urlquery.net
WEBSITE ANALYSIS REPORT

https://pastepad.net/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document23.0 KB710 ms1 alerts
GET200stylesheet50.1 KB21 ms1 alerts
GET200stylesheet191.3 KB24 ms1 alerts
GET200stylesheet78.4 KB26 ms1 alerts
GET200stylesheet104.7 KB23 ms1 alerts
GET200stylesheet73.1 KB20 ms1 alerts
GET200stylesheet74.3 KB23 ms1 alerts
GET200stylesheet18.9 KB11 ms1 alerts
GET200stylesheet5.3 KB21 ms1 alerts
GET200script57.1 KB219 ms—
GET200script610.1 KB16 ms1 alerts
GET200script84.9 KB24 ms—
GET200script65.0 KB12 ms—
GET200script682 B8 ms1 alerts
GET200script16.4 KB9 ms1 alerts
GET200script372.8 KB16 ms1 alerts
GET200script4.2 KB27 ms1 alerts
GET200script1.9 KB9 ms1 alerts
GET200script388 B8 ms1 alerts
GET200script14.9 KB20 ms1 alerts
GET200script16.4 KB19 ms1 alerts

Transaction #42

Request / response

URL

GET HTTPS
https://pastepad.net/assets/js/app.min.js?v=1.1

IP / ASN

Country unknown 104.21.82.126

AS13335 · CLOUDFLARENET

Requested by
https://pastepad.net/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /assets/js/app.min.js?v=1.1 HTTP/1.1
Host: pastepad.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://pastepad.net/
Sec-GPC: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlQvWlloSzFzSTV5S1czc0lQY1RCWGc9PSIsInZhbHVlIjoibDlMTGdQSk02MTRLa2NrRnhadVZBY1lZZGFSUjFiNmRKYk4rNExFb2tNNGxmMFBRcWVwcmRGLzd3dzQ4QmRIMTZxT3JreUszQmJhSUhUWnVmaFFDOUxUaUVGVnBSZGlrQ0tSZkp2UXF0YmV1aUZTZUhkVkFCK3dlTjZrODdTajUiLCJtYWMiOiIyNDFlNDVjY2ViNzAxZTczZTRhYzBhN2NiYTRiMjA3ZDVmN2ZkNjA2YWRmZmU4Y2I0YzViOTgxMWQ2NTkzNjAyIiwidGFnIjoiIn0%3D; pastepadnet_publish_code_paste_and_text_session=eyJpdiI6IlVqNy96QUtucHlqQ0JRbVVWQkc0Q0E9PSIsInZhbHVlIjoiZnNpZCszVU03VjNUMFltbXhiQW9CRFdEdGhvcmpoUzdYTWt0NTlMeWZpc0kvWlI4VFJjdTYyVTNmNjZ4VkpRMnc5azdPNjNYOW9yQ1UyQlM0Ty9IQTZ2VHpmTFhmSVFYRnRaenpvRkJKOEpNWTlYaUVTZE10emRqTkdQY2Z5cm4iLCJtYWMiOiIwMzcwNWNlMmQ5N2UzN2NhMjQzOWQ4NmYxZWJmZDY1OTJjOGVlYTI4M2FhNWU1Yzg4MTJmMjdmOTc1M2VkMjhjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Fri, 25 Sep 2026 00:27:28 GMT
content-type: application/javascript; charset=utf-8
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HUfugVlZtFhpowDtjwCO2H11M%2FRrkgnLvB30eZl2r1%2Bl6xOAhxEPFW8hpHvSKLD%2BeZxPrgQB2lcaNYrFI8rM4lPk4e5D5fbequhu%2FAc4b45HJZBy3eu%2FEzFSUGm4H5w%3D"}]}
last-modified: Sat, 28 Mar 2026 13:05:36 GMT
priority: u=3,i=?0
x-content-type-options: nosniff
etag: W/"69c7d220-41c2"
age: 1177
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: zstd
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a405e73d49a156b4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET200script3.0 KB9 ms1 alerts
GET200script513.7 KB216 ms—
GET200img4.0 KB8 ms1 alerts
GET200img6.8 KB9 ms1 alerts
GET200img16.2 KB7 ms1 alerts
GET200stylesheet14.8 KB13 ms—
GET200stylesheet13.2 KB79 ms—
GET200img535 B9 ms1 alerts
GET200img75.3 KB10 ms1 alerts
GET302script0 B5 ms1 alerts
GET200script46.0 KB288 ms—
GET200script21.2 KB8 ms1 alerts
GET200font36.9 KB92 ms—
GET200font36.9 KB77 ms—
GET200font38.7 KB85 ms—
GET200font36.9 KB86 ms—
GET200font36.9 KB83 ms—
POST200xhr0 B7 ms1 alerts
GET200xhr21.7 KB252 ms1 alerts
GET200script40.2 KB90 ms—
POST204beacon0 B159 ms3 alerts
GET200script212 B445 ms—
GET200script37.4 KB88 ms—
GET200script47.1 KB89 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot