WEBSITE ANALYSIS REPORT

http://pasteflash.com

27 Apr 2026 · 09:59:44.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:59:22.888 GET 200 document 11.8 KB 528 ms 1 alerts

09:59:23.333 GET 200 script 819 B 48 ms 1 alerts

09:59:23.520 GET 200 img 535.1 KB 273 ms 1 alerts

09:59:23.522 GET 200 script 50.1 KB 859 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://acceptableredheadcaviar.com/21b0e994d14a596d05cc4cc50311bbc7/invoke.js

IP / ASN

172.240.127.244

AS7979 · SERVERS-COM

Requested by: https://pasteflash.com/

Resource information

File type: JavaScript source, ASCII text, with very long lines (51295), with no line terminators
MIME type: application/javascript
First seen (UTC): 27 Apr 2026 · 09:59:48.311 UTC
Last seen (UTC): 27 Apr 2026 · 09:59:48.311 UTC
Times seen: 1

Size: 50.1 KB (51295 bytes)
MD5: bd054749ca7f125d31f022930a5cfe40
SHA1: bffdff34fcefb813daf8f664ded0f2d99e857cc9
SHA256: 0c6733ce047738ceee66f9ba1130106d27974aa1021e6360261fe696c7fb0a50

Certificate information

Issuer: Let's Encrypt · R13
Subject: acceptableredheadcaviar.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 49:AE:28:D7:F9:BA:D7:AF:0B:35:E4:20:41:B7:98:1E:50:89:42:CB
Valid from: Sun, 08 Mar 2026 20:36:15 GMT
Valid until: Sat, 06 Jun 2026 20:36:14 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /21b0e994d14a596d05cc4cc50311bbc7/invoke.js HTTP/1.1
Host: acceptableredheadcaviar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pasteflash.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 27 Apr 2026 09:59:23 GMT
Content-Type: application/javascript
Content-Length: 20408
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 6
Host: acceptableredheadcaviar.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: a11292e384b652324561bc91dd740e11
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

09:59:24.068 GET 200 script 5.0 KB 720 ms 4 alerts

09:59:24.078 GET 200 xhr 40 B 177 ms —

09:59:24.213 GET 307 xhr 3.9 KB 662 ms 4 alerts

09:59:24.598 GET 200 xhr 3.9 KB 116 ms 4 alerts

09:59:24.745 GET 200 img 50.2 KB 266 ms —

09:59:24.747 GET 200 img 0 B 102 ms 4 alerts

http://pasteflash.com

Domain graph

Hostnames

Connections