Report - fgfdrfl.cfd/?aD0zZjZmMjUxMzYyZDFmMjQ2ZmQwNGMyYjg2NzE5MDI3YiZ1c2VyPTE4OCZzaWQ9ODUmdHlwZT1jJmFkY29kZT0yJnRtcD01&file=File

Report Overview

Visited public
2024-06-20 17:26:47
Tags
URL
fgfdrfl.cfd/?aD0zZjZmMjUxMzYyZDFmMjQ2ZmQwNGMyYjg2NzE5MDI3YiZ1c2VyPTE4OCZzaWQ9ODUmdHlwZT1jJmFkY29kZT0yJnRtcD01&file=File
Finishing URL
paste.rs/VFY65.txt
IP / ASN
104.21.10.50
#13335 CLOUDFLARENET
Title
Source Code | VFY65 | Rocket Powered Pastebin

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-06-19 18:12:11	1.3 kB	3.6 kB	23.36.77.32
paste.rs	unknown	2016-11-21	2018-08-29 11:39:20	2024-04-04 11:52:44	1.7 kB	4.9 kB	45.63.94.214
hangepre.xyz	unknown	2024-02-02	2024-03-21 13:04:40	2024-03-25 15:29:51	593 B	12 kB	172.67.203.8
href.li	36866	unknown	2012-05-22 14:39:06	2024-06-20 18:01:47	521 B	5.8 kB	192.0.78.27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-06-20 17:26:27	low	Client IP	192.0.78.27	ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (10)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 12bf1a23e28f4b6996d92ef0ce981624 78899bea571ec8198e710c1e798a394f83c5b46b c57667fc645403b94b531cbc75f5284ae4b4ab4410bf2afdd97619f7137ed6c5 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "C57667FC645403B94B531CBC75F5284AE4B4AB4410BF2AFDD97619F7137ED6C5" Last-Modified: Tue, 18 Jun 2024 01:53:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4511 Expires: Thu, 20 Jun 2024 18:41:33 GMT Date: Thu, 20 Jun 2024 17:26:22 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c0fde0756f59aaa5fa85a62f5f528e74 3c2d990e14054ee3b407cc37d77e255533d91ed6 ca44d6619deb0e020993a84c6bfbf1993bf096b13863b706dc8a826499348276 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "CA44D6619DEB0E020993A84C6BFBF1993BF096B13863B706DC8A826499348276" Last-Modified: Wed, 19 Jun 2024 23:47:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14252 Expires: Thu, 20 Jun 2024 21:23:54 GMT Date: Thu, 20 Jun 2024 17:26:22 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 5a3268763aa8247d09e7b12f8a157bb5 fbddec6e9fb707501596ca331266c50e77e23f5b 6095004cca6c22ee09c33dc58574519973f162bb1ee183856ed65675281d551c HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "6095004CCA6C22EE09C33DC58574519973F162BB1EE183856ED65675281D551C" Last-Modified: Wed, 19 Jun 2024 16:21:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9013 Expires: Thu, 20 Jun 2024 19:56:35 GMT Date: Thu, 20 Jun 2024 17:26:22 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.57		504 B
URL r10.o.lencr.org/ IP 23.33.119.57:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash a4a98cb7858bfd671309bced772b0095 703c86e6784782333c82f615335a6b5d6826607e 224e289334c48e0048c8e7805fae8e7b485ea11d278ed892156c67ce21e8e04c HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "224E289334C48E0048C8E7805FAE8E7B485EA11D278ED892156C67CE21E8E04C" Last-Modified: Tue, 18 Jun 2024 05:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15594 Expires: Thu, 20 Jun 2024 21:46:18 GMT Date: Thu, 20 Jun 2024 17:26:24 GMT Connection: keep-alive`

	GET paste.rs/VFY65.txt	45.63.94.214	200 OK	957 B
URL User Request GET HTTP/1.1 paste.rs/VFY65.txt IP 45.63.94.214:443 ASN #20473 AS-CHOOPA Certificate IssuerLet's Encrypt Subjectpaste.rs FingerprintD3:74:93:AD:96:1B:E6:F2:E6:7B:8E:EF:45:9A:5F:C1:35:B2:0A:61 ValidityWed, 01 May 2024 10:00:10 GMT - Tue, 30 Jul 2024 10:00:09 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (310), with CRLF, LF line terminators Size 957 B (957 bytes) Hash e6eb31794eda414b74d77f06e575075d ba0c7a81576dc77c33ed18da875ca381d9c27b46 547f730c6f994e964c2e72b0fe9cf454609d0514cae5aee447677d3436d3151d HTTP Headers `GET /VFY65.txt HTTP/1.1 Host: paste.rs User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Jun 2024 17:26:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding permissions-policy: interest-cohort=() Strict-Transport-Security: max-age=31536000; includeSubdomains; x-frame-options: SAMEORIGIN, SAMEORIGIN x-content-type-options: nosniff, nosniff X-XSS-Protection: 1; mode=block Content-Encoding: gzip`

	GET paste.rs/normalize.min.css	45.63.94.214	200 OK	785 B
URL GET HTTP/1.1 paste.rs/normalize.min.css IP 45.63.94.214:443 ASN #20473 AS-CHOOPA Requested by https://paste.rs/VFY65.txt Certificate IssuerLet's Encrypt Subjectpaste.rs FingerprintD3:74:93:AD:96:1B:E6:F2:E6:7B:8E:EF:45:9A:5F:C1:35:B2:0A:61 ValidityWed, 01 May 2024 10:00:10 GMT - Tue, 30 Jul 2024 10:00:09 GMT File type ASCII text, with very long lines (1615) Size 785 B (785 bytes) Hash 69396fe173580a71758e10efed1bce99 e152dab6dd95ce21705c3eb76e0f8b211cd396fe ee733a13231e0683bf55cfd944f5d2bd445e6ea91488348df313cc37e8f4b031 HTTP Headers `GET /normalize.min.css HTTP/1.1 Host: paste.rs User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://paste.rs/VFY65.txt Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Jun 2024 17:26:29 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding permissions-policy: interest-cohort=() Strict-Transport-Security: max-age=31536000; includeSubdomains; x-frame-options: SAMEORIGIN, SAMEORIGIN x-content-type-options: nosniff, nosniff X-XSS-Protection: 1; mode=block Content-Encoding: gzip`

	GET paste.rs/code.min.css	45.63.94.214	200 OK	601 B
URL GET HTTP/1.1 paste.rs/code.min.css IP 45.63.94.214:443 ASN #20473 AS-CHOOPA Requested by https://paste.rs/VFY65.txt Certificate IssuerLet's Encrypt Subjectpaste.rs FingerprintD3:74:93:AD:96:1B:E6:F2:E6:7B:8E:EF:45:9A:5F:C1:35:B2:0A:61 ValidityWed, 01 May 2024 10:00:10 GMT - Tue, 30 Jul 2024 10:00:09 GMT File type ASCII text, with very long lines (600) Size 601 B (601 bytes) Hash f9e00b13ff6209511276001f4febc1a0 f9e466bdaa58097315c3d4206478ceb3cca17b9a 2eaa8b7de74f45409f7d72e96d0d81d0509e670af7c7b0445c8a8af6435ac58b HTTP Headers `GET /code.min.css HTTP/1.1 Host: paste.rs User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://paste.rs/VFY65.txt Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Jun 2024 17:26:29 GMT Content-Type: text/css; charset=utf-8 Content-Length: 601 Connection: close permissions-policy: interest-cohort=() Strict-Transport-Security: max-age=31536000; includeSubdomains; x-frame-options: SAMEORIGIN, SAMEORIGIN x-content-type-options: nosniff, nosniff X-XSS-Protection: 1; mode=block`

	GET paste.rs/favicon-16x16.png	45.63.94.214	200 OK	985 B
URL GET HTTP/1.1 paste.rs/favicon-16x16.png IP 45.63.94.214:443 ASN #20473 AS-CHOOPA Requested by https://paste.rs/VFY65.txt Certificate IssuerLet's Encrypt Subjectpaste.rs FingerprintD3:74:93:AD:96:1B:E6:F2:E6:7B:8E:EF:45:9A:5F:C1:35:B2:0A:61 ValidityWed, 01 May 2024 10:00:10 GMT - Tue, 30 Jul 2024 10:00:09 GMT File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced Size 985 B (985 bytes) Hash 507cfefbe150830a9f205bda55db09e0 35bed9c0e45ab505c25a72d552f1d46bb98726e3 96f1c3002626227e500be9adda44360d46a7eb40851e509ac0452d24073865a5 HTTP Headers `GET /favicon-16x16.png HTTP/1.1 Host: paste.rs User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://paste.rs/VFY65.txt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Jun 2024 17:26:29 GMT Content-Type: image/png Content-Length: 985 Connection: close permissions-policy: interest-cohort=() Strict-Transport-Security: max-age=31536000; includeSubdomains; x-frame-options: SAMEORIGIN, SAMEORIGIN x-content-type-options: nosniff, nosniff X-XSS-Protection: 1; mode=block`

	hangepre.xyz/favicon.ico	172.67.203.8		12 kB
URL hangepre.xyz/favicon.ico IP 172.67.203.8:0 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with no line terminators Size 12 kB (11468 bytes) Hash 3dea6e4a74ae5c8a6b8dd3bae0de6081 0b2672db2629a86272ca21084220113c548195db 6c09a3f77e8a1ce36ffdf1bf0cff8aa9bb5c17616ba8f31db31d8b5946245362 HTTP Headers GET /favicon.ico HTTP/1.1 Host: hangepre.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hangepre.xyz/?gitHash=vEqhcixRTQAICmn4&payId=275c741f570b41aaa30eddaa8543a695a6c0d756808a4273c4792dea3d9bb1e7e8800f&adsId=6674663f=624208afd624d6eecda86fee3a34c79d&s=File&t=47 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 404 Not Found date: Thu, 20 Jun 2024 17:26:24 GMT content-type: text/html; charset=iso-8859-1 cache-control: max-age=14400 cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DhPpmIumAbnnR9rI%2FiQ%2FkM7C1eHkt00Hi8Xz%2BPzheL34zsvd31rmtaYUfIiwNkVzCso%2FpGNMPEEqkJh8zMZKjEQi7aQAy6t0uCGztpJqWPSj07VGqHxc88BNdVT5qYM%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 896d76b2b826b4ee-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	href.li/?https://paste.rs/VFY65.txt	192.0.78.27		5.5 kB
URL href.li/?https://paste.rs/VFY65.txt IP 192.0.78.27:0 ASN #2635 AUTOMATTIC File type HTML document, ASCII text Size 5.5 kB (5532 bytes) Hash 3b559a80d3f253cae04925c5a75eea92 835343f704ab80ca4848305aa5550c7f367d41f4 1e91cdddb3f22a7ca02a03632f25bd04e6d91037b4bf705b82503ae7d1e20f17 HTTP Headers GET /?https://paste.rs/VFY65.txt HTTP/1.1 Host: href.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hangepre.xyz/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Thu, 20 Jun 2024 17:26:27 GMT content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000 vary: Accept-Encoding content-encoding: br x-ac: 3.arn _dca MISS alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (10)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN