104.21.91.46403 Forbidden 0 B URL User Request GET HTTP/2 IP 104.21.91.46:443
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/l32hc HTTP/1.1
Host: zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Jun 2023 04:25:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 04 Jun 2023 05:25:31 GMT
Location: http://www.zpaste.net/p/l32hc
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T5vUKj4RdPLe7l61lSneUDaoExUF%2FIiHaEfCmOxX4Fnr0v%2FbF%2FooACNTChha%2FsQK8nC%2FqVHXadukzyvfg2PF125ajjerRCKKP9I7LVtNG0zj5ab%2FhwYDlEfCRpM3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d1d69913efafab8-OSL
alt-svc: h2=":443"; ma=60
104.21.91.46301 Moved Permanently 0 B URL User Request GET HTTP/1.1 IP 104.21.91.46:80
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/l32hc HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Jun 2023 04:25:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 04 Jun 2023 05:25:31 GMT
Location: https://www.zpaste.net/p/l32hc
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tm3ePVgo2nVbbbLSOvUcv6jTcktBXVAtDNo2cahowy1MkB9bBiV9g6t6NqiCMytr%2F63gFTju4L1kted1iggCnhjEHzlirlOGz3ruqqZcCexIbiqe7vJKyIWUz%2B4aApCvLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d1d6991edc8b503-OSL
alt-svc: h2=":443"; ma=60
www.zpaste.net/cdn-cgi/images/trace/managed/js/transparent.gif?ray=7d1d69921ae10b65
104.21.91.46 42 B URL www.zpaste.net/cdn-cgi/images/trace/managed/js/transparent.gif?ray=7d1d69921ae10b65
IP 104.21.91.46:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cdn-cgi/images/trace/managed/js/transparent.gif?ray=7d1d69921ae10b65 HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.zpaste.net/p/l32hc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:31 GMT
content-type: image/gif
content-length: 42
last-modified: Tue, 30 May 2023 15:20:42 GMT
etag: "6476144a-2a"
server: cloudflare
cf-ray: 7d1d69944c060b65-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Sun, 04 Jun 2023 06:25:31 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
zshorte.net/img/Banner-2.jpg
172.67.138.73200 OK 47 kB URL GET HTTP/2 zshorte.net/img/Banner-2.jpg
IP 172.67.138.73:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoogle Trust Services LLC
Subjectzshorte.net
FingerprintBE:C4:6A:B9:8C:68:77:09:DC:D6:E4:36:65:78:95:26:99:DC:F8:A1
ValidityWed, 17 May 2023 04:36:00 GMT - Tue, 15 Aug 2023 04:35:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2020:06:22 16:21:15], baseline, precision 8, 468x60, components 3\012- data
Hash e9a67934a756e65d502a2e507b88b51d
2e7975f3305e2339a27c55261e4d087d7ef6df7a
e7fd88e55cb212c58ad25a79a7bae9b3c917d8b00ac4aef4e704b2b389540c62
GET /img/Banner-2.jpg HTTP/1.1
Host: zshorte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: image/jpeg
content-length: 47037
x-frame-options: SAMEORIGIN
last-modified: Mon, 22 Jun 2020 22:57:44 GMT
cache-control: max-age=31536000
expires: Mon, 23 Oct 2023 22:27:12 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 19288702
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2N0Uwn3iHxi4ZRKF8R5KCISnvLCIB9TPNGCQ2EyKqN9F8f9yQc5NbRGPXsqkeTrbJ40k5oo1Xvc9vWiWWq6Tv6Rm0aDmKh8UbSlWXZ2hHLBAlk6DNchQsVKW%2Bj4Nuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1d69a598e0b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 8543a104bf352a1cf8ad1bf2e07100a2
ce7140bcab4ded21050f0249e87e9e0afdd1f94a
06a7f106970ad07a284048a8847a60121e6d64ba0baabcc00e701491aee183fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 04:25:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 0f9b480992f630430e33e1063b414542
bcaedb7914f5c0069c7f4187dad0ae8a4e2d94d9
bfcc73247d3e026090d69a4b8348f2a506fa1f8eb40fbd2e709482b7f5c5b750
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 04:25:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=onload
142.250.74.132200 OK 555 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=onload
IP 142.250.74.132:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintA8:95:C3:CB:D6:3F:BC:0A:7D:FF:36:72:5E:2F:56:26:9F:EB:77:0E
ValidityFri, 19 May 2023 12:58:13 GMT - Fri, 11 Aug 2023 12:58:12 GMT
File type ASCII text, with very long lines (850), with no line terminators
Hash fbd5eeb900897249ff19788c9934795f
a70760a26cbef3e5cfb627a7d76c9c135382a80f
8d407cd28e2db7a40917117ec99a996194878d452f589860cb45083e6d7208f1
GET /recaptcha/api.js?render=onload HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Sun, 04 Jun 2023 04:25:34 GMT
date: Sun, 04 Jun 2023 04:25:34 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 555
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.zpaste.net/zpaste/assets/img/LogozPaste.png
104.21.91.46200 OK 23 kB URL GET HTTP/3 www.zpaste.net/zpaste/assets/img/LogozPaste.png
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type PNG image data, 226 x 102, 8-bit/color RGBA, non-interlaced\012- data
Hash 8248d429409b33ba6ab8c6c7fef1602e
f2b70a5db3f631be0fc0ab8c19099f8e04a12462
bb16f8c778a4b834a62395d19defa5731c90b7fb4902ef104d31f5684ee7d5db
GET /zpaste/assets/img/LogozPaste.png HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: image/png
content-length: 22709
last-modified: Sat, 14 Dec 2019 07:37:43 GMT
x-served-by: www.zpaste.net
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T3LgUJ9aQUmJWh05ws8exN5fbNhzvXxlehbZcZho%2BGl8r0W7nEVrqOvki2IYa%2BweHE4QfXCKLnrmBPxQJNiUKn%2F9UhvlIUIKn%2F3sOlR8CREBIvPmpeAZAuPK%2F0Ee%2B6StjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69a549e50b65-OSL
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=UA-77394287-10
142.250.74.40200 OK 47 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-77394287-10
IP 142.250.74.40:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint73:BF:B0:D4:62:48:8E:EF:09:5F:00:57:95:98:82:16:BB:07:35:0C
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (2271)
Hash 435739185611bffab262596874499b25
0cfc6709d1bdb4b5434e35bd2000f82315840571
1ed8786b6457eb0903453d5b52e3771c1dbdd8ac27750242a1b059613dd4a589
GET /gtag/js?id=UA-77394287-10 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Jun 2023 04:25:34 GMT
expires: Sun, 04 Jun 2023 04:25:34 GMT
cache-control: private, max-age=900
last-modified: Sun, 04 Jun 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 47368
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 37666b9ccb9ec1632df818aa5b9c30ce
73a1cc9b50fa59f3262e6b0577d70514ae639adf
d62cc75cd09bd1a62debedc6273aec0e8206c45fc993553253627a3464f46d57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 04:25:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.zpaste.net/zpaste/assets/clipboard-js/clipboard.min.js
104.21.91.46200 OK 3.9 kB URL GET HTTP/3 www.zpaste.net/zpaste/assets/clipboard-js/clipboard.min.js
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type Unicode text, UTF-8 text, with very long lines (10645)
Hash f06c52bfddb458ad87349acf9fac06c5
ee60ca5ba9401456105ef703a98092369b579c80
1626706afc88d95ebe1173b553ec732c6dc82a576989315fdf5e7779af738a44
GET /zpaste/assets/clipboard-js/clipboard.min.js HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: application/javascript
last-modified: Sat, 14 Dec 2019 07:37:38 GMT
x-served-by: www.zpaste.net
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P1fd0RHvulC33aYWkP1kv0gnt8yiNYavr%2FZ%2F%2BBefJCnQDpy0ijfSjmAoofsXOKfGvC%2BpH3X1YwQ6Iufg6%2F7HsgbovmG7osHqbfxTZMIY7wI5vTpOv3W9WfSywDvsFXuNkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69a529da0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
talcoidsakis.com/1clkn/33405
23.109.248.169200 OK 26 B URL GET HTTP/1.1 talcoidsakis.com/1clkn/33405
IP 23.109.248.169:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjecttalcoidsakis.com
FingerprintAF:0E:C8:B1:FC:AE:F7:D6:01:49:A5:B1:F2:C8:86:9C:BE:7F:34:FE
ValidityThu, 20 Apr 2023 00:12:56 GMT - Wed, 19 Jul 2023 00:12:55 GMT
File type ASCII text, with no line terminators
Hash 9082dc37e5e8046929da411544ad071a
41e0e3963ed94e59e8a2f115994c382712411537
b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
GET /1clkn/33405 HTTP/1.1
Host: talcoidsakis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Jun 2023 04:25:34 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Mon, 05-Jun-2023 04:25:34 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Mon, 05-Jun-2023 04:25:34 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
ocsp.sectigo.com/
104.18.14.101 472 B IP 104.18.14.101:0
Hash 19bae3c05edbaa02345c291f4ff17708
a30e6342e7fd110901614f3507b5f44a7dab3bcf
f4ccf0ec77a0d91cc80f8bf9eb1e60be49d33fe28e9dea253f5051cb9ebbb98e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Jun 2023 22:16:06 GMT
Expires: Sat, 10 Jun 2023 22:16:05 GMT
Etag: "a30e6342e7fd110901614f3507b5f44a7dab3bcf"
Cache-Control: max-age=583491,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d1d69a6d8c60b4d-OSL
ocsp.r2m01.amazontrust.com/
54.230.80.227 471 B URL ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash e5a657c40a30b488c98d63c67019c703
051846ef27025656fedcc521317890a10cf71f39
3900239667a0dd48b8d3548f269b32c0e1de310ffa8f955b627095b3e01cb2bf
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 04 Jun 2023 04:25:34 GMT
Last-Modified: Sun, 04 Jun 2023 03:59:05 GMT
Server: ECAcc (bsa/EB6C)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: WdpVIlkzVtCSTUbzvp5uCd2ZsE2TD4ocEMatMWFXS-R2iTpTQ-XxiA==
Age: 1589
challenges.cloudflare.com/turnstile/v0/g/68662470/api.js?onload=_cf_chl_turnstile_l&render=explicit
104.18.7.185 12 kB URL challenges.cloudflare.com/turnstile/v0/g/68662470/api.js?onload=_cf_chl_turnstile_l&render=explicit
IP 104.18.7.185:0
File type ASCII text, with very long lines (19175)
Hash 21a964474a4841c3e62893476cfec550
af06eb1e31d451fe557b7581e707cd88a3107491
fb479d9c5db685793fd57b4cacb188d2aa9ab40d660d54e1cf35d0f54b390c12
GET /turnstile/v0/g/68662470/api.js?onload=_cf_chl_turnstile_l&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:31 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d6995af130b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.23 1.8 kB IP 192.124.249.23:0
Hash 9534950ff2277e0da2d8f077b30e9b20
1518ab613de9bef130a31c799ef4d1ee18b18238
420661887fe230d7879e25009b85fca4e6808af4534c80e692aff770b9a0e122
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Jun 2023 04:25:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Jun 2023 20:40:14 GMT
Expires: Sun, 04 Jun 2023 20:40:14 GMT
ETag: "1518ab613de9bef130a31c799ef4d1ee18b18238"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
192.124.249.22 1.8 kB IP 192.124.249.22:0
Hash 5a949527ca3405d4bdfa527cab318b2a
1e56c50b0d2b0cfeb0f975b6a37ab5fd9d91b447
2e454aece581b770ddec76e46bf7b7dde7f123d7801e10bbdf065c43023eb622
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Jun 2023 04:25:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Jun 2023 22:09:56 GMT
Expires: Sun, 04 Jun 2023 22:09:56 GMT
ETag: "1e56c50b0d2b0cfeb0f975b6a37ab5fd9d91b447"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
powerad.ai/detect-aau?ch=1
54.84.116.44200 OK 2 B URL GET HTTP/2 powerad.ai/detect-aau?ch=1
IP 54.84.116.44:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subjectpowerad.ai
FingerprintCB:FD:69:91:A1:99:A8:AC:D7:F5:7F:D1:49:D3:D4:59:13:03:62:BE
ValidityMon, 29 May 2023 00:00:00 GMT - Wed, 26 Jun 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /detect-aau?ch=1 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.zpaste.net/
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
X-Firefox-Spdy: h2
powerad.ai/detect-aau?ch=2
54.84.116.44200 OK 2 B URL GET HTTP/2 powerad.ai/detect-aau?ch=2
IP 54.84.116.44:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subjectpowerad.ai
FingerprintCB:FD:69:91:A1:99:A8:AC:D7:F5:7F:D1:49:D3:D4:59:13:03:62:BE
ValidityMon, 29 May 2023 00:00:00 GMT - Wed, 26 Jun 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /detect-aau?ch=2 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.zpaste.net/
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.22 1.8 kB IP 192.124.249.22:0
Hash 5a949527ca3405d4bdfa527cab318b2a
1e56c50b0d2b0cfeb0f975b6a37ab5fd9d91b447
2e454aece581b770ddec76e46bf7b7dde7f123d7801e10bbdf065c43023eb622
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Jun 2023 04:25:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Jun 2023 22:09:56 GMT
Expires: Sun, 04 Jun 2023 22:09:56 GMT
ETag: "1e56c50b0d2b0cfeb0f975b6a37ab5fd9d91b447"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
reporting.powerad.ai/
54.234.151.247200 OK 2 B IP 54.234.151.247:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoDaddy.com, Inc.
Subject*.powerad.ai
FingerprintA4:A1:58:25:D9:DB:41:88:A8:B2:37:58:CD:2A:30:D5:A1:E2:AF:4D
ValidityWed, 14 Sep 2022 15:40:11 GMT - Thu, 12 Oct 2023 20:29:50 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST / HTTP/1.1
Host: reporting.powerad.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 254
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.14.101 472 B IP 104.18.14.101:0
Hash 747a061d7a251456fbd456016aa14ad8
4303cdb4cbc65684710213ae1932ab9017c34dd5
6d76fd4e8d6cafc133183a379e53e00e3ec4790efd2668190998ffbdf6b99442
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 31 May 2023 20:45:25 GMT
Expires: Wed, 07 Jun 2023 20:45:24 GMT
Etag: "4303cdb4cbc65684710213ae1932ab9017c34dd5"
Cache-Control: max-age=318711,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d1d69ac3a390b4d-OSL
ocsp.r2m02.amazontrust.com/
54.230.80.227 471 B URL ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash a444271a7528ec446c673216a1a4751f
2cc5875de14ac818340439bb0efa84913b9df3d5
f155a1d751947264f2ffda17647b3c9c18c63a05cde236d0bfb1a581fdf37a27
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 04 Jun 2023 04:25:35 GMT
Last-Modified: Sun, 04 Jun 2023 03:38:19 GMT
Server: ECAcc (nya/789D)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Nzl4TxY7gtOhRlZH_FRur55GQyVMarRb7Af7W69jx8qG718UzjeXAA==
Age: 2836
6.adsco.re/
104.17.167.186200 OK 0 B IP 104.17.167.186:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://www.zpaste.net
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69acebcdb529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pixel.zprk.io/v5/pixeljs/Hc6PdfQeAi.js?dne=1
107.23.102.142200 OK 2.8 kB URL GET HTTP/2 pixel.zprk.io/v5/pixeljs/Hc6PdfQeAi.js?dne=1
IP 107.23.102.142:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subject*.zprk.io
Fingerprint12:08:08:CA:FF:26:EC:1D:49:7E:8A:51:E2:A5:B9:21:32:0A:3D:11
ValidityWed, 22 Feb 2023 00:00:00 GMT - Fri, 17 Nov 2023 23:59:59 GMT
File type C source, ASCII text, with very long lines (2658)
Hash bf5da1c2137a9f95540c5c865952c04b
d07a569ff37d68467841990cad5d2a99e1a2e37d
8e521ebeb6ce59914c54f532b1577efd671f4b02bb3c331e01b4a7e79a02cfea
GET /v5/pixeljs/Hc6PdfQeAi.js?dne=1 HTTP/1.1
Host: pixel.zprk.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: text/plain;charset=UTF-8
content-length: 2753
access-control-allow-methods: POST, GET, DELETE, PUT
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Firefox-Spdy: h2
4.adsco.re/
162.252.214.5200 OK 62 B IP 162.252.214.5:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://www.zpaste.net
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
o8aqktbbxcgz.l4.adsco.re/
185.200.118.90200 OK 0 B URL POST HTTP/1.1 o8aqktbbxcgz.l4.adsco.re/
IP 185.200.118.90:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint1B:F0:02:39:A1:D2:36:5A:2D:C1:87:EE:64:C2:35:E9:DB:95:DA:BF
ValidityFri, 19 May 2023 09:12:40 GMT - Thu, 17 Aug 2023 09:12:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: o8aqktbbxcgz.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:35 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Tue, 31 Jul 2018 22:16:15 GMT
Connection: close
ETag: "5b60dfaf-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
www.zpaste.net/favicon.ico
104.21.91.46200 OK 42 kB URL GET HTTP/3 www.zpaste.net/favicon.ico
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type MS Windows icon resource - 1 icon, 256x-19, 32 bits/pixel\012- data
Hash e0453c2fc21edc881960c4ea85d8b26a
8111b9139088bad5905b08f777aa949841d45cda
18cff84ef74f92f96ba6f9b40d95365555ed072353fe8cb3f5551b9d7b578fea
GET /favicon.ico HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9; a=ocMiLZR4UPhLedN3oZTgNLKHvUifZTHz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: image/x-icon
last-modified: Sat, 14 Dec 2019 07:32:58 GMT
x-served-by: www.zpaste.net
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cLA0NJYBuEsLCGtGiat1DreOg5rpDja9AbMF8gCj3si01vBW8zT1Jd%2F%2FopGmBvS0qTs000La%2F%2BqpJmkO9w1LeTTkGtJ3zBHN99MyGxtR1%2BkKZQC06bfw5BW7JBTmTM4efw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69ae6d2b0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash c8c4fd34484b10881179e1a092434fd9
b37e3b04da5ba68bf533fcff188ac29b8eb27b3e
e5ccf7ef803972b97b8bff04fcab8af38c84d5a832ab096c7fd5ace5e56bf92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 04:25:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
216.58.211.3200 OK 166 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
IP 216.58.211.3:443
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=sNQO7xVld1CuA2hfFHvkpVL-&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (749)
Size 166 kB (166186 bytes)
Hash ee07ba65373413be83ec0d45887c2a44
13646acedb5d781fed2599c46634b4e58b8217db
d946e8f3fb4fe90a5ae3027b91a76703106e2c5c1d762fc3fc230895db7b6048
GET /recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 13:34:38 GMT
expires: Fri, 31 May 2024 13:34:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 30 May 2023 00:01:16 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 226257
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.zpaste.net/zpaste/apple-touch-icon-114x107.png
104.21.91.46200 OK 15 kB URL GET HTTP/3 www.zpaste.net/zpaste/apple-touch-icon-114x107.png
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type PNG image data, 114 x 107, 8-bit/color RGBA, non-interlaced\012- data
Hash d1934f96612a020c53ebc0381095baa5
eae1fc75b5c37f0a2a7028f0738d0c472d1ac4d1
5df3f519dda1b520523149057c113cfbe7ea04a171546ef6c544d41bc009b567
GET /zpaste/apple-touch-icon-114x107.png HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9; a=ocMiLZR4UPhLedN3oZTgNLKHvUifZTHz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: image/png
content-length: 15445
last-modified: Sat, 14 Dec 2019 07:33:26 GMT
x-served-by: www.zpaste.net
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fABp4eojJCJXkxjoBf6bZS8zJqQR%2FzvB6gmzJbjKzCPmSI0QVVR%2BlDZuhq1%2FDxg43OITg2Vq4rZXhwxfb9ajI9QJ0Ers44CcHeZs%2F2SRHGvTQwYW9hv%2B5ncqYjBi0FSoqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69ae6d2a0b65-OSL
alt-svc: h3=":443"; ma=86400
a.ad.gt/api/v1/u/matches/251?url=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc&ref=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc%3F__cf_chl_tk%3DcoUtyaI8KH5ypAliwPxSn4mdIt4oVOt6BuQMxG7oS8Q-1685852731-0-gaNycGzNCOU
172.67.23.234200 OK 3.8 kB URL GET HTTP/2 a.ad.gt/api/v1/u/matches/251?url=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc&ref=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc%3F__cf_chl_tk%3DcoUtyaI8KH5ypAliwPxSn4mdIt4oVOt6BuQMxG7oS8Q-1685852731-0-gaNycGzNCOU
IP 172.67.23.234:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintAA:F3:67:68:3B:FD:6C:D3:AA:F1:97:95:D4:EC:05:B2:2B:E1:5C:07
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type C source, ASCII text, with very long lines (2298)
Hash a8653c62a0e50f36d1d1b39c409d1a53
b5d79b9c636b91ada3e88089b7a00ac1c4f9ab60
7331a06e982a4f7ab082dc6cdf454265a1defe5b5e7bc990b87ffb7792916f94
GET /api/v1/u/matches/251?url=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc&ref=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc%3F__cf_chl_tk%3DcoUtyaI8KH5ypAliwPxSn4mdIt4oVOt6BuQMxG7oS8Q-1685852731-0-gaNycGzNCOU HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: application/javascript
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Sun, 04 Jun 2023 04:25:35 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69aaca8bb529-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash c8c4fd34484b10881179e1a092434fd9
b37e3b04da5ba68bf533fcff188ac29b8eb27b3e
e5ccf7ef803972b97b8bff04fcab8af38c84d5a832ab096c7fd5ace5e56bf92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 04:25:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o8aqktbbxcgz.n4.adsco.re/
38.132.109.186200 OK 0 B URL POST HTTP/1.1 o8aqktbbxcgz.n4.adsco.re/
IP 38.132.109.186:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
FingerprintFA:01:F0:E9:7F:73:48:B7:99:FA:FD:37:40:4C:D7:85:48:7D:5E:80
ValidityFri, 19 May 2023 09:12:38 GMT - Thu, 17 Aug 2023 09:12:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: o8aqktbbxcgz.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:35 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
www.google.com/recaptcha/api2/anchor?ar=1&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J&co=aHR0cHM6Ly93d3cuenBhc3RlLm5ldDo0NDM.&hl=en&type=image&v=sNQO7xVld1CuA2hfFHvkpVL-&theme=dark&size=normal&cb=qhzrzbxhmeli
142.250.74.132200 OK 29 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J&co=aHR0cHM6Ly93d3cuenBhc3RlLm5ldDo0NDM.&hl=en&type=image&v=sNQO7xVld1CuA2hfFHvkpVL-&theme=dark&size=normal&cb=qhzrzbxhmeli
IP 142.250.74.132:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (44002)
Hash 97284d8958361744cdd384889a03d35d
8ae5c22b70fcd3ba8dbaf111162fd7da888af2f8
aa5aa04832628ad57fece6052d9327b3d684efd2f3adb6c587b165b8da58a3a5
GET /recaptcha/api2/anchor?ar=1&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J&co=aHR0cHM6Ly93d3cuenBhc3RlLm5ldDo0NDM.&hl=en&type=image&v=sNQO7xVld1CuA2hfFHvkpVL-&theme=dark&size=normal&cb=qhzrzbxhmeli HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 04 Jun 2023 04:25:36 GMT
content-security-policy: script-src 'nonce-XanY3MGRDU_-27Qvi8EtAw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 28790
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
gdpr-wrapper.privacymanager.io/gdpr/df5c168c-c261-4717-85f9-fcf07421ab57/vendor-list.json
54.230.111.47200 OK 0 B URL OPTIONS HTTP/2 gdpr-wrapper.privacymanager.io/gdpr/df5c168c-c261-4717-85f9-fcf07421ab57/vendor-list.json
IP 54.230.111.47:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subject*.privacymanager.io
Fingerprint6F:BE:0F:FD:50:F2:3F:93:0C:1B:C5:9D:E8:74:39:4B:15:D6:0F:E0
ValidityWed, 22 Feb 2023 00:00:00 GMT - Sun, 24 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /gdpr/df5c168c-c261-4717-85f9-fcf07421ab57/vendor-list.json HTTP/1.1
Host: gdpr-wrapper.privacymanager.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.zpaste.net/
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 0
date: Sat, 03 Jun 2023 14:48:03 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 58xrPOJa2qt8VpKrGuTJQ_LuXs6nsRUM4S7j87kX--EjHpeGZelUaw==
age: 49054
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/styles__ltr.css
216.58.211.3200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/styles__ltr.css
IP 216.58.211.3:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J&co=aHR0cHM6Ly93d3cuenBhc3RlLm5ldDo0NDM.&hl=en&type=image&v=sNQO7xVld1CuA2hfFHvkpVL-&theme=dark&size=normal&cb=qhzrzbxhmeli
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (56403), with no line terminators
Hash 83f90c5a4c20afb44429fa346fbadc10
7c278ec721d3880fbafaadeba9ee80bdf294b014
952833e41ba7a4b64c31a2d7b07dde81bf5bbacf5cbb967821cfe459d0c4a0d8
GET /recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24605
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Jun 2023 05:10:26 GMT
expires: Sat, 01 Jun 2024 05:10:26 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 30 May 2023 00:01:16 GMT
content-type: text/css
vary: Accept-Encoding
age: 170110
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
216.58.211.3200 OK 166 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
IP 216.58.211.3:443
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=sNQO7xVld1CuA2hfFHvkpVL-&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (749)
Size 166 kB (166186 bytes)
Hash ee07ba65373413be83ec0d45887c2a44
13646acedb5d781fed2599c46634b4e58b8217db
d946e8f3fb4fe90a5ae3027b91a76703106e2c5c1d762fc3fc230895db7b6048
GET /recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 13:34:38 GMT
expires: Fri, 31 May 2024 13:34:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 30 May 2023 00:01:16 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 226258
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
geo.privacymanager.io/
54.230.111.123200 OK 0 B IP 54.230.111.123:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subject*.privacymanager.io
Fingerprint6F:BE:0F:FD:50:F2:3F:93:0C:1B:C5:9D:E8:74:39:4B:15:D6:0F:E0
ValidityWed, 22 Feb 2023 00:00:00 GMT - Sun, 24 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: geo.privacymanager.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.zpaste.net/
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
content-length: 0
date: Sun, 04 Jun 2023 04:25:36 GMT
x-amzn-requestid: b93a7252-5ce5-47ef-a6f8-fbef58ba59d0
access-control-allow-origin: *
access-control-allow-headers: Content-Type,Authorization,X-Amz-Date,X-Api-Key,X-Amz-Security-Token
x-amz-apigw-id: F-fKIFbxjoEF5KA=
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront), 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-P1, OSL50-P1
x-amz-cf-id: zaSnionh6Dt1gZTLKfBYPYT3oInH-M7NEeXvl5PGY_82BOit-QS1CA==
X-Firefox-Spdy: h2
gdpr-wrapper.privacymanager.io/gdpr/df5c168c-c261-4717-85f9-fcf07421ab57/vendor-list.json
54.230.111.47200 OK 5.3 kB URL OPTIONS HTTP/2 gdpr-wrapper.privacymanager.io/gdpr/df5c168c-c261-4717-85f9-fcf07421ab57/vendor-list.json
IP 54.230.111.47:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subject*.privacymanager.io
Fingerprint6F:BE:0F:FD:50:F2:3F:93:0C:1B:C5:9D:E8:74:39:4B:15:D6:0F:E0
ValidityWed, 22 Feb 2023 00:00:00 GMT - Sun, 24 Sep 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 34738afd2ba7ff91c297915ef9cfc54f
1da4e63b96468044de228dacd3aeb551204c5f48
72afe2dfb0ee696e8d50fd620d967df89e137a90e0313df589c6e51723d44479
GET /gdpr/df5c168c-c261-4717-85f9-fcf07421ab57/vendor-list.json HTTP/1.1
Host: gdpr-wrapper.privacymanager.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.zpaste.net/
Content-Type: application/json
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: COMPLETED
last-modified: Tue, 23 May 2023 14:28:20 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: TULX6BH_whsyw3oSh4WTOADL9VezBNIa
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Jun 2023 04:25:36 GMT
cache-control: must-revalidate,public,max-age=3600
etag: W/"751cbca244eaff3ce2b0f7687eff8e7f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Isobqm-yGTN--B11tzvvhIxakUd_DRvKcGzo-IBGt-tB0DzjrwYWLg==
age: 1875
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
216.58.211.3200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP 216.58.211.3:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J&co=aHR0cHM6Ly93d3cuenBhc3RlLm5ldDo0NDM.&hl=en&type=image&v=sNQO7xVld1CuA2hfFHvkpVL-&theme=dark&size=normal&cb=qhzrzbxhmeli
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 May 2023 21:48:58 GMT
expires: Mon, 05 Jun 2023 21:48:58 GMT
cache-control: public, max-age=604800
age: 455798
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
p.cpx.to/p/12967/px.js
52.48.155.118200 OK 1.8 kB IP 52.48.155.118:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerSectigo Limited
Subjectp.cpx.to
FingerprintB7:D4:04:01:07:C8:6E:F6:F4:A7:B7:F7:0A:5D:BE:2E:A4:E2:2D:D7
ValidityThu, 12 Jan 2023 00:00:00 GMT - Sat, 13 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (4102), with no line terminators
Hash d72cb9458d7a3359feeb2d70fe079105
471134fcb7a3475270eb241610c220fd338718f2
77458566af6c163cc924a5cf2ecaf0b46ce943d08a9c07ca941656b9c81faae1
GET /p/12967/px.js HTTP/1.1
Host: p.cpx.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
cache-control: max-age=86400, public
X-Firefox-Spdy: h2
o8aqktbbxcgz.s4.adsco.re/
185.200.116.90200 OK 0 B URL POST HTTP/1.1 o8aqktbbxcgz.s4.adsco.re/
IP 185.200.116.90:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subject*.s4.adsco.re
FingerprintFA:D8:D2:DA:DA:7E:E0:73:72:92:20:9C:1D:6D:A4:19:55:AC:F9:6F
ValidityFri, 19 May 2023 09:12:40 GMT - Thu, 17 Aug 2023 09:12:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: o8aqktbbxcgz.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:36 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J&co=aHR0cHM6Ly93d3cuenBhc3RlLm5ldDo0NDM.&hl=en&type=image&v=sNQO7xVld1CuA2hfFHvkpVL-&theme=dark&size=normal&cb=qhzrzbxhmeli
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 May 2023 17:31:32 GMT
expires: Wed, 29 May 2024 17:31:32 GMT
cache-control: public, max-age=31536000
age: 384844
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
216.58.211.3200 OK 166 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
IP 216.58.211.3:443
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=sNQO7xVld1CuA2hfFHvkpVL-&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (749)
Size 166 kB (166186 bytes)
Hash ee07ba65373413be83ec0d45887c2a44
13646acedb5d781fed2599c46634b4e58b8217db
d946e8f3fb4fe90a5ae3027b91a76703106e2c5c1d762fc3fc230895db7b6048
GET /recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 13:34:38 GMT
expires: Fri, 31 May 2024 13:34:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 30 May 2023 00:01:16 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 226258
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.sectigo.com/
104.18.14.101 471 B IP 104.18.14.101:0
Hash b8429c66787f2911a2ab5bb2e937651d
5f15ba96182a4455706a7fece9288eb57f749c14
5872b291edf12ebc1fc127680e0bac5525b6023f24611166349cf488100ddf81
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Jun 2023 19:14:50 GMT
Expires: Thu, 08 Jun 2023 19:14:49 GMT
Etag: "5f15ba96182a4455706a7fece9288eb57f749c14"
Cache-Control: max-age=399856,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d1d69b8de400b4d-OSL
s.cpx.to/fire.js?pid=12967&ref=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc%3F__cf_chl_tk%3DcoUtyaI8KH5ypAliwPxSn4mdIt4oVOt6BuQMxG7oS8Q-1685852731-0-gaNycGzNCOU&url=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc&hn_ver=57&fid=5cdbfc2d-9850-4635-bc52-412ccb76118a
54.76.153.6200 OK 52 B URL GET HTTP/1.1 s.cpx.to/fire.js?pid=12967&ref=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc%3F__cf_chl_tk%3DcoUtyaI8KH5ypAliwPxSn4mdIt4oVOt6BuQMxG7oS8Q-1685852731-0-gaNycGzNCOU&url=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc&hn_ver=57&fid=5cdbfc2d-9850-4635-bc52-412ccb76118a
IP 54.76.153.6:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerSectigo Limited
Subjects.cpx.to
Fingerprint79:72:B9:F5:96:66:CE:FC:39:B7:2E:2E:73:AF:7C:F7:3C:07:3D:80
ValidityThu, 12 Jan 2023 00:00:00 GMT - Wed, 17 Jan 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 4e714f09b7f450a56a5e209ee0216678
b19c2e495cfa23c4576bff8b9c303350e7d08122
44186b3e1d7fc7e4c38cccb003bc13e1757665660406b166a6b64771df8874ca
GET /fire.js?pid=12967&ref=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc%3F__cf_chl_tk%3DcoUtyaI8KH5ypAliwPxSn4mdIt4oVOt6BuQMxG7oS8Q-1685852731-0-gaNycGzNCOU&url=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc&hn_ver=57&fid=5cdbfc2d-9850-4635-bc52-412ccb76118a HTTP/1.1
Host: s.cpx.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:37 GMT
Content-Length: 52
Connection: keep-alive
expires: Sun, 04 Jun 2023 04:25:37 GMT
vary: Origin
access-control-allow-origin: https://www.zpaste.net
access-control-allow-credentials: true
set-cookie: cpSess=355112cc15aeb2aa; Expires=Mon, 03 Jun 2024 04:25:37 GMT; Domain=.cpx.to; Path=/; Secure; HttpOnly; SameSite=None
p3p: CP="NOI DEV ADM"
www.google.com/recaptcha/api2/bframe?hl=en&v=sNQO7xVld1CuA2hfFHvkpVL-&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J
142.250.74.132200 OK 1.2 kB URL GET HTTP/3 www.google.com/recaptcha/api2/bframe?hl=en&v=sNQO7xVld1CuA2hfFHvkpVL-&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J
IP 142.250.74.132:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 654fec98c91e865516ae8cf62d206637
8510e975caa8e0f6eb0718b738e661f1700be322
33e39f6c4d8806dc9e69858ecc32aa239a74f2d7e50554f155aafcb2bce6b58e
GET /recaptcha/api2/bframe?hl=en&v=sNQO7xVld1CuA2hfFHvkpVL-&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 04 Jun 2023 04:25:37 GMT
content-security-policy: script-src 'nonce-qoiBiJ7GS3Hbggdq5lsI2w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1157
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/styles__ltr.css
216.58.211.3200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/styles__ltr.css
IP 216.58.211.3:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J&co=aHR0cHM6Ly93d3cuenBhc3RlLm5ldDo0NDM.&hl=en&type=image&v=sNQO7xVld1CuA2hfFHvkpVL-&theme=dark&size=normal&cb=qhzrzbxhmeli
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (56403), with no line terminators
Hash 83f90c5a4c20afb44429fa346fbadc10
7c278ec721d3880fbafaadeba9ee80bdf294b014
952833e41ba7a4b64c31a2d7b07dde81bf5bbacf5cbb967821cfe459d0c4a0d8
GET /recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24605
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Jun 2023 05:10:26 GMT
expires: Sat, 01 Jun 2024 05:10:26 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 30 May 2023 00:01:16 GMT
content-type: text/css
vary: Accept-Encoding
age: 170111
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
adsco.re/p
162.252.214.5200 OK 524 B IP 162.252.214.5:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
File type ASCII text, with very long lines (636), with no line terminators
Hash 0ef282b3c7c156eccb679fa662ca246c
7c9680035f0e8a33947ccf37ccb6bf4ac9fd4a71
79f8ef61cd5c6ad5847ead64967b8332eb46a7469a3828c1a8d62411aa3c9273
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2032
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Critical-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Access-Control-Allow-Origin: https://www.zpaste.net
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
216.58.211.3200 OK 166 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
IP 216.58.211.3:443
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=sNQO7xVld1CuA2hfFHvkpVL-&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (749)
Size 166 kB (166186 bytes)
Hash ee07ba65373413be83ec0d45887c2a44
13646acedb5d781fed2599c46634b4e58b8217db
d946e8f3fb4fe90a5ae3027b91a76703106e2c5c1d762fc3fc230895db7b6048
GET /recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 13:34:38 GMT
expires: Fri, 31 May 2024 13:34:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 30 May 2023 00:01:16 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 226259
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
gdpr-web-dau-prod.privacymanager.io/kinesis/streams/tcf-web-daily-active-users-prod/records
54.230.111.68200 OK 0 B URL OPTIONS HTTP/2 gdpr-web-dau-prod.privacymanager.io/kinesis/streams/tcf-web-daily-active-users-prod/records
IP 54.230.111.68:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subject*.privacymanager.io
Fingerprint6F:BE:0F:FD:50:F2:3F:93:0C:1B:C5:9D:E8:74:39:4B:15:D6:0F:E0
ValidityWed, 22 Feb 2023 00:00:00 GMT - Sun, 24 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /kinesis/streams/tcf-web-daily-active-users-prod/records HTTP/1.1
Host: gdpr-web-dau-prod.privacymanager.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.zpaste.net/
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
content-length: 0
date: Sun, 04 Jun 2023 04:25:37 GMT
x-amzn-requestid: a5e6ebd4-2c97-485a-8f01-415da3e10fe0
access-control-allow-origin: *
access-control-allow-headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token
x-amz-apigw-id: F-fKTHWJDoEFuLA=
access-control-allow-methods: GET,OPTIONS,POST
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DqCpJVQ7qxV_agryhqy-M7ZZ-Pa06kDaekj-zLiaJgCCo5X_6tIQjw==
X-Firefox-Spdy: h2
gdpr-web-dau-prod.privacymanager.io/kinesis/streams/tcf-web-daily-active-users-prod/records
54.230.111.68200 OK 110 B URL OPTIONS HTTP/2 gdpr-web-dau-prod.privacymanager.io/kinesis/streams/tcf-web-daily-active-users-prod/records
IP 54.230.111.68:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subject*.privacymanager.io
Fingerprint6F:BE:0F:FD:50:F2:3F:93:0C:1B:C5:9D:E8:74:39:4B:15:D6:0F:E0
ValidityWed, 22 Feb 2023 00:00:00 GMT - Sun, 24 Sep 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a436994a35b46688f80c67c8b5225b3d
81f013e257d64a0c2e11a34cf418d5c4ff5b97bb
978c1903b701c4c89212c3e4d7a61eb50626d074abcc0ee34ac86a3c715382df
POST /kinesis/streams/tcf-web-daily-active-users-prod/records HTTP/1.1
Host: gdpr-web-dau-prod.privacymanager.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.zpaste.net/
Content-Type: application/json
Content-Length: 534
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 110
date: Sun, 04 Jun 2023 04:25:37 GMT
x-amzn-requestid: e10e5787-8c38-4997-892d-2aa52ffe05c5
access-control-allow-origin: *
x-amz-apigw-id: F-fKUG3NjoEF-_w=
x-amzn-trace-id: Root=1-647c1241-48604df9719cf97627a6386d
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _1kXhkr-nyohYvV2aaVA3sPjU14hGt6bk-0rz-XNhaLrH9w-slwHtg==
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.14.101 472 B IP 104.18.14.101:0
Hash 0807f9d07ae34f1a8a6212c8e5f424bd
3e0fb8e0cb65a16a6a16bdd355887944aec9d7a5
d3c647b29ba9b18de78cb4b0c4c998a4393eb25356c085a28085dff7523364a7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:37 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 31 May 2023 18:57:19 GMT
Expires: Wed, 07 Jun 2023 18:57:18 GMT
Etag: "3e0fb8e0cb65a16a6a16bdd355887944aec9d7a5"
Cache-Control: max-age=312200,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d1d69bc3f560b4d-OSL
cdn4ads.com/ksgdqaquhn?_=BQHSAAAAAAAACZUAAo7WDl7u4yqpq9SsPxnaqXxaG3GHs3adkSoEMqMEOMLKRVkfzQyYGbSQr0qfykEUgMHkF7AgEUxaW1LZ63hyoarkPw73YVyCCHnV-isEm1IcZuYnaGv5vVp_mrm7_9hjvdbxCR3ivI5NsRtgdgxSED9K7JjGL2I7YUKe6TD1qG2fPCrbS-sK8ASpi5TSGQk9nX1eU-FamvkKjcE0MlZZ17kTX2XrAioP5aiz169Avnx1C6svsi4FLT0EbdNazMefndTZ1UweIcZC4Qj89AMxiuXUipn3a8aHozeylf5w3YMJC7IsiqE5pkdLdWFjKoskoRlULAs4x457ztAORzJQX2bMbYzAeeTOV-aLWwolAh5puMorbYOqIlfB8Dd_kf5vuEh90nZCZs27F0Atzt1UNFNKFzU95kqqGKCTno5fut5jac11PtbD3-XdCUee04MjzV4yjxLjzYuAV9zfHH5QqjsGhHQkU4vxE2NfpxQ2SaHxdHTLyaVDUOAJrNr60wK4qFzCqGexm6FgCLwziDrGLl_73trNiGGipTzn-LavcJUQeO66U6A1yRkD6m9AxZwlEHKHZLdV5sst9eZlnrXB4V7bkGLla-Uu_fiGtDmp72PP&v=4&bUcDgESo=3975011&uhtsbBUX=&UycKYnNb=0,0&HTbcUfdz=&ILFdeCQm=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc%3F__cf_chl_tk%3DcoUtyaI8KH5ypAliwPxSn4mdIt4oVOt6BuQMxG7oS8Q-1685852731-0-gaNycGzNCOU&s=1280,1024,1,1280,1024,0
216.59.63.128200 OK 984 B URL GET HTTP/2 cdn4ads.com/ksgdqaquhn?_=BQHSAAAAAAAACZUAAo7WDl7u4yqpq9SsPxnaqXxaG3GHs3adkSoEMqMEOMLKRVkfzQyYGbSQr0qfykEUgMHkF7AgEUxaW1LZ63hyoarkPw73YVyCCHnV-isEm1IcZuYnaGv5vVp_mrm7_9hjvdbxCR3ivI5NsRtgdgxSED9K7JjGL2I7YUKe6TD1qG2fPCrbS-sK8ASpi5TSGQk9nX1eU-FamvkKjcE0MlZZ17kTX2XrAioP5aiz169Avnx1C6svsi4FLT0EbdNazMefndTZ1UweIcZC4Qj89AMxiuXUipn3a8aHozeylf5w3YMJC7IsiqE5pkdLdWFjKoskoRlULAs4x457ztAORzJQX2bMbYzAeeTOV-aLWwolAh5puMorbYOqIlfB8Dd_kf5vuEh90nZCZs27F0Atzt1UNFNKFzU95kqqGKCTno5fut5jac11PtbD3-XdCUee04MjzV4yjxLjzYuAV9zfHH5QqjsGhHQkU4vxE2NfpxQ2SaHxdHTLyaVDUOAJrNr60wK4qFzCqGexm6FgCLwziDrGLl_73trNiGGipTzn-LavcJUQeO66U6A1yRkD6m9AxZwlEHKHZLdV5sst9eZlnrXB4V7bkGLla-Uu_fiGtDmp72PP&v=4&bUcDgESo=3975011&uhtsbBUX=&UycKYnNb=0,0&HTbcUfdz=&ILFdeCQm=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc%3F__cf_chl_tk%3DcoUtyaI8KH5ypAliwPxSn4mdIt4oVOt6BuQMxG7oS8Q-1685852731-0-gaNycGzNCOU&s=1280,1024,1,1280,1024,0
IP 216.59.63.128:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerSectigo Limited
Subjectcdn4ads.com
Fingerprint47:A9:E9:84:67:D0:25:EA:B4:E4:29:49:27:FA:5E:A7:D1:09:B6:15
ValidityMon, 18 Jul 2022 00:00:00 GMT - Fri, 18 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (1357), with no line terminators
Hash d8ad1e1ad6396ebe4d1a892c814acbec
3d8b127f310746341c1ab248fd62d476f03f92ae
11b5195294ff396440805e5739da49505216c019dd375df1824ce3eb4810a1f9
GET /ksgdqaquhn?_=BQHSAAAAAAAACZUAAo7WDl7u4yqpq9SsPxnaqXxaG3GHs3adkSoEMqMEOMLKRVkfzQyYGbSQr0qfykEUgMHkF7AgEUxaW1LZ63hyoarkPw73YVyCCHnV-isEm1IcZuYnaGv5vVp_mrm7_9hjvdbxCR3ivI5NsRtgdgxSED9K7JjGL2I7YUKe6TD1qG2fPCrbS-sK8ASpi5TSGQk9nX1eU-FamvkKjcE0MlZZ17kTX2XrAioP5aiz169Avnx1C6svsi4FLT0EbdNazMefndTZ1UweIcZC4Qj89AMxiuXUipn3a8aHozeylf5w3YMJC7IsiqE5pkdLdWFjKoskoRlULAs4x457ztAORzJQX2bMbYzAeeTOV-aLWwolAh5puMorbYOqIlfB8Dd_kf5vuEh90nZCZs27F0Atzt1UNFNKFzU95kqqGKCTno5fut5jac11PtbD3-XdCUee04MjzV4yjxLjzYuAV9zfHH5QqjsGhHQkU4vxE2NfpxQ2SaHxdHTLyaVDUOAJrNr60wK4qFzCqGexm6FgCLwziDrGLl_73trNiGGipTzn-LavcJUQeO66U6A1yRkD6m9AxZwlEHKHZLdV5sst9eZlnrXB4V7bkGLla-Uu_fiGtDmp72PP&v=4&bUcDgESo=3975011&uhtsbBUX=&UycKYnNb=0,0&HTbcUfdz=&ILFdeCQm=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc%3F__cf_chl_tk%3DcoUtyaI8KH5ypAliwPxSn4mdIt4oVOt6BuQMxG7oS8Q-1685852731-0-gaNycGzNCOU&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: cdn4ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
asf: 6
cache-control: private, no-store, no-cache, must-revalidate, no-transform, max-age=0
pragma: no-cache
content-type: application/javascript; charset=utf-8
set-cookie: PP_CV=yes; expires=Sun, 04-Jun-2023 05:25:38 GMT; Max-Age=3600
fraudcheck=a5582839f7b42c28ce3cf6cde17118e0; expires=Tue, 04-Jul-2023 04:25:38 GMT; Max-Age=2592000; path=/; domain=.popads.net
PopAds_CF_Pass=1; expires=Sun, 04-Jun-2023 10:25:38 GMT; Max-Age=21600
link: <https://beauty-lands.com>;rel=preconnect
content-length: 984
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Jun 2023 04:25:38 GMT
X-Firefox-Spdy: h2
reporting.powerad.ai/
54.234.151.247200 OK 2 B IP 54.234.151.247:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoDaddy.com, Inc.
Subject*.powerad.ai
FingerprintA4:A1:58:25:D9:DB:41:88:A8:B2:37:58:CD:2A:30:D5:A1:E2:AF:4D
ValidityWed, 14 Sep 2022 15:40:11 GMT - Thu, 12 Oct 2023 20:29:50 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST / HTTP/1.1
Host: reporting.powerad.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 132
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 04 Jun 2023 04:25:39 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
X-Firefox-Spdy: h2
zplayer.live/Banner-zplayer-live-3.png
0.0.0.0 0 B URL GET zplayer.live/Banner-zplayer-live-3.png
IP 0.0.0.0:0
Requested by https://www.zpaste.net/p/l32hc
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /Banner-zplayer-live-3.png HTTP/1.1
Host: zplayer.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
c.adsco.re/
0.0.0.0 0 B IP 0.0.0.0:0
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Wed, 05 Jul 2023 04:25:34 GMT
etag: W/"cMPvpvd3jDHdlppiuYNttw=="
cf-cache-status: HIT
age: 1583859
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69a9799cb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
gdpr-wrapper.privacymanager.io/gdpr/df5c168c-c261-4717-85f9-fcf07421ab57/gdpr-liveramp.js
54.230.111.47200 OK 423 kB URL GET HTTP/2 gdpr-wrapper.privacymanager.io/gdpr/df5c168c-c261-4717-85f9-fcf07421ab57/gdpr-liveramp.js
IP 54.230.111.47:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subject*.privacymanager.io
Fingerprint6F:BE:0F:FD:50:F2:3F:93:0C:1B:C5:9D:E8:74:39:4B:15:D6:0F:E0
ValidityWed, 22 Feb 2023 00:00:00 GMT - Sun, 24 Sep 2023 23:59:59 GMT
Size 423 kB (423369 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gdpr/df5c168c-c261-4717-85f9-fcf07421ab57/gdpr-liveramp.js HTTP/1.1
Host: gdpr-wrapper.privacymanager.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
x-amz-replication-status: COMPLETED
last-modified: Tue, 09 Mar 2021 20:29:53 GMT
x-amz-server-side-encryption: AES256
content-disposition: attachment; filename="gdpr-liveramp.js"
x-amz-version-id: pfQWcOmsPe9U1HMQ1.GBnJQQ4dqVJP4s
server: AmazonS3
content-encoding: gzip
date: Sat, 03 Jun 2023 14:59:53 GMT
etag: W/"786e91b46d3b94fb061f0d1fcf40ee72"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2Xo_rHhYb3yHD4HaMtN9EvBg8YSQ5vhl6QH72ua7qH_Qlk3BOUulVA==
age: 48343
X-Firefox-Spdy: h2
c.adsco.re/
104.17.166.186200 OK 80 kB IP 104.17.166.186:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (713)
Hash 70c3efa6f7778c31dd969a62b9836db7
42c5ecc44c26f6e121b11711cc72cab20390b128
4dfbe54cd0d883df19cb2fead29e32505dd6ae88afa3f41671c577fecc092b2e
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Wed, 05 Jul 2023 04:25:35 GMT
etag: W/"cMPvpvd3jDHdlppiuYNttw=="
cf-cache-status: HIT
age: 1583860
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69ac6f2d0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.zpaste.net/zpaste/assets/js/main.js
104.21.91.46200 OK 1.3 kB URL GET HTTP/3 www.zpaste.net/zpaste/assets/js/main.js
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type ASCII text, with very long lines (1536), with no line terminators
Hash d1cb96eb931c26aebf66123d374bf803
9364373c7d53a82a827c4b8f6682fe8c3575c585
eae77d7c9853c47c8a27a49759895c58256688215e0f363c1a7f2c96cfa6c9f8
GET /zpaste/assets/js/main.js HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: application/javascript
last-modified: Sat, 14 Dec 2019 07:37:44 GMT
x-served-by: www.zpaste.net
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mpxBVHD2TljRqxfd3zuIZA15pbHknj3ZGR8onbLPcAs4E8iSCVZxdWKbyTBEprVobVfOOEqOczahqZlW0T2hyR8zqoVuSHrWOKgkvL5mfc9tQc5MKbmQnYT8V04PHE1qtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69a529dc0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
beauty-lands.com/favicon.ico
172.67.179.141404 Not Found 0 B URL GET HTTP/2 beauty-lands.com/favicon.ico
IP 172.67.179.141:443
Requested by moz-nullprincipal:{908bb259-7b91-485c-b579-c55d944f02fb}?https://www.zpaste.net
Certificate IssuerGoogle Trust Services LLC
Subjectbeauty-lands.com
Fingerprint18:CD:73:A4:15:58:2E:21:03:30:F0:40:95:8F:33:F7:DD:82:3E:72
ValiditySun, 28 May 2023 13:03:37 GMT - Sat, 26 Aug 2023 13:03:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: beauty-lands.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 04 Jun 2023 04:25:38 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YBaHCRjEuSRuNMusvbr%2FatLa00U5YSIIcJbSfg5EuN2296K2vlKUAU6V33EKEA95pY0q%2BWB1x4qaXU3ZXGwy843WoqaqVRbl6YV9VYs4edz7zjCIVEHlbitK8S9UaTHfG5WH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1d69bedf69b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.zpaste.net/zpaste/assets/css/flag-icon.min.css
104.21.91.46200 OK 33 kB URL GET HTTP/3 www.zpaste.net/zpaste/assets/css/flag-icon.min.css
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type ASCII text, with very long lines (33205), with no line terminators
Hash f486eedf043f0a90f672dc5927e5a967
71d4986c251ae445d7fdcd8843233f310e2e8148
c791da09b2c361a32959d06fa0e7db96a0f0f645189cc81c335d2c6f425f0cb4
GET /zpaste/assets/css/flag-icon.min.css HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: text/css
last-modified: Sat, 14 Dec 2019 07:37:39 GMT
x-served-by: www.zpaste.net
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZaerZdCJNm8I0flviYLwewQ0MGkZsaVruTchFyLw0vEdy%2FTJTL12J6uBj7EXt8zr6XC2dE3IizLmt5Sx0p9gX23BDoocjBgmspAhD%2FUQ9D5%2F9QYK%2BhOlUwuk%2BLnzXmph%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69a529d50b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
powerad.ai/script.js
54.84.116.44200 OK 213 kB IP 54.84.116.44:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subjectpowerad.ai
FingerprintCB:FD:69:91:A1:99:A8:AC:D7:F5:7F:D1:49:D3:D4:59:13:03:62:BE
ValidityMon, 29 May 2023 00:00:00 GMT - Wed, 26 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (56569)
Size 213 kB (212989 bytes)
Hash 046084b55ab113112c8f9bc1dc19493d
8eea04aed6f0f73bbf6aa71da9fc244a90051301
757f461cb8a0b823af394f1d947baf48c57b161d4da906c72c36df9995dadaca
GET /script.js HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
accept-ranges: bytes
cache-control: public, max-age=172800
last-modified: Fri, 02 Jun 2023 13:27:08 GMT
etag: W/"33ffd-1887c4a5f7d"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.zpaste.net/zpaste/assets/uikit/js/uikit-icons-ace.min.js
104.21.91.46200 OK 61 kB URL GET HTTP/3 www.zpaste.net/zpaste/assets/uikit/js/uikit-icons-ace.min.js
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type ASCII text, with very long lines (61052)
Hash 02365a94040880e2bc83f9b4334592a1
efa55fbc3c0ca8731dd84fe1990a6b38d1b938eb
f1b8cc7d7f67c4a1493907cb592c4b2c5e080ab58b8f487e435da010eb840bd3
GET /zpaste/assets/uikit/js/uikit-icons-ace.min.js HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: application/javascript
last-modified: Sat, 14 Dec 2019 07:44:41 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vRr4NVHfhO5l1q1SXArCZYy9fM7QqYQ%2F%2BqrZmUt%2BSHqznWLy4vA8IiIBZAY5JDMwdvRStyipZlcoNIqPMY0l%2FVuqgje77ZxuuucB3rcVLM5I2Po3ZfB5zKTOb%2BYSR9daGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1d69a529d80b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zplayer.live/Banner-zplayer-live-3.png
0.0.0.0 0 B URL GET zplayer.live/Banner-zplayer-live-3.png
IP 0.0.0.0:0
Requested by https://www.zpaste.net/p/l32hc
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /Banner-zplayer-live-3.png HTTP/1.1
Host: zplayer.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
www.zpaste.net/zpaste/assets/js/jquery-3.3.1.min.js
104.21.91.46200 OK 87 kB URL GET HTTP/3 www.zpaste.net/zpaste/assets/js/jquery-3.3.1.min.js
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /zpaste/assets/js/jquery-3.3.1.min.js HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: application/javascript
last-modified: Sat, 14 Dec 2019 07:37:46 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YMdjn0FXZjV6At1edZmVEYWG8YHZyZQxR22DkTKcdXb8Y%2FmLFw85WM%2BexxypBia5r0dbAu%2BszBtjxHQ%2BKNE7GMqW6ckS8FX2dEerVOS4090wEaw%2F0xKzSnZBOYOAgkAsNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1d69a529d90b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ads.vidoomy.com/zpaste.net_20719.js
3.19.54.139200 OK 4.8 kB URL GET HTTP/1.1 ads.vidoomy.com/zpaste.net_20719.js
IP 3.19.54.139:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerSectigo Limited
Subject*.vidoomy.com
Fingerprint2D:FB:20:7C:19:98:67:5C:55:6F:77:46:48:4D:33:98:7F:1C:EC:90
ValidityThu, 01 Sep 2022 00:00:00 GMT - Mon, 02 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (5038), with no line terminators
Hash 9b1eae2f72e87bf7eafca3c6796c9f44
27ccb3172145a3b8ebb2e5a18b4ea3c81366f2f2
dc16795444c270a631ba171cbf5b48e78babdf272358eb9af16175344edde263
GET /zpaste.net_20719.js HTTP/1.1
Host: ads.vidoomy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 04:25:34 GMT
Server: Apache/2.4.54 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
X-Powered-By: PHP/7.0.33
Access-Control-Allow-Origin: *
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 4809
Keep-Alive: timeout=2, max=300
Connection: Keep-Alive
Content-Type: application/javascript
hb.brainlyads.com/prebid.js
23.20.158.212200 OK 611 kB URL GET HTTP/2 hb.brainlyads.com/prebid.js
IP 23.20.158.212:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoDaddy.com, Inc.
Subjecthb.brainlyads.com
FingerprintC5:87:8D:6F:1C:6A:9A:6C:5F:08:60:74:73:6E:2D:97:57:AB:CD:AF
ValidityWed, 23 Nov 2022 17:16:33 GMT - Mon, 25 Dec 2023 17:16:33 GMT
File type ASCII text, with very long lines (64056)
Size 611 kB (610989 bytes)
Hash dfa628bf14237932df32a62098c7b6a7
af61e22d81e27515b2d07f50f8223cc2ddd25153
1ba4bab4c9e4c4802f90b92aaf388e832cce59de7017744b82149e3649b316f1
GET /prebid.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: application/javascript
last-modified: Tue, 16 May 2023 05:52:21 GMT
vary: Accept-Encoding
etag: W/"64631a15-952ad"
expires: Sun, 11 Jun 2023 04:25:35 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
www.zpaste.net/zpaste/assets/css/style.css
104.21.91.46200 OK 13 kB URL GET HTTP/3 www.zpaste.net/zpaste/assets/css/style.css
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type assembler source, ASCII text, with very long lines (5645)
Hash dc117bcec9acc28733f314941381f1ab
5cb44ea12d06a5201e1057f8f5d824d9e6f60d92
eee9ef297ad604f424e5996344312f05352ec974eee68a3a89c4dc73620f15e0
GET /zpaste/assets/css/style.css HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: text/css
last-modified: Sat, 14 Dec 2019 07:37:39 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qtyFBi4YI4nqfQDq%2BV3UokvrTi2U5DdYkPUSyML7iLiDKf7T2Ty2XgAB2AYpJJRd%2F%2B%2FL3PuNJwH02ob35CKeSEw%2BFAhsgCS6NXn53MjgaZfXIe7FJqlI7ynGEtvdeCmX5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1d69a529d60b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zshorte.net/js/full-page.js
172.67.138.73200 OK 2.4 kB URL GET HTTP/2 zshorte.net/js/full-page.js
IP 172.67.138.73:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoogle Trust Services LLC
Subjectzshorte.net
FingerprintBE:C4:6A:B9:8C:68:77:09:DC:D6:E4:36:65:78:95:26:99:DC:F8:A1
ValidityWed, 17 May 2023 04:36:00 GMT - Tue, 15 Aug 2023 04:35:59 GMT
File type C source, ASCII text, with very long lines (2499), with no line terminators
Hash 561d82badbcab4786308cddc91de5221
8704f614f9688cc83c758074b2489f7d6bd8ba5e
b7cac4e2d4ac999972dea1ddc3b872432c19d368cb11ef6118af942eceaac185
GET /js/full-page.js HTTP/1.1
Host: zshorte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
expires: Fri, 30 Jun 2023 06:06:01 GMT
last-modified: Tue, 09 Feb 2021 01:16:07 GMT
vary: Accept-Encoding,User-Agent
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-served-by: zshorte.net
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 339573
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZqOXraZpaDCzkPNfY8CZdjonwT0B6HLKNz9ywsE8m9O%2BTjIRY46falr%2FS6scR%2Bx3iDaO8Vn%2B%2B%2BFA5fKpa953H%2FCzJLzLHy0aQvl0ePn%2Fxce4FwuaRv2AIyssdKmCbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1d69a598deb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.zpaste.net/zpaste/assets/flags/4x3/us.svg
104.21.91.46200 OK 24 kB URL GET HTTP/3 www.zpaste.net/zpaste/assets/flags/4x3/us.svg
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (421)
Hash 6c4096b9f9db7b0acefa55fce97617b2
83fb010737cbf6292a65427091977510dca263c9
c5badafcc554f99b38eee0f4d9f94d38c4bbf70cc25199157c12b9b14474a9ec
GET /zpaste/assets/flags/4x3/us.svg HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/zpaste/assets/css/flag-icon.min.css
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: image/svg+xml
last-modified: Sat, 14 Dec 2019 07:44:35 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BQK8tY6WYgUlF75YFFA3AlIwYYcOej7EUN7%2BE%2FOxC%2Fa%2FkZLPU%2B3E9akkKRtN049S4BQZc%2BonBA4d8oBhYxj7iEMeECV4wVGhJgWbXeJFkYL2cl0kkc%2Fe9M%2FiFAoM2jlTvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d1d69a79a9e0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
hb.brainlyads.com/pbjs_wrapper.v2.0.js
23.20.158.212200 OK 49 kB URL GET HTTP/2 hb.brainlyads.com/pbjs_wrapper.v2.0.js
IP 23.20.158.212:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoDaddy.com, Inc.
Subjecthb.brainlyads.com
FingerprintC5:87:8D:6F:1C:6A:9A:6C:5F:08:60:74:73:6E:2D:97:57:AB:CD:AF
ValidityWed, 23 Nov 2022 17:16:33 GMT - Mon, 25 Dec 2023 17:16:33 GMT
File type ASCII text, with very long lines (49252), with no line terminators
Hash 11556d05dae3016004fd47a7154de907
a376e2a70123a40ee0c23908110d586445879af6
6409de33930e0ec294ed2f7556ca14d7dd681f0829a4a6873dd008b527dedd41
GET /pbjs_wrapper.v2.0.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 04 Jun 2023 04:25:35 GMT
content-type: application/javascript
last-modified: Mon, 29 May 2023 14:37:17 GMT
vary: Accept-Encoding
etag: W/"6474b89d-c064"
expires: Sun, 11 Jun 2023 04:25:35 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
www.zpaste.net/zpaste/assets/uikit/css/uikit.ace.min.css
104.21.91.46200 OK 192 kB URL GET HTTP/3 www.zpaste.net/zpaste/assets/uikit/css/uikit.ace.min.css
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
Size 192 kB (191650 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zpaste/assets/uikit/css/uikit.ace.min.css HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: text/css
last-modified: Sat, 14 Dec 2019 07:44:40 GMT
x-served-by: www.zpaste.net
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7CXfQE1ShesogKNo70jil98DcmRPG4KmgSNuFrjo3e1MDdqMCPHUiwP7xK82u%2BBw3%2BiYgqods2M0AbzbgG89fcIcITo1FltdDr0%2BgyYnGaofvLi9O6QI%2BBNH%2BrVCgA9qug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69a529d30b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
powerad.ai/pubPls/?width=1280&url=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc
54.84.116.44200 OK 42 kB URL GET HTTP/2 powerad.ai/pubPls/?width=1280&url=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc
IP 54.84.116.44:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subjectpowerad.ai
FingerprintCB:FD:69:91:A1:99:A8:AC:D7:F5:7F:D1:49:D3:D4:59:13:03:62:BE
ValidityMon, 29 May 2023 00:00:00 GMT - Wed, 26 Jun 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (41456), with no line terminators
Hash 22724419304d166c6160a8cb218492e2
e8abbc57f779c4b443b97cb6dccb969efc5c3adf
f01c4c513beb87a97cbb9a04f4cd5755cb73dff4273bd29ad17d36264ba9710a
GET /pubPls/?width=1280&url=https%3A%2F%2Fwww.zpaste.net%2Fp%2Fl32hc HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: https://www.zpaste.net
access-control-allow-headers: *
set-cookie: 12331dcr-g=1; Path=/; Secure; SameSite=None
12593dcr-g=1; Path=/; Secure; SameSite=None
12594dcr-g=1; Path=/; Secure; SameSite=None
12595dcr-g=1; Path=/; Secure; SameSite=None
12940dcr-g=1; Path=/; Secure; SameSite=None
13127dcr-g=1; Path=/; Secure; SameSite=None
etag: W/"a1f0-6Ku8V/d5xLRDuXy23MuWnvxcOt8"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.cdn4ads.com/js.cookie.min.js
185.76.9.15200 OK 33 kB URL GET HTTP/2 www.cdn4ads.com/js.cookie.min.js
IP 185.76.9.15:443
ASN #60068 Datacamp Limited
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subject1037973644.rsc.cdn77.org
FingerprintD1:21:7E:19:72:F5:36:70:80:97:85:94:0D:45:71:59:EC:10:7D:EA
ValidityMon, 15 May 2023 10:47:31 GMT - Sun, 13 Aug 2023 10:47:30 GMT
File type HTML document, ASCII text, with very long lines (1568)
Hash c747bd2478a374cd4442d39dc2411e9b
8636ccb9defd9ef92ef316b617fb9286d6a4ff3c
f99e4cde406b8a45f11c566df042df48952d9c3da730c76f054233f85b3af142
GET /js.cookie.min.js HTTP/1.1
Host: www.cdn4ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: application/x-javascript
vary: Accept-Encoding
alt-svc: quic="185.76.9.13:443"; ma=2592000; v="44,43,39"
expires: Fri, 09 Jun 2023 17:47:23 GMT
access-control-allow-origin: *
link: <https://cdn4ads.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
server: CDN77-Turbo
x-77-nzt: AblMCQ0nfujvE+cBAA
x-77-nzt-ray: c0a4cc284793bed93e127c6428252f2a
x-accel-expires: @1686332843
x-accel-date: 1685728043
x-cache: HIT
x-age: 124691
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hb.brainlyads.com/json-parts/?unit_ids=3380,3382&ver=2.0&pageId=1648471642
23.20.158.212200 OK 7.5 kB URL GET HTTP/2 hb.brainlyads.com/json-parts/?unit_ids=3380,3382&ver=2.0&pageId=1648471642
IP 23.20.158.212:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerGoDaddy.com, Inc.
Subjecthb.brainlyads.com
FingerprintC5:87:8D:6F:1C:6A:9A:6C:5F:08:60:74:73:6E:2D:97:57:AB:CD:AF
ValidityWed, 23 Nov 2022 17:16:33 GMT - Mon, 25 Dec 2023 17:16:33 GMT
File type HTML document text\012- troff or preprocessor input, ASCII text, with very long lines (9214), with no line terminators
Hash 2138b60652f7cc7ba55a975d3a1c58c8
ab155e5e8e36a34d2536338bae96a5c85e481a49
e4ef53cecaf0a75a1ab1d94af85a6894881b200e55c5b0430140bb0a1d430de7
GET /json-parts/?unit_ids=3380,3382&ver=2.0&pageId=1648471642 HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.zpaste.net/
Origin: https://www.zpaste.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 04 Jun 2023 04:25:37 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"1d40-/s8cE8Uu4wTUYRncfaxCGHMa38g"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
www.zpaste.net/zpaste/assets/uikit/js/uikit.min.js
104.21.91.46200 OK 135 kB URL GET HTTP/3 www.zpaste.net/zpaste/assets/uikit/js/uikit.min.js
IP 104.21.91.46:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerLet's Encrypt
Subjectzpaste.net
Fingerprint49:EF:75:0F:C6:E6:30:97:9A:02:B7:F1:64:0D:D1:00:1C:F1:15:6E
ValiditySun, 16 Apr 2023 23:38:15 GMT - Sat, 15 Jul 2023 23:38:14 GMT
File type ASCII text, with very long lines (65449)
Size 135 kB (135055 bytes)
Hash 02c7fc17f10d5253d39b1d325dadcc8b
8ed2c9971f169503b04e3a43d72706c424f7fe89
b465d1ad1bb22d0c3e378f18aa8025134712bda9c0a3a7ff813883699cb806d4
GET /zpaste/assets/uikit/js/uikit.min.js HTTP/1.1
Host: www.zpaste.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/p/l32hc
Cookie: cf_chl_2=ad051010fe4e8db; cf_clearance=sK6vxTpWBqETWYskpY4qxGebPfuf.YIxXWLBwGDCWI4-1685852731-0-160; XSRF-TOKEN=eyJpdiI6IlRnNnprWFN3ZFwvK1BSbzJDRXBtRllnPT0iLCJ2YWx1ZSI6IjVCZVR6cnlPM1pxMGpsM3c3RytoXC9yOFZVa2cxTHo1VDFRZytBM3VJSFdWYU9pc2d0WnE2bTZnT1NQZHc2RWprSkRyaVlpdUV3b2FnaHVJdWk0NE5NZz09IiwibWFjIjoiOWYzYjc1NjQ2OTczY2NjNmY1MWY3YThjN2VhZDMxZTFjNTk5MzY1NDhiMmYwOTBhNDVkNTU1OTYwYTVkYTkwZiJ9; zpastenet_session=eyJpdiI6Ink1clZEQVVOSkJQc0xIMTVJVVJqZ2c9PSIsInZhbHVlIjoicWtGOHdIWmFuOGtMY0Jwam9FRmJVM0tpbWxqNW1Mb2hnZENLUDJacG9oMXdUcjVRR0p3RlBhS2o0ZXY3QVNZTzNvXC9MM0V1djNTM3daYW9RY29cL3dNQT09IiwibWFjIjoiZTI1MzYwY2RjNzI2NDEwYjVlZDRmNjUwYmZlNjU3Zjg0OTkzNTdjNDM5M2YxZTQ1OTg2MTZmNzM5NGFmODg3YiJ9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 04:25:34 GMT
content-type: application/javascript
last-modified: Sat, 14 Dec 2019 07:44:42 GMT
x-served-by: www.zpaste.net
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XkGoHu7p5fYmaqYMTIJ5Xvym8fowEN7PtoAeQjYuMNs3RfEIhHZilflw90gF3otMq8s%2F6qO1H8Q6IR2dkt%2BDOcIuRylAyMvcou6l4CSMcdLZ3Q5YxD1MmqEzUH6qWlEv%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d1d69a529d70b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gdpr.privacymanager.io/1/gdpr.bundle.js
108.156.22.103200 OK 140 kB URL GET HTTP/2 gdpr.privacymanager.io/1/gdpr.bundle.js
IP 108.156.22.103:443
Requested by https://www.zpaste.net/p/l32hc
Certificate IssuerAmazon
Subject*.privacymanager.io
Fingerprint6F:BE:0F:FD:50:F2:3F:93:0C:1B:C5:9D:E8:74:39:4B:15:D6:0F:E0
ValidityWed, 22 Feb 2023 00:00:00 GMT - Sun, 24 Sep 2023 23:59:59 GMT
Size 140 kB (139861 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/gdpr.bundle.js HTTP/1.1
Host: gdpr.privacymanager.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zpaste.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Tue, 13 Dec 2022 14:12:22 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: 15e30ec2343907af9e73c4ae4b20d96db09284d960fee192152842d847834f33
x-amz-version-id: .aIxivM7rGowlXpIs.nDhNNx_oqULSNs
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:eu-west-1:469675294282:build/TCFBuild-prod:259491b0-bc03-4aa9-a005-4d0cf17fa283
x-amz-meta-codebuild-content-md5: 8ab401cc35abf1a1358865d8d3108c96
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Jun 2023 04:23:47 GMT
cache-control: must-revalidate,public,max-age=3600
etag: W/"7f78c045d3653619b1fa234098f78966"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b71ee3139663184bee1555c303dce71e.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P1
x-amz-cf-id: -saCSZ6D_tpcdylAyT9S5LTlWgAw51MxW4KuZAvQYzjq47y4t23UUA==
age: 116
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/webworker.js?hl=en&v=sNQO7xVld1CuA2hfFHvkpVL-
142.250.74.132200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=en&v=sNQO7xVld1CuA2hfFHvkpVL-
IP 142.250.74.132:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J&co=aHR0cHM6Ly93d3cuenBhc3RlLm5ldDo0NDM.&hl=en&type=image&v=sNQO7xVld1CuA2hfFHvkpVL-&theme=dark&size=normal&cb=qhzrzbxhmeli
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with no line terminators
Hash 28c612c7ed1d28591eb7ed8d95816a94
bc402ec3d9eccbb9ce2b682bb43fa23ab92afb80
dc304d634887ea89a42e74d959fdc8dc4517e33e0df44764aad5bc63870ccb29
GET /recaptcha/api2/webworker.js?hl=en&v=sNQO7xVld1CuA2hfFHvkpVL- HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeOfCoUAAAAAPbdDj7EZmmbxCCxIkXPSOx18I8J&co=aHR0cHM6Ly93d3cuenBhc3RlLm5ldDo0NDM.&hl=en&type=image&v=sNQO7xVld1CuA2hfFHvkpVL-&theme=dark&size=normal&cb=qhzrzbxhmeli
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Sun, 04 Jun 2023 04:25:36 GMT
date: Sun, 04 Jun 2023 04:25:36 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/javascript; charset=UTF-8
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 112
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000