WEBSITE ANALYSIS REPORT

http://zpaste.net/p/wh7et

22 Jan 2026 · 23:24:09.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
acscdn.com2 captured requests
ad.vidoomy.com10 captured requests
adexchangeclear.com2 captured requests
ads.vidoomy.com1 captured requests
adsco.re1 captured requests
c.adsco.re1 captured requests
cdn4ads.com1 captured requests
d.vidoomy.com9 captured requests
fonts.gstatic.com1 captured requests
mp.4dex.io7 captured requests
oeusbl5gpfgl.l4.adsco.re1 captured requests
oeusbl5gpfgl.n4.adsco.re1 captured requests
oeusbl5gpfgl.s4.adsco.re1 captured requests
onetag-sys.com8 captured requests
script.4dex.io1 captured requests
usrpubtrk.com1 captured requests
vidwestxyz.com1 captured requests
vpaid.vidoomy.com2 captured requests
www.cdn4ads.com1 captured requests
www.google.com4 captured requests
www.googletagmanager.com2 captured requests
www.gstatic.com7 captured requests
xa.workcahoots.com2 captured requests
zpaste.net13 captured requests
zshorte.net1 captured requests
zv.bacurypredy.com1 captured requests

Connections

www.google.com → fonts.gstatic.comLoads from1 captured connections
www.google.com → www.gstatic.comLoads from6 captured connections
zpaste.net → 4.adsco.reCalls2 captured connections
zpaste.net → 6.adsco.reCalls2 captured connections
zpaste.net → acscdn.comLoads from2 captured connections
zpaste.net → ad.vidoomy.comCalls10 captured connections
zpaste.net → adexchangeclear.comCalls2 captured connections
zpaste.net → ads.vidoomy.comLoads from1 captured connections
zpaste.net → adsco.reCalls1 captured connections
zpaste.net → c.adsco.reLoads from1 captured connections
zpaste.net → cdn4ads.comLoads from1 captured connections
zpaste.net → d.vidoomy.comCalls9 captured connections
zpaste.net → mp.4dex.ioCalls7 captured connections
zpaste.net → oeusbl5gpfgl.l4.adsco.reCalls1 captured connections
zpaste.net → oeusbl5gpfgl.n4.adsco.reCalls1 captured connections
zpaste.net → oeusbl5gpfgl.s4.adsco.reCalls1 captured connections
zpaste.net → onetag-sys.comCalls7 captured connections
zpaste.net → onetag-sys.comLoads from1 captured connections
zpaste.net → script.4dex.ioLoads from1 captured connections
zpaste.net → usrpubtrk.comCalls1 captured connections
zpaste.net → vidwestxyz.comLoads from1 captured connections
zpaste.net → vpaid.vidoomy.comLoads from2 captured connections
zpaste.net → www.cdn4ads.comLoads from1 captured connections
zpaste.net → www.google.comEmbeds2 captured connections
zpaste.net → www.google.comLoads from1 captured connections
zpaste.net → www.googletagmanager.comLoads from2 captured connections
zpaste.net → www.gstatic.comLoads from1 captured connections
zpaste.net → xa.workcahoots.comLoads from2 captured connections
zpaste.net → zshorte.netLoads from1 captured connections
zpaste.net → zv.bacurypredy.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:23:42.278 GET 200 document 23.9 KB 317 ms —

23:23:42.749 GET 200 stylesheet 187.2 KB 31 ms —

23:23:42.751 GET 200 stylesheet 32.4 KB 15 ms —

23:23:42.752 GET 200 stylesheet 12.5 KB 15 ms —

23:23:42.753 GET 200 script 131.9 KB 42 ms —

23:23:42.755 GET 200 script 59.7 KB 34 ms —

23:23:42.756 GET 200 script 84.9 KB 34 ms —

23:23:42.757 GET 200 script 10.5 KB 25 ms —

23:23:42.758 GET 200 script 1.3 KB 25 ms —

23:23:42.759 GET 200 script 314.8 KB 351 ms —

23:23:42.760 GET 200 script 4.5 KB 562 ms —

23:23:42.761 GET 200 script 163.4 KB 80 ms 1 alerts

23:23:42.762 GET 200 img 22.2 KB 30 ms —

23:23:42.764 GET 200 script 1017 B 259 ms —

23:23:42.765 GET No response script 0 B 0 ms 1 alerts

23:23:42.766 GET 200 script 5 B 148 ms 2 alerts

23:23:42.767 GET 200 script 2.4 KB 56 ms —

23:23:43.022 GET 200 script 40.9 KB 157 ms —

23:23:43.025 GET 200 img 23.0 KB 8 ms —

23:23:43.033 GET No response script 0 B 0 ms 1 alerts

23:23:43.092 GET 200 script 340.4 KB 38 ms 1 alerts

23:23:43.203 GET 200 script 836.2 KB 228 ms —

23:23:43.207 GET 200 img 15.1 KB 9 ms —

23:23:43.209 GET 200 img 244.5 KB 16 ms —

23:23:43.353 GET 200 fetch 90 B 191 ms 1 alerts

23:23:43.478 GET 200 script 69.5 KB 42 ms —

23:23:43.480 POST 204 beacon 0 B 189 ms 3 alerts

Transaction #77

Request / response

URL

POST HTTPS

https://usrpubtrk.com/ut/hb.php?cb=0.7218215380659082&v=1

IP / ASN

104.21.92.33

AS13335 · CLOUDFLARENET

Requested by: https://zpaste.net/p/wh7et

Resource information

File type: Not recorded
MIME type: text/plain
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 07:29:45.320 UTC
Times seen: 19301005

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Google Trust Services · WE1
Subject: usrpubtrk.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 77:2A:71:0C:1C:F9:2B:14:04:DB:13:5F:A6:57:67:6D:B3:A9:A0:95
Valid from: Wed, 10 Dec 2025 12:57:52 GMT
Valid until: Tue, 10 Mar 2026 13:56:16 GMT

Technology fingerprints

Google Cloud CDN (CDN)
Google Cloud (IaaS)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /ut/hb.php?cb=0.7218215380659082&v=1 HTTP/1.1
Host: usrpubtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 1676
Origin: https://zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response headers

HTTP/2 204 No Content
date: Thu, 22 Jan 2026 23:23:43 GMT
server: cloudflare
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=IHSi%2BMXFuBrCx%2BdHQ8S1jK2wcWZHCkTU5FPdWnsSl2Y%2B1UABYztBBIrPgv1ZBGzev63XlwXCp6PDr1rC5Kyku3Pn5V3AWD49bg9P"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 9c22ccfcdef756c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Request body

Captured 1.6 KB · Displayed 1.6 KB

{"clientHints":{},"isScrollable":1,"totalClicks":0,"sessionLength":0,"ippMissclicks":0,"visible":1,"caught":0,"lastevent":0,"isFullscreen":0,"isTabFocused":1,"eventImps":0,"retryCounts":0,"isScrolled":1,"isMouseMoved":0,"pagePercentageSeen":64,"belowTheFoldSeen":0,"touchEnd":0,"touchMove":0,"clicksByType":{"idle":0,"input":0,"video":0,"button":0,"link":0,"img":0},"browsingTopics":[],"ufp":"Win32/Mozilla/Netscape/true/false/1280x10240en-USunknown4824 bits","sessionStartTime":1769124223,"sessionId":"251138c526bd89460e18a1577ce75d52","timeZoneOffset":0,"zones":["9919634"],"pUrl":"https%3A%2F%2Fzpaste.net%2Fp%2Fwh7et","pReferrer":"","pTitle":"The%20Last%20of%20Us%20Part%20II%20Remastered%20update%201.6.10721%20(22.07.2025)%20%7C%20MEDIAFIRE%20-%20zPaste.net","pDescription":"zPaste.net%20es%20una%20herramienta%20del%20tipo%20almacenamiento%20de%20texto%2C%20mas%20conocido%20como%20pastes%2C%20puedes%20crear%20y%20compartir%20tus%20pastes%20con%20tus%20amigos.","pKeywords":"zPaste.net%2Cpaste%20seguro%2Cpaste%20rapido%2Ccompartir%20enlaces%2Cenlaces%20protejidos","pHasIframes":1,"pWidth":1280,"pHeight":1600,"vWidth":1280,"vHeight":1024,"inIframe":0,"bsd":"eyJwcm9iYWJpbGl0eSI6MC4wMSwicGVyU2lnbmFsIjp7ImRvZXNVQUNvbnRhaW5IZWFkbGVzc0tleXdvcmQiOmZhbHNlLCJpc1dlYkRyaXZlclByZXNlbnQiOmZhbHNlLCJpc0NEUERldGVjdGVkIjpmYWxzZSwiYXV0b21hdGVkQnJvd3Nlckdsb2JhbHMiOmZhbHNlLCJpc1dpbmRvd0NEQyI6ZmFsc2UsImlzRmlyZWZveE1pc21hdGNoIjpmYWxzZSwiaW5jb25zaXN0ZW5jaWVzIjpmYWxzZSwiaXNDaHJvbWVGb3JUZXN0aW5nIjpmYWxzZSwibWlzc2luZ1dlYlJUQyI6ZmFsc2UsImRldGVjdENTU0Fub21hbGllcyI6ZmFsc2UsImlzSGVhZGxlc3NQZXJtaXNzaW9uTWF0Y2hlZCI6ZmFsc2UsInN1c1VzZXJJbnB1dCI6ZmFsc2V9fQ==","sentTimestamp":1769124223443}

23:23:43.488 GET 200 script 377.2 KB 107 ms —

23:23:43.589 GET 200 subdocument 91.2 KB 68 ms —

23:23:43.639 GET 200 xhr 45 B 204 ms —

23:23:43.647 GET 200 xhr 45 B 199 ms —

23:23:43.649 GET 200 xhr 45 B 45 ms —

23:23:43.651 GET 200 xhr 45 B 56 ms —

23:23:43.652 GET 200 xhr 0 B 251 ms —

23:23:43.654 GET 200 xhr 0 B 840 ms —

23:23:43.803 GET 200 xhr 0 B 1549 ms —

23:23:43.877 GET 200 stylesheet 81.4 KB 36 ms —

23:23:43.879 GET 200 script 836.2 KB 85 ms —

23:23:44.202 GET 200 font 39.2 KB 141 ms —

23:23:44.214 GET 200 script 102 B 19 ms —

23:23:44.291 GET 200 img 2.2 KB 16 ms —

23:23:44.358 GET 200 script 836.2 KB 39 ms —

23:23:45.030 POST 200 xhr 1.2 KB 234 ms —

23:23:45.283 GET 200 script 44 B 712 ms —

23:23:45.408 GET 200 subdocument 16.6 KB 24 ms —

23:23:45.452 GET 200 stylesheet 81.4 KB 19 ms —

23:23:45.460 GET 200 script 836.2 KB 49 ms —

23:23:46.115 GET 200 script 614.9 KB 129 ms —

23:23:46.683 GET 200 script 573.2 KB 8 ms —

23:23:46.696 OPTIONS 200 xhr 0 B 395 ms —

http://zpaste.net/p/wh7et

Domain graph

Hostnames

Connections

Network requests

Transaction #77

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://zpaste.net/p/wh7et

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #77

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

http://zpaste.net/p/wh7et

Domain graph

Network requests