Report - justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school

Report Overview

Visited public
2023-08-14 23:20:22
Tags
Submit Tags
URL
justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip
Finishing URL
justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip
IP / ASN
146.59.111.145
#16276 OVH SAS
Title
Redirect - JustPaste.it

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
justpaste.it	219317	2009-11-18	2014-08-11 20:57:47	2023-08-13 11:11:11	6.3 kB	691 kB	146.59.111.145

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-08-14 23:20:00	low	Client IP	Internal IP	ET INFO Observed DNS Query to Pastebin-style Service (justpaste .it)
2023-08-14 23:20:00	low	Client IP	Internal IP	ET INFO Observed DNS Query to Pastebin-style Service (justpaste .it)
2023-08-14 23:20:00	low	Client IP	146.59.111.145	ET INFO Observed Pastebin-style Service Domain (justpaste .it) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip	ScriptElement	0 B	0001-01-01	2025-07-09
Pretty URL justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip IP 146.59.111.145 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-07-09 10:57 Times Seen5358020 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	justpaste.it/build/runtime.b6bf6484.js	ScriptElement	2.2 kB	2023-05-03	2024-08-21
Pretty URL justpaste.it/build/runtime.b6bf6484.js IP 146.59.111.145 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-03 23:58 Last Seen2024-08-21 09:39 Times Seen399 Hash 3008434250d5a840de674114b07d9e82 7296945f5d1b31508d135d37dea0339053258ce8 10f656228383fddef0850d2c9ee97766292b08dd5541a4eab7ea8f6c9328d6ff Loading...

	justpaste.it/build/linkRedirect.1b164036.js	ScriptElement	1.3 kB	2023-03-14	2024-08-21
Pretty URL justpaste.it/build/linkRedirect.1b164036.js IP 146.59.111.145 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 10:00 Last Seen2024-08-21 09:38 Times Seen122 Hash dce88524be3d8917dd9f1121944ee348 ed034f26a01f92a617d774a5a008d55d01b5caf9 29d49b26bba05b24106a6155d92e2ce6729f8ddc04e365a76d6872e2f740c127 Loading...

	justpaste.it/build/mainpanelwidget.907b7bd6.js	ScriptElement	15 kB	2023-04-18	2023-10-22
Pretty URL justpaste.it/build/mainpanelwidget.907b7bd6.js IP 146.59.111.145 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-18 08:58 Last Seen2023-10-22 21:47 Times Seen142 Hash 764cd1f2780dbcf926d49ea462b488ec 396918bcd4dd8abb7c6b616b30716fe56d4270b9 7be7a4f7b13ece85c70fa5374a33eaafa89b40d3f0eb266f9ddba56ba46335bc Loading...

	justpaste.it/build/2861.96239998.js	ScriptElement	56 kB	2023-06-16	2024-08-21
Pretty URL justpaste.it/build/2861.96239998.js IP 146.59.111.145 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-16 08:11 Last Seen2024-08-21 09:39 Times Seen66 Hash 5bfbf6ddf7df0f47d8a921704fcd9f79 42b580a82c886b99664a9bc756fec7b0e534b4ed bb5766733c0eca6388d020a7d979a33955dc602bd338fd5a7592788ab755024d Loading...

	justpaste.it/build/3935.7a1c960f.js	ScriptElement	201 kB	2023-06-16	2023-10-02
Pretty URL justpaste.it/build/3935.7a1c960f.js IP 146.59.111.145 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-16 08:11 Last Seen2023-10-02 05:19 Times Seen102 Hash 2dd99620f52abbeebdb153b28d0f14bf 6ff84ed85fa9b88da623a26e52a7b7effe2684dd 93d533e2ef7aa123f83343f7be3159c3f3ac444c3c4ec0160a711e7292098936 Loading...

	justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip	ScriptElement	0 B	0001-01-01	2025-07-09
Pretty URL justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip IP 146.59.111.145 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-07-09 10:57 Times Seen5358020 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (13)

	URL	IP	Response	Size
	GET justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip	146.59.111.145	200 OK	12 kB
URL User Request GET HTTP/2 justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip IP 146.59.111.145:443 ASN #16276 OVH SAS Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type gzip compressed data, from Unix\012- data Size 12 kB (11711 bytes) Hash 279e13d798f5fe8d02d69b46e7c1b8bd c96fbe3b13ed4f378427e57fd87f7948565fc7d2 c578657d061b181b67ef65754e9f428442ddd8d484f432d03c2c012e6ab90f46 HTTP Headers GET /redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:05 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; preload content-encoding: gzip X-Firefox-Spdy: h2`

	GET justpaste.it/apple-touch-icon.png	146.59.111.145	200 OK	2.8 kB
URL GET HTTP/2 justpaste.it/apple-touch-icon.png IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data Size 2.8 kB (2750 bytes) Hash 79dd48921ed8ec4bb9472a909a5c1ef5 a9bcbe1543dad185f78e199ed38c07375c215b6a c69770c432668292e20fd4357ffced505a68dfb750cdad9f11415f04bec18516 HTTP Headers `GET /apple-touch-icon.png HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: image/png content-length: 2750 last-modified: Mon, 06 Sep 2021 18:10:32 GMT etag: "61365998-abe" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	GET justpaste.it/favicon.svg	146.59.111.145	200 OK	1.3 kB
URL GET HTTP/2 justpaste.it/favicon.svg IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1283), with no line terminators Size 1.3 kB (1283 bytes) Hash c471eb0bb65b4c41e59f9ba3e99a4475 cb2accfb6a2edb7c37463d9eb89fe94d456b3a06 4ad085f5ca6a91b8b80f1e21f6be735f8ae75fd52df1add299ef79ad2b1ca4ec HTTP Headers `GET /favicon.svg HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: image/svg+xml content-length: 1283 last-modified: Mon, 06 Sep 2021 13:53:34 GMT etag: "61361d5e-503" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	GET justpaste.it/build/fonts/bootstrap-icons.6d63d050.woff2	146.59.111.145	200 OK	121 kB
URL GET HTTP/2 justpaste.it/build/fonts/bootstrap-icons.6d63d050.woff2 IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type Web Open Font Format (Version 2), TrueType, length 121340, version 1.0\012- data Size 121 kB (121340 bytes) Hash a30fb81bd52143bcd4de2898422ac8b9 4c0efcf1dccc7295efc26fabe81ffe8f28d594a3 cfe45b981d1b91b173361a34cfce5f60893dbd1ac4af2c3ac11fc17552c5401f HTTP Headers `GET /build/fonts/bootstrap-icons.6d63d050.woff2 HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Referer: https://justpaste.it/build/4317.4dddaaf1.css DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: font/woff2 content-length: 121340 last-modified: Mon, 17 Apr 2023 17:42:09 GMT etag: "643d84f1-1d9fc" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	GET justpaste.it/static/img/jp_logo_v3.svg	146.59.111.145	200 OK	9.8 kB
URL GET HTTP/2 justpaste.it/static/img/jp_logo_v3.svg IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type SVG Scalable Vector Graphics image\012- XML document text\012- exported SGML document, ASCII text, with very long lines (9876), with no line terminators Size 9.8 kB (9835 bytes) Hash ec31126ba71ec4caf8a0e30bbe41db3c 80890e1298330ddcad7ead3f05dfb3056be6efc4 e4515f95035bc2c0f21b133548133db50b54b34e16cbeec99639b14b0c62f3dc HTTP Headers `GET /static/img/jp_logo_v3.svg HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: image/svg+xml content-length: 9835 last-modified: Fri, 13 Aug 2021 23:10:49 GMT etag: "6116fbf9-266b" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	GET justpaste.it/build/global.a0cee3cb.css	146.59.111.145	200 OK	183 kB
URL GET HTTP/2 justpaste.it/build/global.a0cee3cb.css IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type Size 183 kB (182623 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /build/global.a0cee3cb.css HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: text/css vary: Accept-Encoding last-modified: Thu, 27 Jul 2023 15:12:03 GMT etag: W/"64c28943-2c95f" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT content-encoding: gzip X-Firefox-Spdy: h2`

	GET justpaste.it/build/runtime.b6bf6484.js	146.59.111.145	200 OK	2.2 kB
URL GET HTTP/2 justpaste.it/build/runtime.b6bf6484.js IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type ASCII text, with very long lines (2252), with no line terminators Size 2.2 kB (2230 bytes) Hash e43312316b0970c59860ea6b94c63df6 7b236c279c0c4a5d2395180efb3eaa7465e8f329 128bdd48bc3fb053b82c60169af612c6a5b9f3336695d48fe485f8c3fb3a6e90 HTTP Headers `GET /build/runtime.b6bf6484.js HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: application/javascript vary: Accept-Encoding last-modified: Tue, 02 May 2023 07:37:16 GMT etag: W/"6450bdac-8b6" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT content-encoding: gzip X-Firefox-Spdy: h2`

	GET justpaste.it/build/mainpanelwidget.907b7bd6.js	146.59.111.145	200 OK	15 kB
URL GET HTTP/2 justpaste.it/build/mainpanelwidget.907b7bd6.js IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type ASCII text, with very long lines (14948), with no line terminators Size 15 kB (14948 bytes) Hash 764cd1f2780dbcf926d49ea462b488ec 396918bcd4dd8abb7c6b616b30716fe56d4270b9 7be7a4f7b13ece85c70fa5374a33eaafa89b40d3f0eb266f9ddba56ba46335bc HTTP Headers `GET /build/mainpanelwidget.907b7bd6.js HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: application/javascript vary: Accept-Encoding last-modified: Mon, 17 Apr 2023 17:42:09 GMT etag: W/"643d84f1-3a64" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT content-encoding: gzip X-Firefox-Spdy: h2`

	GET justpaste.it/build/4317.4dddaaf1.css	146.59.111.145	200 OK	80 kB
URL GET HTTP/2 justpaste.it/build/4317.4dddaaf1.css IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type ASCII text, with very long lines (65354) Size 80 kB (79942 bytes) Hash 9aa7b514ecb1225726fa94e2b93eedaa a0038158bedc5ec6bf1c93966b723835e6cf642d fa74151244bc7a084c3ddb78c042da9a722d7e91d578b85734daf7ea1494724a HTTP Headers `GET /build/4317.4dddaaf1.css HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: text/css vary: Accept-Encoding last-modified: Tue, 02 May 2023 07:37:16 GMT etag: W/"6450bdac-13846" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT content-encoding: gzip X-Firefox-Spdy: h2`

	GET justpaste.it/build/redirect.dc869a83.css	146.59.111.145	200 OK	410 B
URL GET HTTP/2 justpaste.it/build/redirect.dc869a83.css IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type ASCII text, with very long lines (410), with no line terminators Size 410 B (410 bytes) Hash 80b84db4c0a5ee6357c5cc0d48836341 16fb36f7b4c6ce530d6fcc60dcc258b929573d01 5a4e710eb554aef7f3c40659ea21b3162298b124ec4b5273796526efac0200c6 HTTP Headers `GET /build/redirect.dc869a83.css HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: text/css vary: Accept-Encoding last-modified: Wed, 07 Jul 2021 15:27:45 GMT etag: W/"60e5c7f1-19a" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT content-encoding: gzip X-Firefox-Spdy: h2`

	GET justpaste.it/build/3935.7a1c960f.js	146.59.111.145	200 OK	201 kB
URL GET HTTP/2 justpaste.it/build/3935.7a1c960f.js IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type ASCII text, with very long lines (65465), with escape sequences Size 201 kB (200890 bytes) Hash 2dd99620f52abbeebdb153b28d0f14bf 6ff84ed85fa9b88da623a26e52a7b7effe2684dd 93d533e2ef7aa123f83343f7be3159c3f3ac444c3c4ec0160a711e7292098936 HTTP Headers `GET /build/3935.7a1c960f.js HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: application/javascript vary: Accept-Encoding last-modified: Thu, 15 Jun 2023 11:44:09 GMT etag: W/"648af989-310ba" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT content-encoding: gzip X-Firefox-Spdy: h2`

	GET justpaste.it/build/2861.96239998.js	146.59.111.145	200 OK	56 kB
URL GET HTTP/2 justpaste.it/build/2861.96239998.js IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type ASCII text, with very long lines (56250) Size 56 kB (56321 bytes) Hash 5bfbf6ddf7df0f47d8a921704fcd9f79 42b580a82c886b99664a9bc756fec7b0e534b4ed bb5766733c0eca6388d020a7d979a33955dc602bd338fd5a7592788ab755024d HTTP Headers `GET /build/2861.96239998.js HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: application/javascript vary: Accept-Encoding last-modified: Thu, 15 Jun 2023 11:44:09 GMT etag: W/"648af989-dc01" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT content-encoding: gzip X-Firefox-Spdy: h2`

	GET justpaste.it/build/linkRedirect.1b164036.js	146.59.111.145	200 OK	1.3 kB
URL GET HTTP/2 justpaste.it/build/linkRedirect.1b164036.js IP 146.59.111.145:443 ASN #16276 OVH SAS Requested by https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Certificate IssuerLet's Encrypt Subject.justpaste.it Fingerprint32:A7:9A:7A:1D:99:85:64:A3:88:22:E0:89:3A:A7:19:F3:8D:83:CA ValidityMon, 07 Aug 2023 11:51:57 GMT - Sun, 05 Nov 2023 11:51:56 GMT File type troff or preprocessor input, ASCII text, with very long lines (1324), with no line terminators Size 1.3 kB (1304 bytes) Hash 260b899f5434f5a1f93bb2088bc27679 e5a643d8fac906b49c957a6d67f9e9edf6227edd 040c2b1ddeddb2ebba7b544d897c94176e2fbde1ce73030c082e5f7c4e0e9a55 HTTP Headers `GET /build/linkRedirect.1b164036.js HTTP/1.1 Host: justpaste.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://justpaste.it/redirect/aleai/https:/bayfiles.com/Of27t1r2z6/school_zip Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Mon, 14 Aug 2023 23:20:06 GMT content-type: application/javascript vary: Accept-Encoding last-modified: Thu, 23 Feb 2023 08:39:56 GMT etag: W/"63f7265c-518" x-frame-options: DENY x-content-type-options: nosniff referrer-policy: origin-when-cross-origin cache-control: public, max-age=2592000, no-transform, immutable x-cache-status: HIT content-encoding: gzip X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers