WEBSITE ANALYSIS REPORT

http://zpaste.net/p/vcd0a

24 Oct 2025 · 17:36:18.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
acscdn.com2 captured requests
ad.vidoomy.com8 captured requests
adexchangeclear.com2 captured requests
ads.vidoomy.com1 captured requests
adsco.re1 captured requests
c.adsco.re1 captured requests
cdn4ads.com1 captured requests
d.vidoomy.com9 captured requests
fonts.gstatic.com1 captured requests
h8hwx4z8ip28.l4.adsco.re1 captured requests
h8hwx4z8ip28.n4.adsco.re1 captured requests
h8hwx4z8ip28.s4.adsco.re1 captured requests
onetag-sys.com8 captured requests
usrpubtrk.com1 captured requests
vpaid.vidoomy.com2 captured requests
www.cdn4ads.com1 captured requests
www.google.com4 captured requests
www.googletagmanager.com2 captured requests
www.gstatic.com7 captured requests
xa.workcahoots.com1 captured requests
zpaste.net13 captured requests
zshorte.net1 captured requests

Connections

www.google.com → fonts.gstatic.comLoads from1 captured connections
www.google.com → www.gstatic.comLoads from6 captured connections
zpaste.net → 4.adsco.reCalls2 captured connections
zpaste.net → 6.adsco.reCalls2 captured connections
zpaste.net → acscdn.comLoads from2 captured connections
zpaste.net → ad.vidoomy.comCalls8 captured connections
zpaste.net → adexchangeclear.comCalls2 captured connections
zpaste.net → ads.vidoomy.comLoads from1 captured connections
zpaste.net → adsco.reCalls1 captured connections
zpaste.net → c.adsco.reEmbeds1 captured connections
zpaste.net → cdn4ads.comLoads from1 captured connections
zpaste.net → d.vidoomy.comCalls9 captured connections
zpaste.net → h8hwx4z8ip28.l4.adsco.reCalls1 captured connections
zpaste.net → h8hwx4z8ip28.n4.adsco.reCalls1 captured connections
zpaste.net → h8hwx4z8ip28.s4.adsco.reCalls1 captured connections
zpaste.net → onetag-sys.comCalls7 captured connections
zpaste.net → onetag-sys.comLoads from1 captured connections
zpaste.net → usrpubtrk.comCalls1 captured connections
zpaste.net → vpaid.vidoomy.comLoads from2 captured connections
zpaste.net → www.cdn4ads.comLoads from1 captured connections
zpaste.net → www.google.comEmbeds2 captured connections
zpaste.net → www.google.comLoads from1 captured connections
zpaste.net → www.googletagmanager.comLoads from2 captured connections
zpaste.net → www.gstatic.comLoads from1 captured connections
zpaste.net → xa.workcahoots.comLoads from1 captured connections
zpaste.net → zshorte.netLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:35:54.064 GET 200 document 23.7 KB 374 ms —

17:35:54.586 GET 200 stylesheet 187.2 KB 28 ms —

17:35:54.588 GET 200 stylesheet 32.4 KB 19 ms —

17:35:54.589 GET 200 stylesheet 12.5 KB 19 ms —

17:35:54.591 GET 200 script 131.9 KB 27 ms —

17:35:54.593 GET 200 script 59.7 KB 21 ms —

17:35:54.594 GET 200 script 84.9 KB 21 ms —

17:35:54.596 GET 200 script 10.5 KB 13 ms —

17:35:54.597 GET 200 script 1.3 KB 9 ms —

17:35:54.598 GET 200 script 306.9 KB 330 ms —

17:35:54.599 GET 200 script 4.5 KB 496 ms —

17:35:54.600 GET 200 script 57.5 KB 75 ms 1 alerts

17:35:54.601 GET 200 img 22.2 KB 16 ms —

17:35:54.604 GET 200 script 1017 B 380 ms —

17:35:54.605 GET 200 script 5 B 227 ms 5 alerts

17:35:54.605 GET 200 script 2.4 KB 67 ms —

17:35:54.930 GET 200 script 40.9 KB 80 ms —

17:35:54.933 GET 200 img 23.0 KB 24 ms —

17:35:54.954 GET 200 script 125.0 KB 14 ms 1 alerts

17:35:55.000 POST 204 beacon 0 B 218 ms 3 alerts

Transaction #12

Request / response

URL

POST HTTPS

https://usrpubtrk.com/ut/hb.php?cb=0.2162142264715462&v=1

IP / ASN

104.21.92.33

AS13335 · CLOUDFLARENET

Requested by: https://zpaste.net/p/vcd0a

Resource information

File type: Not recorded
MIME type: text/plain
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 17:29:49.637 UTC
Times seen: 19312417

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Google Trust Services · WE1
Subject: usrpubtrk.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 2D:85:E1:CC:5C:69:E9:00:F0:2A:D7:4D:EC:27:FD:E4:0E:99:3F:1F
Valid from: Sun, 12 Oct 2025 12:29:00 GMT
Valid until: Sat, 10 Jan 2026 13:27:25 GMT

Technology fingerprints

Google Cloud CDN (CDN)
Google Cloud (IaaS)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /ut/hb.php?cb=0.2162142264715462&v=1 HTTP/1.1
Host: usrpubtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 1139
Origin: https://zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response headers

HTTP/2 204 No Content
date: Fri, 24 Oct 2025 17:35:55 GMT
server: cloudflare
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=65vbTNdJd4N5W%2BDMNoTwlT%2FEGqGp%2FzAcZNl7d2%2BeTO4vibV8lWr85z3WCeS4%2BqqS1LnvxHp9XiieV11jArZ0aAVxOUIqDjswLz5p"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 993b3bc0ffd20b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

17:35:55.003 GET 200 script 368.3 KB 90 ms —

17:35:55.041 GET 200 fetch 90 B 226 ms 1 alerts

17:35:55.250 GET 200 script 806.2 KB 191 ms —

17:35:55.254 GET 200 img 15.1 KB 112 ms —

17:35:55.256 GET 200 img 244.5 KB 11 ms —

17:35:56.153 GET 200 xhr 45 B 669 ms —

17:35:56.155 GET 200 xhr 45 B 673 ms —

17:35:56.157 GET 200 xhr 45 B 77 ms —

17:35:56.158 GET 200 xhr 45 B 79 ms —

17:35:56.159 GET 200 xhr 0 B 283 ms —

17:35:56.160 GET 200 xhr 0 B 851 ms —

17:35:56.161 GET No response xhr 0 B 347 ms —

17:35:56.261 GET 200 subdocument 77.0 KB 69 ms —

17:35:56.294 GET 200 subdocument 77.1 KB 14 ms —

17:35:56.532 GET 200 stylesheet 81.0 KB 59 ms —

17:35:56.534 GET 200 script 806.2 KB 111 ms —

17:35:56.755 POST 200 xhr 1.2 KB 699 ms —

17:35:56.943 GET 200 font 15.0 KB 195 ms —

17:35:56.965 GET 200 script 102 B 34 ms —

17:35:57.030 GET 200 script 806.2 KB 51 ms —

17:35:57.098 GET 200 img 2.2 KB 23 ms —

17:35:57.282 GET 200 script 44 B 712 ms —

17:35:57.832 GET 200 subdocument 7.4 KB 34 ms —

17:35:57.886 GET 200 stylesheet 81.0 KB 23 ms —

17:35:57.888 GET 200 script 806.2 KB 39 ms —

17:35:57.931 GET 200 script 515.2 KB 158 ms —

17:35:58.448 GET 200 script 557.1 KB 8 ms —

17:35:58.477 OPTIONS 200 xhr 0 B 396 ms —

17:35:58.710 GET 200 xhr 7.3 KB 806 ms —

17:36:00.041 GET 204 fetch 0 B 695 ms —

http://zpaste.net/p/vcd0a

Domain graph

Hostnames

Connections

Network requests

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://zpaste.net/p/vcd0a

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://zpaste.net/p/vcd0a

Domain graph

Network requests