ab3d-dbf91462f504%3A2%3A1&shu=6e8d8f0f4505513060a293290ce4e06edbb242321cd6e1330aa6fd5a7a00cc5cba200c98a11ba6cfe5a65b6d9db1dd24583122e9e2833b4d7db5c33d1a53b588ed75dd5ec7123bdd9b476ff04b2035ba5faa4bf90ed2dab2bf3bb1684dd9ec27&pst=1698007913&rmtc=t
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectreliablemiraculouscaleb.com
FingerprintB0:CB:B2:A8:72:53:1B:CF:E0:77:F1:45:F2:12:5A:26:1F:A2:04:41
ValidityTue, 10 Oct 2023 08:24:28 GMT - Mon, 08 Jan 2024 08:24:27 GMT
File type HTML document, ASCII text, with very long lines (2425)
Hash 46ccc5b0c1429ceda3271224bc116569
0e946553714176e71578f87f4bf35d0c8cc8668b
38990efe171767b826c272b1396457e07a41d3524c0793f64f05dcac076bac3c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.453859992397.js?key=eecfd8a81f18a005b6403b46fa58fb16&kw=%5B%22just%22%2C%22paste%22%2C%22me%22%5D&refer=https%3A%2F%2Fjustpaste.me%2FzLUd&tz=0&dev=e&res=14.2079&uuid=ad0b05f4-f7e8-4730-ab3d-dbf91462f504%3A2%3A1&shu=6e8d8f0f4505513060a293290ce4e06edbb242321cd6e1330aa6fd5a7a00cc5cba200c98a11ba6cfe5a65b6d9db1dd24583122e9e2833b4d7db5c33d1a53b588ed75dd5ec7123bdd9b476ff04b2035ba5faa4bf90ed2dab2bf3bb1684dd9ec27&pst=1698007913&rmtc=t HTTP/1.1
Host: reliablemiraculouscaleb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justpaste.me
Referer: https://justpaste.me/
DNT: 1
Connection: keep-alive
Cookie: u_pl=17443720; ain=eyJhbGciOiJIUzI1NiJ9.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.7hW9zGX0_xD0NGkUZhx9h-z1JA3dphvDSUwlEqviweQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 20:50:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://justpaste.me
Access-Control-Allow-Origin: https://justpaste.me
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=ad0b05f4-f7e8-4730-ab3d-dbf91462f504:2:1; expires=Sun, 29 Oct 2023 20:50:53 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 23 Oct 2023 20:50:53 GMT; secure; SameSite=None
uncs=1; expires=Mon, 23 Oct 2023 20:50:53 GMT; secure; SameSite=None
pdhtkv23=true; expires=Mon, 23 Oct 2023 20:50:53 GMT; secure; SameSite=None
uncs23=1; expires=Mon, 23 Oct 2023 20:50:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f07ff37f1f801cd7b08ff7ca400e937e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 22 Oct 2023 16:12:02 GMT
expires: Mon, 21 Oct 2024 16:12:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2023 04:01:46 GMT
content-type: text/css
vary: Accept-Encoding
age: 16732
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
200 OK 189 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (689)
Size 189 kB (188860 bytes)
Hash 4efc45f285352a5b252b651160e1ced9
c7ba19e7058ec22c8d0f7283ab6b722bb7a135d7
253627a82794506a7d660ee232c06a88d2eaafb6174532f8c390bb69ade6636a
GET /recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 188860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 22 Oct 2023 15:21:50 GMT
expires: Mon, 21 Oct 2024 15:21:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2023 04:01:46 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 19744
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.cloudimagesb.com/cti/27/cf/a9/27cfa94bc21f8231e12ae94f4cebe367/1627917273.png
200 OK 56 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/27/cf/a9/27cfa94bc21f8231e12ae94f4cebe367/1627917273.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint62:DE:BA:BA:30:E9:EE:15:E9:24:B9:C5:BF:E1:7E:39:8B:20:E5:42
ValiditySun, 24 Sep 2023 23:04:02 GMT - Sat, 23 Dec 2023 23:04:01 GMT
File type PNG image data, 728 x 90, 8-bit/color RGB, non-interlaced\012- data
Hash 231d615f0b920b0f0c8758342141193b
ca68f0f6e4c9124bbe61c49d789d0447076b0332
3e24999c26c1c68485e879756ea30639ccee4d7f30f1e2c0e5190818cbab8996
GET /cti/27/cf/a9/27cfa94bc21f8231e12ae94f4cebe367/1627917273.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:54 GMT
content-type: image/png
content-length: 56505
server: nginx/1.21.6
last-modified: Mon, 02 Aug 2021 15:14:41 GMT
etag: "61080be1-dcb9"
expires: Tue, 24 Oct 2023 20:50:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
tomatohackblobs.com/sbar.json?key=e427a9148361046fb1389c0427165509&uuid=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8%3A1%3A1
200 OK 3.7 kB URL GET HTTP/1.1 tomatohackblobs.com/sbar.json?key=e427a9148361046fb1389c0427165509&uuid=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8%3A1%3A1
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjecttomatohackblobs.com
FingerprintAC:AA:0B:97:51:8F:5F:74:24:ED:81:7C:1F:0A:68:44:26:5D:F8:1A
ValidityWed, 27 Sep 2023 00:57:27 GMT - Tue, 26 Dec 2023 00:57:26 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (6383), with no line terminators
Hash ce0753abacb7c6e6ffa0e1ca8e5f1bc2
34a7448d19f77100bf31dd54cbd3372ee04ad635
b2e231e393b7e1425b220e3776c7cde700c7d746311d3b6dcc5cb9fd626e8eec
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=e427a9148361046fb1389c0427165509&uuid=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8%3A1%3A1 HTTP/1.1
Host: tomatohackblobs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 20:50:54 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://justpaste.me
Access-Control-Allow-Origin: https://justpaste.me
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17691601; expires=Mon, 23 Oct 2023 20:50:54 GMT; secure; SameSite=None
uid_id2=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8:1:1; expires=Sun, 29 Oct 2023 20:50:54 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 23 Oct 2023 20:50:54 GMT; secure; SameSite=None
uncs=1; expires=Mon, 23 Oct 2023 20:50:54 GMT; secure; SameSite=None
pdhtkv29=true; expires=Mon, 23 Oct 2023 20:50:54 GMT; secure; SameSite=None
uncs29=1; expires=Mon, 23 Oct 2023 20:50:54 GMT; secure; SameSite=None
slece427a9148361046fb1389c0427165509=[4663323]; expires=Sun, 22 Oct 2023 20:50:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 426a6bb7ac1ef8da68eaf433e836cad0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry&co=aHR0cHM6Ly9qdXN0cGFzdGUubWU6NDQz&hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&size=normal&cb=k4toow6n8t1g
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Oct 2023 23:51:35 GMT
expires: Fri, 18 Oct 2024 23:51:35 GMT
cache-control: public, max-age=31536000
age: 248359
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry&co=aHR0cHM6Ly9qdXN0cGFzdGUubWU6NDQz&hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&size=normal&cb=k4toow6n8t1g
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Oct 2023 14:42:45 GMT
expires: Fri, 27 Oct 2023 14:42:45 GMT
cache-control: public, max-age=604800
age: 194889
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
200 OK 189 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (689)
Size 189 kB (188860 bytes)
Hash 4efc45f285352a5b252b651160e1ced9
c7ba19e7058ec22c8d0f7283ab6b722bb7a135d7
253627a82794506a7d660ee232c06a88d2eaafb6174532f8c390bb69ade6636a
GET /recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 188860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 22 Oct 2023 15:21:50 GMT
expires: Mon, 21 Oct 2024 15:21:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2023 04:01:46 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 19744
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tomatohackblobs.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYscxRuuTvbw4yeRKIKICHMQjODOdvf0fLQREtdkQ3DzQaKYm1ZXVU8qW93VVHVPT%2FYUDEggHib4D%2FQ8s5tFXYJevPnBrLcBYcfTHtyD4F3ckJsgM7u4%2BELxvFXPc3je563PhsU%2BcVHQvZUrel0qRZeadbd25pbnna2tyrTo1%2Fqd1set4GzN9N723LDuvlm7JNiaXvJdz3U916utSCNi3V%2FyPK%2FuQmbboVcP3Xrg171mgL75790WDix1wHv75EVIPv3%2F9pMAko2RJt9cEHYt19lbF5NC0Vwb9PjWh%2BlaqssUyXEbGwdxunWkhra7Kz9Ap5tzw9C9f4WRnBLnj98RpVtHLhH1Ng%2BNRgoiRcSfQ9kbQ6gxJB2D6fuQfJcAjOPqNaTJ46valPTuIUtn7JQsPDuALKdk4beXkCZPlpXs125qVeRSpxb9uILsjyG7Y2TFDvL1E5DlDlj%2BKST%2FhSw9W0WabFyzSkPyvdeblItWx28tttssXgyawl8MeUwXhcs8FnXacSg684SkHEPGYygxALUOitmRDorYQZE5SPherc2CTod3mpwKxvwo9jpxEAchZW7M3Eboo2CzGQbIswGYGoCZe8jMPazJR7vePkzxE%2BztCpY7sDlBj1coBUFpCUpKUEqCMicoe9UmV9a31WOubBF5R%2BgfYaMa6bw7pJs674qUDLN98sIsO%2BfUwS7WxF5NBH6bhl7QabQ8N2jFkdfohMwN%2FLbXajbdEFZWkPbEfNJ1OSUn3rmEbIaeg4juwKodMHkStHgNtBy1fRf09ijouFhPt%2B8UNs%2BozUU9EeC6QpYvIL%2FrDNU%2BeWW%2Bw0tnXoVgk%2FOn%2Fz747uJwAmYqZKbCHfkzQVc9GN3QJdm4oUtLvr2W5TKR63S235s5zcXCV%2B%2BLu6U2%2FPIFO%2FjyXTYjZu32B8LmqzTlMu1a8vWy5FyYFW2YIN9fth%2BJ6Hphby8XJi2y1evvrVxOMiOslTodg8opIaMDMDklpx5%2BMv%2B7b8TPQ5oxTFEhKSbkqCD1Dlh2DzabnP%2FfrdPRlelfsJrAqGNNlDkoi2pk%2FOj4UckpWY6fQonJuS%2Bimy9%2FPnkKGlWw4jiISEx%2B%2FPNQP7QP0DUOaH4faVKhZyr0VAWqBrDFyVGemcm5XxvzQqScUaSMsxEpox4dBmzlXk20RSsMAzdoc9eNAu77XlMw2ghoSH0%2FbiO3U9F8WP8HAAD%2F%2FwEAAP%2F%2F7Y0xTIwEAAA%3D
200 OK 7 B URL GET HTTP/1.1 tomatohackblobs.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYscxRuuTvbw4yeRKIKICHMQjODOdvf0fLQREtdkQ3DzQaKYm1ZXVU8qW93VVHVPT%2FYUDEggHib4D%2FQ8s5tFXYJevPnBrLcBYcfTHtyD4F3ckJsgM7u4%2BELxvFXPc3je563PhsU%2BcVHQvZUrel0qRZeadbd25pbnna2tyrTo1%2Fqd1set4GzN9N723LDuvlm7JNiaXvJdz3U916utSCNi3V%2FyPK%2FuQmbboVcP3Xrg171mgL75790WDix1wHv75EVIPv3%2F9pMAko2RJt9cEHYt19lbF5NC0Vwb9PjWh%2BlaqssUyXEbGwdxunWkhra7Kz9Ap5tzw9C9f4WRnBLnj98RpVtHLhH1Ng%2BNRgoiRcSfQ9kbQ6gxJB2D6fuQfJcAjOPqNaTJ46valPTuIUtn7JQsPDuALKdk4beXkCZPlpXs125qVeRSpxb9uILsjyG7Y2TFDvL1E5DlDlj%2BKST%2FhSw9W0WabFyzSkPyvdeblItWx28tttssXgyawl8MeUwXhcs8FnXacSg684SkHEPGYygxALUOitmRDorYQZE5SPherc2CTod3mpwKxvwo9jpxEAchZW7M3Eboo2CzGQbIswGYGoCZe8jMPazJR7vePkzxE%2BztCpY7sDlBj1coBUFpCUpKUEqCMicoe9UmV9a31WOubBF5R%2BgfYaMa6bw7pJs674qUDLN98sIsO%2BfUwS7WxF5NBH6bhl7QabQ8N2jFkdfohMwN%2FLbXajbdEFZWkPbEfNJ1OSUn3rmEbIaeg4juwKodMHkStHgNtBy1fRf09ijouFhPt%2B8UNs%2BozUU9EeC6QpYvIL%2FrDNU%2BeWW%2Bw0tnXoVgk%2FOn%2Fz747uJwAmYqZKbCHfkzQVc9GN3QJdm4oUtLvr2W5TKR63S235s5zcXCV%2B%2BLu6U2%2FPIFO%2FjyXTYjZu32B8LmqzTlMu1a8vWy5FyYFW2YIN9fth%2BJ6Hphby8XJi2y1evvrVxOMiOslTodg8opIaMDMDklpx5%2BMv%2B7b8TPQ5oxTFEhKSbkqCD1Dlh2DzabnP%2FfrdPRlelfsJrAqGNNlDkoi2pk%2FOj4UckpWY6fQonJuS%2Bimy9%2FPnkKGlWw4jiISEx%2B%2FPNQP7QP0DUOaH4faVKhZyr0VAWqBrDFyVGemcm5XxvzQqScUaSMsxEpox4dBmzlXk20RSsMAzdoc9eNAu77XlMw2ghoSH0%2FbiO3U9F8WP8HAAD%2F%2FwEAAP%2F%2F7Y0xTIwEAAA%3D
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjecttomatohackblobs.com
FingerprintAC:AA:0B:97:51:8F:5F:74:24:ED:81:7C:1F:0A:68:44:26:5D:F8:1A
ValidityWed, 27 Sep 2023 00:57:27 GMT - Tue, 26 Dec 2023 00:57:26 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzYscxRuuTvbw4yeRKIKICHMQjODOdvf0fLQREtdkQ3DzQaKYm1ZXVU8qW93VVHVPT%2FYUDEggHib4D%2FQ8s5tFXYJevPnBrLcBYcfTHtyD4F3ckJsgM7u4%2BELxvFXPc3je563PhsU%2BcVHQvZUrel0qRZeadbd25pbnna2tyrTo1%2Fqd1set4GzN9N723LDuvlm7JNiaXvJdz3U916utSCNi3V%2FyPK%2FuQmbboVcP3Xrg171mgL75790WDix1wHv75EVIPv3%2F9pMAko2RJt9cEHYt19lbF5NC0Vwb9PjWh%2BlaqssUyXEbGwdxunWkhra7Kz9Ap5tzw9C9f4WRnBLnj98RpVtHLhH1Ng%2BNRgoiRcSfQ9kbQ6gxJB2D6fuQfJcAjOPqNaTJ46valPTuIUtn7JQsPDuALKdk4beXkCZPlpXs125qVeRSpxb9uILsjyG7Y2TFDvL1E5DlDlj%2BKST%2FhSw9W0WabFyzSkPyvdeblItWx28tttssXgyawl8MeUwXhcs8FnXacSg684SkHEPGYygxALUOitmRDorYQZE5SPherc2CTod3mpwKxvwo9jpxEAchZW7M3Eboo2CzGQbIswGYGoCZe8jMPazJR7vePkzxE%2BztCpY7sDlBj1coBUFpCUpKUEqCMicoe9UmV9a31WOubBF5R%2BgfYaMa6bw7pJs674qUDLN98sIsO%2BfUwS7WxF5NBH6bhl7QabQ8N2jFkdfohMwN%2FLbXajbdEFZWkPbEfNJ1OSUn3rmEbIaeg4juwKodMHkStHgNtBy1fRf09ijouFhPt%2B8UNs%2BozUU9EeC6QpYvIL%2FrDNU%2BeWW%2Bw0tnXoVgk%2FOn%2Fz747uJwAmYqZKbCHfkzQVc9GN3QJdm4oUtLvr2W5TKR63S235s5zcXCV%2B%2BLu6U2%2FPIFO%2FjyXTYjZu32B8LmqzTlMu1a8vWy5FyYFW2YIN9fth%2BJ6Hphby8XJi2y1evvrVxOMiOslTodg8opIaMDMDklpx5%2BMv%2B7b8TPQ5oxTFEhKSbkqCD1Dlh2DzabnP%2FfrdPRlelfsJrAqGNNlDkoi2pk%2FOj4UckpWY6fQonJuS%2Bimy9%2FPnkKGlWw4jiISEx%2B%2FPNQP7QP0DUOaH4faVKhZyr0VAWqBrDFyVGemcm5XxvzQqScUaSMsxEpox4dBmzlXk20RSsMAzdoc9eNAu77XlMw2ghoSH0%2FbiO3U9F8WP8HAAD%2F%2FwEAAP%2F%2F7Y0xTIwEAAA%3D HTTP/1.1
Host: tomatohackblobs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Cookie: u_pl=17691601; uid_id2=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slece427a9148361046fb1389c0427165509=[4663323]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 20:50:54 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4e79770761e6ebabf3b6a0466f176d4e
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/si/d4/71/e8/d471e866a1924ea9dbc2f76b1a8e9f2c/1686846404.png
200 OK 14 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/d4/71/e8/d471e866a1924ea9dbc2f76b1a8e9f2c/1686846404.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint62:DE:BA:BA:30:E9:EE:15:E9:24:B9:C5:BF:E1:7E:39:8B:20:E5:42
ValiditySun, 24 Sep 2023 23:04:02 GMT - Sat, 23 Dec 2023 23:04:01 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 405d4d1f26c3e6fdfa9d35458bc5b0bd
280ca8973e3979fd9502cb9d44efc1dfcfe618e6
4d56359b995a0d48393ab53da6aa232ce7c833bf8ae8ceef38d51987ad71ca66
GET /si/d4/71/e8/d471e866a1924ea9dbc2f76b1a8e9f2c/1686846404.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:54 GMT
content-type: image/png
content-length: 14409
server: nginx/1.21.6
last-modified: Thu, 15 Jun 2023 16:26:53 GMT
etag: "648b3bcd-3849"
expires: Tue, 24 Oct 2023 20:50:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/84/17/f1/8417f103cb0d035558518bf6ba6c2e1d/1697199900.png
200 OK 25 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/84/17/f1/8417f103cb0d035558518bf6ba6c2e1d/1697199900.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint62:DE:BA:BA:30:E9:EE:15:E9:24:B9:C5:BF:E1:7E:39:8B:20:E5:42
ValiditySun, 24 Sep 2023 23:04:02 GMT - Sat, 23 Dec 2023 23:04:01 GMT
File type PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash bdc31a4330b8181ee2fb46f3c281480a
3e0f3a7438a7b4d0f704a1c348d333d0887244d7
aaab7b2cfbb3770c3f6c9ac22efcf9c88f9ad4f665f607f012d075b65fd3b4df
GET /si/84/17/f1/8417f103cb0d035558518bf6ba6c2e1d/1697199900.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:54 GMT
content-type: image/png
content-length: 25270
server: nginx/1.21.6
last-modified: Fri, 13 Oct 2023 12:25:09 GMT
etag: "65293725-62b6"
expires: Tue, 24 Oct 2023 20:50:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash a6c3f88afc668807113b9548a21e9919
61be67550851957676e6086ee66e2c042cb279f7
d1c259a69c7bdd21b31a891ea65e92a0f0644150b7f10079c5a16fc5a0410636
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Oct 2023 20:50:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash a6c3f88afc668807113b9548a21e9919
61be67550851957676e6086ee66e2c042cb279f7
d1c259a69c7bdd21b31a891ea65e92a0f0644150b7f10079c5a16fc5a0410636
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Oct 2023 20:50:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
200 OK 591 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fd5bcb6103d86e317bd1eb019bcbe71
6b5a52ea669dcb74946f2bed4bdd7ec985026113
0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae
GET /sb/ssp/vpn/classic-push/big1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:54 GMT
content-type: image/png
content-length: 591
last-modified: Mon, 21 Feb 2022 10:06:44 GMT
etag: "62136434-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5026773
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iqGVRlrDbNI6Ber3iUQ8RtmpEFYwLH3kJZQVyyG1%2Bm%2FQOZm6eKHlZ8Vj11LO%2Bza5xSe828V51%2Bl1%2FXJmaBaEvYqeaF%2FccrkYuVkUjlo58LW9l1qSpba8307euFAxdvvxpLsX4iiOY%2BwB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a49d84eb994188-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 22 Oct 2023 16:12:02 GMT
expires: Mon, 21 Oct 2024 16:12:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2023 04:01:46 GMT
content-type: text/css
vary: Accept-Encoding
age: 16733
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
200 OK 189 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (689)
Size 189 kB (188860 bytes)
Hash 4efc45f285352a5b252b651160e1ced9
c7ba19e7058ec22c8d0f7283ab6b722bb7a135d7
253627a82794506a7d660ee232c06a88d2eaafb6174532f8c390bb69ade6636a
GET /recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 188860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 22 Oct 2023 15:21:50 GMT
expires: Mon, 21 Oct 2024 15:21:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2023 04:01:46 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 19745
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tomatohackblobs.com/pixel/sbls?bv=23.39.7917&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fstyle.css&l=4168&fd=434
200 OK 0 B URL GET HTTP/1.1 tomatohackblobs.com/pixel/sbls?bv=23.39.7917&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fstyle.css&l=4168&fd=434
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjecttomatohackblobs.com
FingerprintAC:AA:0B:97:51:8F:5F:74:24:ED:81:7C:1F:0A:68:44:26:5D:F8:1A
ValidityWed, 27 Sep 2023 00:57:27 GMT - Tue, 26 Dec 2023 00:57:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=23.39.7917&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fstyle.css&l=4168&fd=434 HTTP/1.1
Host: tomatohackblobs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Cookie: u_pl=17691601; uid_id2=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slece427a9148361046fb1389c0427165509=[4663323]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 20:50:55 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
unseenreport.com/pxf.gif?uuid=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=e427a9148361046fb1389c0427165509&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=e427a9148361046fb1389c0427165509&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
FingerprintBE:8C:78:D1:BA:58:B8:88:10:09:32:1D:31:7A:D9:4A:09:BF:6C:7A
ValiditySat, 23 Sep 2023 07:33:12 GMT - Fri, 22 Dec 2023 07:33:11 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=e427a9148361046fb1389c0427165509&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 22 Oct 2023 20:50:55 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 148cf1b824c5b6a6a95d53e2d89926db
Strict-Transport-Security: max-age=0; includeSubdomains
tomatohackblobs.com/pixel/sbls?bv=23.39.7917&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fjs%2Fscript.js&l=958&fd=326
200 OK 0 B URL GET HTTP/1.1 tomatohackblobs.com/pixel/sbls?bv=23.39.7917&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fjs%2Fscript.js&l=958&fd=326
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjecttomatohackblobs.com
FingerprintAC:AA:0B:97:51:8F:5F:74:24:ED:81:7C:1F:0A:68:44:26:5D:F8:1A
ValidityWed, 27 Sep 2023 00:57:27 GMT - Tue, 26 Dec 2023 00:57:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=23.39.7917&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fjs%2Fscript.js&l=958&fd=326 HTTP/1.1
Host: tomatohackblobs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Cookie: u_pl=17691601; uid_id2=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slece427a9148361046fb1389c0427165509=[4663323]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 20:50:55 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Oct 2023 10:05:24 GMT
expires: Sat, 19 Oct 2024 10:05:24 GMT
cache-control: public, max-age=31536000
age: 211531
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Oct 2023 02:00:44 GMT
expires: Sat, 19 Oct 2024 02:00:44 GMT
cache-control: public, max-age=31536000
age: 240611
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tomatohackblobs.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scxR%2BtTvbw5SuRKIKICHMQjODOdvf0zPQYIXFNNgQ3P0gUc9PqqupJZau7mqru6cmeggEJxMME%2F4GeN7tZ1CXoxZs%2FmPU2IOx42oN7ELyLG3ITZGYXFz9QvE%2FVe4f3eZ%2F6bFjsExcF3Vu5otelUnSpWXdrZ2553tnaqkyLfq0ftj5uBWdrpve253bq7pu1S4Kt6SXf9VzXc73aijQi1v0lz%2FPqLmS23fHqHbce%2BHWvGaBv%2Fnu3hQNLHfDePnkRkk%2F%2Fv%2F0kgGRjpMk3F4Rdy3X21sWkUDTXBj2%2B9WG6luoyRXLcxsZBnG4dqaHt7soP0Onm3DB0719hJKfE%2BeN3ROnWkUtEvc1Do5GCSBHx51D2xhBqDEnHYPo%2BJN8lAOO4eg1p8viqNiW9e8jSGTslC88OIMspWfjtJaTJk2Ul%2B7WbWhW51KlFP64g%2B2PI7hhZsYN8%2FQRkuQOWfwrJfyFLz1aRJhvXrNKQfO%2F1JuWiFfqtxXabxYtBU%2FiLHR7TReEyj0VhO%2B6IcJ6QlGPIeAwlBqDWQTE70kEROygyBwnfq7VZEIY8bHIqGPOj2AvjIA46lLkxcxsdHwWbzTBAng3A1ADM3ENm7mFNPtr19mGKn2BvV7Dcgc0JerxCKQhKS1BSglISlDlB2as2ubK%2BrR5zZYvIO0L%2FCBvVSOfdId3UeVekZJjtkxdm2TmnDnaxJvZqIvDbtOMFYaPluUErjrxG2GFu4Le9VrPpdmBlBWlPzCddl1Ny4p1LyGboOYjoDqzaAZMnQYvXQMtR23dBb4%2BC0MV6un2nsHlGbS7qiQDXFbJ8AfldZ6j2ySvzHV468yoEm5w%2F%2FffBdxeHEzBTITMV7sifCbrqweiGLsnGDV1a8u21LJeJXKez%2Fd7MaS4Wvnpf3C214Zcv2MGX77IZMWu3PxA2X6Upl2nXkq%2BXJefCrGjDBPn%2Bsv1IRNcLe3u5MGmRrV5%2Fb%2BVykhlhrdTpGFROCRkdgMkpOfXwk%2FnffSN%2BHtKMYYoKSTEhRwWpd8Cye7DZ5Pz%2Fbp2Orkz%2FgtUERh1rosxBWVQj40fHj0pOyXL8FEpMzn0R3Xz588lT0KiCFcdBRGLy45%2BH%2BqF9gK5xQPP7SJMKPVOhpypQNYAtTo7yzEzO%2FdqYFyLljCJlnI1IGfXoMGAr92qMuYJ6UdsTgotmg7GgxcKoFTeCtgibvIncTkXzYf0fAAAA%2F%2F8BAAD%2F%2FxKqmVyMBAAA
200 OK 7 B URL GET HTTP/1.1 tomatohackblobs.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scxR%2BtTvbw5SuRKIKICHMQjODOdvf0zPQYIXFNNgQ3P0gUc9PqqupJZau7mqru6cmeggEJxMME%2F4GeN7tZ1CXoxZs%2FmPU2IOx42oN7ELyLG3ITZGYXFz9QvE%2FVe4f3eZ%2F6bFjsExcF3Vu5otelUnSpWXdrZ2553tnaqkyLfq0ftj5uBWdrpve253bq7pu1S4Kt6SXf9VzXc73aijQi1v0lz%2FPqLmS23fHqHbce%2BHWvGaBv%2Fnu3hQNLHfDePnkRkk%2F%2Fv%2F0kgGRjpMk3F4Rdy3X21sWkUDTXBj2%2B9WG6luoyRXLcxsZBnG4dqaHt7soP0Onm3DB0719hJKfE%2BeN3ROnWkUtEvc1Do5GCSBHx51D2xhBqDEnHYPo%2BJN8lAOO4eg1p8viqNiW9e8jSGTslC88OIMspWfjtJaTJk2Ul%2B7WbWhW51KlFP64g%2B2PI7hhZsYN8%2FQRkuQOWfwrJfyFLz1aRJhvXrNKQfO%2F1JuWiFfqtxXabxYtBU%2FiLHR7TReEyj0VhO%2B6IcJ6QlGPIeAwlBqDWQTE70kEROygyBwnfq7VZEIY8bHIqGPOj2AvjIA46lLkxcxsdHwWbzTBAng3A1ADM3ENm7mFNPtr19mGKn2BvV7Dcgc0JerxCKQhKS1BSglISlDlB2as2ubK%2BrR5zZYvIO0L%2FCBvVSOfdId3UeVekZJjtkxdm2TmnDnaxJvZqIvDbtOMFYaPluUErjrxG2GFu4Le9VrPpdmBlBWlPzCddl1Ny4p1LyGboOYjoDqzaAZMnQYvXQMtR23dBb4%2BC0MV6un2nsHlGbS7qiQDXFbJ8AfldZ6j2ySvzHV468yoEm5w%2F%2FffBdxeHEzBTITMV7sifCbrqweiGLsnGDV1a8u21LJeJXKez%2Fd7MaS4Wvnpf3C214Zcv2MGX77IZMWu3PxA2X6Upl2nXkq%2BXJefCrGjDBPn%2Bsv1IRNcLe3u5MGmRrV5%2Fb%2BVykhlhrdTpGFROCRkdgMkpOfXwk%2FnffSN%2BHtKMYYoKSTEhRwWpd8Cye7DZ5Pz%2Fbp2Orkz%2FgtUERh1rosxBWVQj40fHj0pOyXL8FEpMzn0R3Xz588lT0KiCFcdBRGLy45%2BH%2BqF9gK5xQPP7SJMKPVOhpypQNYAtTo7yzEzO%2FdqYFyLljCJlnI1IGfXoMGAr92qMuYJ6UdsTgotmg7GgxcKoFTeCtgibvIncTkXzYf0fAAAA%2F%2F8BAAD%2F%2FxKqmVyMBAAA
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjecttomatohackblobs.com
FingerprintAC:AA:0B:97:51:8F:5F:74:24:ED:81:7C:1F:0A:68:44:26:5D:F8:1A
ValidityWed, 27 Sep 2023 00:57:27 GMT - Tue, 26 Dec 2023 00:57:26 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scxR%2BtTvbw5SuRKIKICHMQjODOdvf0zPQYIXFNNgQ3P0gUc9PqqupJZau7mqru6cmeggEJxMME%2F4GeN7tZ1CXoxZs%2FmPU2IOx42oN7ELyLG3ITZGYXFz9QvE%2FVe4f3eZ%2F6bFjsExcF3Vu5otelUnSpWXdrZ2553tnaqkyLfq0ftj5uBWdrpve253bq7pu1S4Kt6SXf9VzXc73aijQi1v0lz%2FPqLmS23fHqHbce%2BHWvGaBv%2Fnu3hQNLHfDePnkRkk%2F%2Fv%2F0kgGRjpMk3F4Rdy3X21sWkUDTXBj2%2B9WG6luoyRXLcxsZBnG4dqaHt7soP0Onm3DB0719hJKfE%2BeN3ROnWkUtEvc1Do5GCSBHx51D2xhBqDEnHYPo%2BJN8lAOO4eg1p8viqNiW9e8jSGTslC88OIMspWfjtJaTJk2Ul%2B7WbWhW51KlFP64g%2B2PI7hhZsYN8%2FQRkuQOWfwrJfyFLz1aRJhvXrNKQfO%2F1JuWiFfqtxXabxYtBU%2FiLHR7TReEyj0VhO%2B6IcJ6QlGPIeAwlBqDWQTE70kEROygyBwnfq7VZEIY8bHIqGPOj2AvjIA46lLkxcxsdHwWbzTBAng3A1ADM3ENm7mFNPtr19mGKn2BvV7Dcgc0JerxCKQhKS1BSglISlDlB2as2ubK%2BrR5zZYvIO0L%2FCBvVSOfdId3UeVekZJjtkxdm2TmnDnaxJvZqIvDbtOMFYaPluUErjrxG2GFu4Le9VrPpdmBlBWlPzCddl1Ny4p1LyGboOYjoDqzaAZMnQYvXQMtR23dBb4%2BC0MV6un2nsHlGbS7qiQDXFbJ8AfldZ6j2ySvzHV468yoEm5w%2F%2FffBdxeHEzBTITMV7sifCbrqweiGLsnGDV1a8u21LJeJXKez%2Fd7MaS4Wvnpf3C214Zcv2MGX77IZMWu3PxA2X6Upl2nXkq%2BXJefCrGjDBPn%2Bsv1IRNcLe3u5MGmRrV5%2Fb%2BVykhlhrdTpGFROCRkdgMkpOfXwk%2FnffSN%2BHtKMYYoKSTEhRwWpd8Cye7DZ5Pz%2Fbp2Orkz%2FgtUERh1rosxBWVQj40fHj0pOyXL8FEpMzn0R3Xz588lT0KiCFcdBRGLy45%2BH%2BqF9gK5xQPP7SJMKPVOhpypQNYAtTo7yzEzO%2FdqYFyLljCJlnI1IGfXoMGAr92qMuYJ6UdsTgotmg7GgxcKoFTeCtgibvIncTkXzYf0fAAAA%2F%2F8BAAD%2F%2FxKqmVyMBAAA HTTP/1.1
Host: tomatohackblobs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Cookie: u_pl=17691601; uid_id2=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slece427a9148361046fb1389c0427165509=[4663323]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 20:50:55 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a7f82b90965acf48e7800c0e6982a5c0
Strict-Transport-Security: max-age=0; includeSubdomains
tomatohackblobs.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 tomatohackblobs.com/pixel/sbs?c=1
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjecttomatohackblobs.com
FingerprintAC:AA:0B:97:51:8F:5F:74:24:ED:81:7C:1F:0A:68:44:26:5D:F8:1A
ValidityWed, 27 Sep 2023 00:57:27 GMT - Tue, 26 Dec 2023 00:57:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: tomatohackblobs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Cookie: u_pl=17691601; uid_id2=5ade6826-77cf-45e2-9dfa-e0c1cb87f9e8:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slece427a9148361046fb1389c0427165509=[4663323]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 20:50:55 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
www.google.com/recaptcha/api2/webworker.js?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2
200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry&co=aHR0cHM6Ly9qdXN0cGFzdGUubWU6NDQz&hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&size=normal&cb=k4toow6n8t1g
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintC9:4D:78:AD:EC:04:27:EE:F0:06:4C:C8:78:D8:9F:06:B5:CC:39:37
ValidityThu, 28 Sep 2023 05:26:21 GMT - Thu, 21 Dec 2023 05:26:20 GMT
File type ASCII text, with no line terminators
Hash 26c4f76e985234506205b82e3e6e520f
987d32a005fd1a1be9cc3a4f85796705beadb340
bd7e05751a03c3c81bf4f38808d12af294f672494f6b9d7641aaf0dfbb5fb012
GET /recaptcha/api2/webworker.js?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry&co=aHR0cHM6Ly9qdXN0cGFzdGUubWU6NDQz&hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&size=normal&cb=k4toow6n8t1g
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Sun, 22 Oct 2023 20:50:54 GMT
date: Sun, 22 Oct 2023 20:50:54 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.barscreative1.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html
200 OK 1.5 kB URL GET HTTP/2 cdn.barscreative1.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://justpaste.me/zLUd
Certificate IssuerLet's Encrypt
Subjectcdn.barscreative1.com
FingerprintCB:0F:87:85:B0:83:8B:5C:86:E5:81:91:9D:F5:ED:C4:A2:B6:B1:BE
ValidityTue, 12 Sep 2023 01:01:21 GMT - Mon, 11 Dec 2023 01:01:20 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1639), with no line terminators
Hash 97b357c624104a8e915d01424dfe16ce
6bd7fcedfb7986b149601b1bc840f525b67a8f06
8d010e7163298acf3671bb429a2e0b1d69033a5adc314fa4bddebf74b9775e6e
GET /sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:54 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 29 Mar 2022 08:27:10 GMT
etag: W/"6242c2de-602"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sun, 22 Oct 2023 21:50:54 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:53 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: bb42c108a6323dd50c0efd854c59ace6
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 22 Oct 2023 20:50:53 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZJu9mO01LfViiC6atlMPOF9bgygIGoMf8J6M6XmtMryFlPpEYrHk6FyFFMZhO0i3Q1RRwonXZZ7wNNJzTL%2BdjCadDNpueemfZ8P2VafTmUXgIafduanfJtXN2DWc%2BxsC6NwyCKg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a49d7b3ddd6403-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/animate.css
200 OK 79 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/animate.css
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/ssp/vpn/classic-push/big1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:54 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 10:06:42 GMT
etag: W/"62136432-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LuKXNKXEW98%2FVjcqeMLgLn6k6%2FmATb8lQSXat%2FEU3Kr9T6KtuI6T8K%2BNcHNx2uLhHrToVSg6qrY6LRIvMds1y2mJNlAfulYTnAc02G6npQSZhDjBCGOLAhZLY8JnNLGza3mkPZP9bwvy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a49d844fec35dc-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/bframe?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry
200 OK 7.2 kB URL GET HTTP/3 www.google.com/recaptcha/api2/bframe?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintC9:4D:78:AD:EC:04:27:EE:F0:06:4C:C8:78:D8:9F:06:B5:CC:39:37
ValidityThu, 28 Sep 2023 05:26:21 GMT - Thu, 21 Dec 2023 05:26:20 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7480), with no line terminators
Hash 7e3fcddb98af81d4f798654bb1edc4d3
637d511ab413b7d14cfe394410631ca4e0bed715
c3b1714d45f8d9425ea92b94f967243cc05a6009af837094bf4d19d6009179c7
GET /recaptcha/api2/bframe?hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 22 Oct 2023 20:50:55 GMT
content-security-policy: script-src 'nonce-6-Eqzb9PwrftyGWqq1blzA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css
200 OK 4.2 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (4404), with no line terminators
Hash 68b1992666e9738c9fe476446c9554c6
7ed918e75115fd3be8bd1df1f6106d3f53129c78
c3ca1c3bc15dfab20c6c3733049214afc18b2deaba8d9685c57cc3f238b687d8
GET /sb/ssp/vpn/classic-push/big1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:55 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 10:59:09 GMT
etag: W/"6213707d-1048"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RVNwvl%2F6TCVGGG2sraqoFgXmx9x8ayxYw6gcCEOGQckDNBca9vQSK8ayuIkIYOYkPhkrohmHau2Bc5wqf1OZrc61YGdcgp1yZaGEVwWA6Rf0Ilitex5D870Kv2nqUEytnyGsLYYNVtbb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a49d844ff235dc-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 6.8 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint28:23:2B:8B:2D:09:6C:BB:06:7A:35:80:95:BB:F8:03:41:C8:99:2C
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (7013), with no line terminators
Hash 49475c425d6c00477bb339179326c49b
bd97deeb753f44f43a21feafa92d98239fa511bd
598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 22 Oct 2023 20:50:54 GMT
date: Sun, 22 Oct 2023 20:50:54 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/script.js
200 OK 958 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/script.js
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (1009), with no line terminators
Hash 04835fd7dd7f8cfbad901bee8cff2170
38e9ed1e93f8f0beba9447a99afe3995e63b6f3e
be63bbd38c66ca9a9ee1c8abfed042fd5fc090c40b91ad561e922744ece47c41
GET /sb/ssp/vpn/classic-push/big1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://justpaste.me
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:55 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 10:06:46 GMT
etag: W/"62136436-3be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E5gVo3VU1Q39LVySwllDpnIisniMjfmhkvVEPZWxgUt86%2Fx55q5yfIoFHEgABMFR8c606Tcr9ZgGP%2FtI3RDD4H2k2737ktcZtGuO1p7pw23nLEXBzIWbXgKkZaznfPDffnEXOW7Y%2FxGa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a49d860a1735dc-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/anchor?ar=1&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry&co=aHR0cHM6Ly9qdXN0cGFzdGUubWU6NDQz&hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&size=normal&cb=k4toow6n8t1g
200 OK 60 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry&co=aHR0cHM6Ly9qdXN0cGFzdGUubWU6NDQz&hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&size=normal&cb=k4toow6n8t1g
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintC9:4D:78:AD:EC:04:27:EE:F0:06:4C:C8:78:D8:9F:06:B5:CC:39:37
ValidityThu, 28 Sep 2023 05:26:21 GMT - Thu, 21 Dec 2023 05:26:20 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (51766)
Hash 4ffc446f47228106d1f26b36f82865e6
c93f4359939491147138fa277466f803b987aabd
63da9125d40e0b98fb16587b634312568f6847476079fed958dac7fb933b146c
GET /recaptcha/api2/anchor?ar=1&k=6LfaQQcUAAAAALYGofaAxzjCgzHmHdidKG_SxGry&co=aHR0cHM6Ly9qdXN0cGFzdGUubWU6NDQz&hl=en&v=vm_YDiq1BiI3a8zfbIPZjtF2&size=normal&cb=k4toow6n8t1g HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://justpaste.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 22 Oct 2023 20:50:53 GMT
content-security-policy: script-src 'nonce-JJ5dDco7FCUyLlCRCDEVOA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js
200 OK 84 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js
IP
Requested by https://justpaste.me/zLUd
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (32025)
Hash 4a356126b9573eb7bd1e9a7494737410
8258d046f17dd3c15a5d3984e1868b7b5d1db329
22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5
GET /sb/ssp/vpn/classic-push/big1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:50:54 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 10:06:46 GMT
etag: W/"62136436-1499c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 21473934
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vfz0MyO%2Fj7L5pEzs0HEL8vIxKLxaJnEH649FCitwPctaGg%2FqZkcPGG5fxCBkUcw19h%2Bl9VcHgyIczQvF8oRQA%2FfXXwyItqi56G%2FmB4UfG1RE2MtIjIZwz2i7j71KzR61xoH%2BtfEpE9RZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a49d84db964188-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
160.153.129.212
142.250.74.131
35.157.243.66
104.21.234.92
0.0.0.0