{"report_id":"52112a03-7d60-4868-8ab4-3e50d278b15a","version":6,"status":"done","tags":[],"date":"2024-07-07T04:29:11Z","url":{"schema":"http","addr":"paltrypaste.com/tso.html","fqdn":"paltrypaste.com","domain":"paltrypaste.com","tld":"com"},"ip":{"addr":"172.67.208.216","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"paltrypaste.com/tso.html","fqdn":"paltrypaste.com","domain":"paltrypaste.com","tld":"com"},"title":"paltrypaste.com/tso.html"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T10:42:38Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"paltrypaste.com","ip":{"addr":"172.67.208.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":37778,"sent_data":1010,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unseenreport.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2022-03-30","domain_rank":0,"first_seen":"2022-03-30 16:33:17","last_seen":"2024-07-06 20:41:01","alert_count":1,"request_count":1,"received_data":471,"sent_data":734,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.cloudimagesb.com","ip":{"addr":"45.133.44.9","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-10-06","domain_rank":23099,"first_seen":"2021-02-12 17:15:41","last_seen":"2024-07-06 20:43:56","alert_count":0,"request_count":1,"received_data":111385,"sent_data":443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"handymanlipsballast.com","ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":12636,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"proftrafficcounter.com","ip":{"addr":"3.124.140.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2023-11-16","domain_rank":0,"first_seen":"2023-11-21 09:55:14","last_seen":"2024-07-06 18:56:37","alert_count":0,"request_count":1,"received_data":422,"sent_data":431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"absenceoverload.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-06-29","domain_rank":0,"first_seen":"2024-07-04 15:07:37","last_seen":"2024-07-04 15:07:37","alert_count":0,"request_count":3,"received_data":90714,"sent_data":2818,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hysteriaethicalsewer.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-06-29","domain_rank":0,"first_seen":"2024-07-02 18:12:35","last_seen":"2024-07-05 11:37:27","alert_count":0,"request_count":1,"received_data":467,"sent_data":490,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-07-06 18:12:32","alert_count":0,"request_count":3,"received_data":2663,"sent_data":981,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:43:57","last_seen":"2024-07-06 18:12:26","alert_count":0,"request_count":2,"received_data":1774,"sent_data":654,"comment":"","tags":null,"fingerprints":null},{"fqdn":"recordedthereby.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-05-08","domain_rank":0,"first_seen":"2024-05-14 07:24:53","last_seen":"2024-07-06 18:56:37","alert_count":0,"request_count":1,"received_data":139477,"sent_data":400,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-06","alert":"Sinkholed","trigger":"unseenreport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paltrypaste.com/tso.html","fqdn":"paltrypaste.com","domain":"paltrypaste.com","tld":"com"},"ip":{"addr":"172.67.208.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handymanlipsballast.com/64e0e2fafb6940d0946186d56d50ff8b/invoke.js","fqdn":"handymanlipsballast.com","domain":"handymanlipsballast.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c015c22bf3611c89e80fcd7fb8ec825a","sha1":"84c42737663a6a6de6e7beb998d8100734929cc0","sha256":"df5c5a23686bc471c71c1e2815fbc230f8f35d1d6a72725e51d8321e150740d8","sha512":"8b5a8b8093148604a60f6bcc99188eaa5e65b3616b297d27d5c654094e9c9e56f9fb4e922b91fe0dc420a161c1ac93d7fa984b3cb77ea93cb6273fef7aea7402","ssdeep":"768:Q+emZzLsY7hFHvIlCVhmvPi9GuZvOyKUllr+0P20:5U+IeWULVJ","tlshash":"d1e284553fc1995933075e3fb73fb1e8e6ae089b3d880897e109ad20a4e1767ead1530","size":31309,"data":"","first_seen":"2024-08-19T17:45:43.073812Z","last_seen":"2024-08-19T17:45:43.073812Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"absenceoverload.com/44/62/0b/44620b6b0b268f1fdb849874b56f5465.js","fqdn":"absenceoverload.com","domain":"absenceoverload.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"980dd427fa4fcdc01b6dcdbb9c0b66a2","sha1":"bff07692fb40d0d4bbc435fcd42e191adc634ba5","sha256":"cd453ee056abcf09f0e4f0b8443127e9d2c8e0b4b38858d5879ca0ef90957417","sha512":"35f3e9689df55ce7f886b3c2f62a24cb1a3f97af08f9f295b5d37a6e273f531fd1709d465ed6a63d96ef74e5b0b368964b32066e575540f84593676a2fdd4b6a","ssdeep":"1536:3u8/QZx7ERV/PaSAAfJxm8AAeccI10y79pXLIZIhCau9:ExnEtAA8GvpWku9","tlshash":"0183d78e3f9ab05603f6f076622fd12ff12e0c5352c8d498d623a49c6bad70bd535a19","size":84247,"data":"","first_seen":"2024-08-19T17:45:43.082943Z","last_seen":"2024-08-19T17:45:43.082943Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d917ceccda579afcf501255dee1502d","sha1":"dbc909a1b4b2984c77d39eceb28c9677211a06e8","sha256":"e1fbb5df4f36f2f3bb3894e4457039cfa357a9760055c15482bad10300bb6132","sha512":"f8767947e4f22d7403a76ee72f3bdda643e8463bb7e25a52bae50d30ff5c1a56b3b95a507dcd4540aabf3af102e39c60b77c43395fd063c0086432761934436b","ssdeep":"","tlshash":"b5c04ce27f4c5461fd9d3b8e2705e391dc49c34a2f19d7912b9588b8f4815178150496","size":145,"data":"","first_seen":"2024-08-19T17:45:43.084017Z","last_seen":"2024-08-19T17:45:43.084017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"121f06fff026f3766aebbb1eb0918c38","sha1":"231a23d9dbac2b77d6c34d7baa6a106b12ecfa6e","sha256":"42a0fe4c906d797a24a41496b2aa780091f6bdfac6cf32c13934eca902339b4d","sha512":"aa19ccda627be7b29b32d90a3b87aa07f36623c2511cfb43e545c1f75ea2c92eaeae2019a48d554b0fa9a751a9d30a888f206f471b1370ce6336bdfa9c34e53d","ssdeep":"","tlshash":"6c610953ad80d530682ab9ef23b153807d25e30d0d04eb4afd4ce9196350ad443b9ced","size":3272,"data":"","first_seen":"2024-08-19T17:45:43.084709Z","last_seen":"2024-08-19T17:45:43.084709Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recordedthereby.com/sfp.js","fqdn":"recordedthereby.com","domain":"recordedthereby.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e3e44049654b6e244c1777e68ffb8e7","sha1":"8f2a8298666d607afd92a0baa362ef4dc9ccd039","sha256":"4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b","sha512":"8d91a9d1fdeb367e40ac91122f0d0d82d9f63a3f62d6c9b5befd4889e9e4c315e7dc997ceb99348ab22aac93831e90b27c0d1b4c63a217e9357e2c6f3fdcf55d","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRd:nPncLBSUBULGVTfGpucE5fon","tlshash":"2d8395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85378,"data":"","first_seen":"2024-05-17T16:43:22Z","last_seen":"2025-01-21T11:22:09.699256Z","times_seen":13574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"95a5d65717e8d375cd39cc7ffe57ab32","sha1":"92cbbf088da845230adf309a0e99ae9989ac479d","sha256":"54dd3ecca111504cd5efd3452ac3fb4c39c3eac0319bf1403b05c6a3455145d6","sha512":"ed2a11c2a1a178957d2c1972a8a2c4194eb464fea07a37c714f2445ffd9bd86656540b1db76170dbcc1c040297852114cae74cf0ee0430080a8ad6c021d50a6e","ssdeep":"","tlshash":"e441db16a952ad31097ae9e7518527406e25c3570c4c67dbfc0c1b5c77448e803be899","size":2089,"data":"","first_seen":"2024-08-19T17:45:43.085402Z","last_seen":"2024-08-19T17:45:43.085402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-07T04:28:46.025653715Z","timestamp":1720326526025,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"376A5286B71A4A7E90B3EECE9B39480F50435D5EF3C7793828481F590D04BC77\"\r\nLast-Modified: Thu, 04 Jul 2024 23:47:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4093\r\nExpires: Sun, 07 Jul 2024 05:36:59 GMT\r\nDate: Sun, 07 Jul 2024 04:28:46 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"508d0867e7982df7cfa6ad58e05ce470","sha1":"6f4e15b94e527d02e8dd38f8b69b493cfae84c56","sha256":"376a5286b71a4a7e90b3eece9b39480f50435d5ef3c7793828481f590d04bc77","sha512":"6df5f4a96e185800d882599f0646e1a1396280d3b4c98277687d1493a41dca30381487c8a826c36c06ad12bae9f985cc45cd96bf3c367c75c1e7ea9a1bc9600f","ssdeep":"","tlshash":"12f07562257579189a302d0828a1c6041f113dae3a0c1afd7a9002c09440bf5106c084","first_seen":"2024-07-05T06:41:10Z","last_seen":"2024-08-19T18:01:42.729319Z","times_seen":43182,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-07T04:28:47.410474959Z","timestamp":1720326527410,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"0365BE0140269CE7950D0A0F14DB45A766C2C2C49E90F4CEB33A7773CFC10354\"\r\nLast-Modified: Sun, 07 Jul 2024 02:01:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=21578\r\nExpires: Sun, 07 Jul 2024 10:28:25 GMT\r\nDate: Sun, 07 Jul 2024 04:28:47 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"4098228151052ad1257025e6c45307a1","sha1":"3ce5d61a9475e87896180d51c9748e443e24ddac","sha256":"0365be0140269ce7950d0a0f14db45a766c2c2c49e90f4ceb33a7773cfc10354","sha512":"fa86505d63a754293a8973d7965dbe782ae01b0f96b8fd1f4a1a1cc615837fe4e916a73e717268a89cc15064f6323a7d7bd0957ccd32f81d3ce59a5399098e34","ssdeep":"","tlshash":"72f00e8292f6b84659f6d706bce9e0212a715d9f388016b694ec13f26875394788cb8e","first_seen":"2024-08-19T17:45:43.072959Z","last_seen":"2024-08-19T17:45:43.072959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"handymanlipsballast.com/64e0e2fafb6940d0946186d56d50ff8b/invoke.js","fqdn":"handymanlipsballast.com","domain":"handymanlipsballast.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paltrypaste.com/tso.html","date":"2024-07-07T04:28:46.704Z","timestamp":1720326526704,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"handymanlipsballast.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jul 2024 09:28:20 GMT","end":"Fri, 04 Oct 2024 09:28:19 GMT"},"fingerprint":{"sha1":"73:AE:0E:70:B0:24:4D:23:72:6A:1A:1D:81:95:54:B4:94:49:07:11","sha256":"9D:45:5E:B7:9D:E7:72:D1:53:24:19:FD:3A:2B:45:CD:08:FA:C4:8C:8E:6B:64:24:B8:20:2B:DF:CF:C4:A3:8C"}}},"request":{"raw":"GET /64e0e2fafb6940d0946186d56d50ff8b/invoke.js HTTP/1.1\r\nHost: handymanlipsballast.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paltrypaste.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 07 Jul 2024 04:28:47 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 72f0bcf9e2ea4cb4b18f7352779d9ba2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11849,"size_decoded":31309,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31309), with no line terminators","md5":"c015c22bf3611c89e80fcd7fb8ec825a","sha1":"84c42737663a6a6de6e7beb998d8100734929cc0","sha256":"df5c5a23686bc471c71c1e2815fbc230f8f35d1d6a72725e51d8321e150740d8","sha512":"8b5a8b8093148604a60f6bcc99188eaa5e65b3616b297d27d5c654094e9c9e56f9fb4e922b91fe0dc420a161c1ac93d7fa984b3cb77ea93cb6273fef7aea7402","ssdeep":"768:Q+emZzLsY7hFHvIlCVhmvPi9GuZvOyKUllr+0P20:5U+IeWULVJ","tlshash":"d1e284553fc1995933075e3fb73fb1e8e6ae089b3d880897e109ad20a4e1767ead1530","first_seen":"2024-08-19T17:45:43.073812Z","last_seen":"2024-08-19T17:45:43.073812Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1524,"timings":{"blocked":707,"dns":342,"connect":103,"send":0,"wait":105,"receive":1,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proftrafficcounter.com/stats","fqdn":"proftrafficcounter.com","domain":"proftrafficcounter.com","tld":"com"},"ip":{"addr":"3.124.140.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paltrypaste.com/tso.html","date":"2024-07-07T04:28:47.591Z","timestamp":1720326527591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"proftrafficcounter.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 21 Nov 2023 00:00:00 GMT","end":"Thu, 19 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"E3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6","sha256":"66:22:F4:5A:8A:F6:B0:E3:CF:BA:D2:3D:3C:B7:D4:0B:FE:00:4D:DE:4E:A2:B5:68:D3:ED:C6:E6:D9:5B:06:12"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: proftrafficcounter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paltrypaste.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paltrypaste.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jul 2024 04:28:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://paltrypaste.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=b6d68315-e4c8-49bb-982e-379778f73565:2:1; expires=Wed, 05 Jul 2034 04:28:47 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":40,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4d82ae8ed6246a2dfbf9af3607b2ec3c","sha1":"56070f18a5017c14a20f41a08648c695e20d6f45","sha256":"443691b231b85131e1fa0a205b209263320f15942d649bd0e19a559a4bfe135f","sha512":"ba46acedbff21585b2ceab310200fe51b998f41842c3cbf67bfd0817a05c4689e11690dc1959d9a6af2a2a7a6b8ba4598e082cc51107224b93870485f82dc12f","ssdeep":"","tlshash":"2b9004c45711c071d0f411535c755c415103115fd51d0057c70d440354004000d00577","first_seen":"2024-08-19T17:45:43.074709Z","last_seen":"2024-08-19T17:45:43.074709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":72,"dns":1,"connect":21,"send":0,"wait":21,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-07T04:28:47.950682045Z","timestamp":1720326527950,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"CD9731565E35F4C95AC55DAC045D889834348F5F59EDC7BB2CB8C1C7E498E4AF\"\r\nLast-Modified: Sat, 06 Jul 2024 05:29:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6948\r\nExpires: Sun, 07 Jul 2024 06:24:35 GMT\r\nDate: Sun, 07 Jul 2024 04:28:47 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"5a9a6167e14e8d436a1e98ec00ce1fb3","sha1":"6b3eaead8ae2edf16f4c74028efcb8d8cadca6a7","sha256":"cd9731565e35f4c95ac55dac045d889834348f5f59edc7bb2cb8c1c7e498e4af","sha512":"1b2bda3f13d2b84af00b86b263ab84d2785367d9668499b91c8bd6af272e29ee8086cc2a523c1c222122c988612d5032341b3586ad468c8c8b1572ed653fb6a9","ssdeep":"","tlshash":"fbf00e073535784ac5c1582e5cecd93e0f38ad60246101faba4cc7e27c6179e2108885","first_seen":"2024-07-06T15:04:23Z","last_seen":"2024-08-19T17:51:28.901742Z","times_seen":7,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-07T04:28:48.021414316Z","timestamp":1720326528021,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2\"\r\nLast-Modified: Fri, 05 Jul 2024 17:32:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=15112\r\nExpires: Sun, 07 Jul 2024 08:40:40 GMT\r\nDate: Sun, 07 Jul 2024 04:28:48 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"861cce1bf441610f1dfbb14264d55122","sha1":"1596b2c44fcdb5f7a49c73da766e4ab48b6bd064","sha256":"f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2","sha512":"c475b673ce5e7ae8a00ea2d8d2dfccf06484e9eb5454b212905534fcd83a35a459bc5e849eaca05824101d8434208506dea5bebfa4e61999e2f3419de5f77d1f","ssdeep":"","tlshash":"22f0059421f77e005bf116151da5d52db92cab6531014df2b49012b368f0b6a67418c6","first_seen":"2024-07-05T22:02:26Z","last_seen":"2024-08-19T17:56:38.421498Z","times_seen":44889,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-07T04:28:48.035049383Z","timestamp":1720326528035,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"CD9731565E35F4C95AC55DAC045D889834348F5F59EDC7BB2CB8C1C7E498E4AF\"\r\nLast-Modified: Sat, 06 Jul 2024 05:29:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7223\r\nExpires: Sun, 07 Jul 2024 06:29:11 GMT\r\nDate: Sun, 07 Jul 2024 04:28:48 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"5a9a6167e14e8d436a1e98ec00ce1fb3","sha1":"6b3eaead8ae2edf16f4c74028efcb8d8cadca6a7","sha256":"cd9731565e35f4c95ac55dac045d889834348f5f59edc7bb2cb8c1c7e498e4af","sha512":"1b2bda3f13d2b84af00b86b263ab84d2785367d9668499b91c8bd6af272e29ee8086cc2a523c1c222122c988612d5032341b3586ad468c8c8b1572ed653fb6a9","ssdeep":"","tlshash":"fbf00e073535784ac5c1582e5cecd93e0f38ad60246101faba4cc7e27c6179e2108885","first_seen":"2024-07-06T15:04:23Z","last_seen":"2024-08-19T17:51:28.901742Z","times_seen":7,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"absenceoverload.com/watch.1159296135025.js?key=64e0e2fafb6940d0946186d56d50ff8b\u0026kw=%5B%5D\u0026refer=https%3A%2F%2Fpaltrypaste.com%2Ftso.html\u0026tz=0\u0026dev=e\u0026res=14.2071\u0026uuid=b6d68315-e4c8-49bb-982e-379778f73565%3A2%3A1","fqdn":"absenceoverload.com","domain":"absenceoverload.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paltrypaste.com/tso.html","date":"2024-07-07T04:28:47.723Z","timestamp":1720326527723,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"absenceoverload.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Jun 2024 14:07:46 GMT","end":"Fri, 27 Sep 2024 14:07:45 GMT"},"fingerprint":{"sha1":"08:30:32:85:74:29:F7:9C:F3:88:D7:EC:86:19:CE:C7:33:CF:B5:2F","sha256":"32:80:F3:51:C1:55:A1:47:F3:8B:C2:6E:FF:B9:14:8E:8E:0D:D4:94:D1:9C:FF:C7:67:1F:75:92:E3:C5:32:99"}}},"request":{"raw":"GET /watch.1159296135025.js?key=64e0e2fafb6940d0946186d56d50ff8b\u0026kw=%5B%5D\u0026refer=https%3A%2F%2Fpaltrypaste.com%2Ftso.html\u0026tz=0\u0026dev=e\u0026res=14.2071\u0026uuid=b6d68315-e4c8-49bb-982e-379778f73565%3A2%3A1 HTTP/1.1\r\nHost: absenceoverload.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paltrypaste.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paltrypaste.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Sun, 07 Jul 2024 04:28:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nCustom-Referer: https://paltrypaste.com\r\nAccess-Control-Allow-Origin: https://paltrypaste.com\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://absenceoverload.com/watch.1159296135025.js?dev=e\u0026key=64e0e2fafb6940d0946186d56d50ff8b\u0026kw=%5B%5D\u0026pst=1720326588\u0026refer=https%3A%2F%2Fpaltrypaste.com%2Ftso.html\u0026res=14.2071\u0026rmtc=t\u0026shu=9a407f7f59a33b0c7c8d12c74c9979a0c23eb491ee1a368b5fe2cdbc02ea0dc6e0e4a4b9fd9b85e02f55e7a1bc34e575c5ddd7a622d8f0754d42d66325d08fadf98ac6bc2f5ef0a7fbb2f8e0dbcc7f06f16151241dd6715e5b7162\u0026tz=0\u0026uuid=b6d68315-e4c8-49bb-982e-379778f73565%3A2%3A1\r\nSet-Cookie: u_pl=22940150; expires=Mon, 08 Jul 2024 04:28:48 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiJ9.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.jf3fb7PSKb-IzxLHr1tdXN1gCLUEL8UEmcZnQGI7Xjw; expires=Sun, 07 Jul 2024 04:29:48 GMT; path=/; secure; SameSite=None\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 21df884574d5b38c33faa7cc6d2824cb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":722,"timings":{"blocked":312,"dns":2,"connect":93,"send":0,"wait":98,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paltrypaste.com/tso.html","fqdn":"paltrypaste.com","domain":"paltrypaste.com","tld":"com"},"ip":{"addr":"172.67.208.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-07T04:28:46.279Z","timestamp":1720326526279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paltrypaste.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 May 2024 11:56:19 GMT","end":"Mon, 26 Aug 2024 11:56:18 GMT"},"fingerprint":{"sha1":"37:1C:81:81:25:E6:AF:29:8A:57:AE:85:03:C6:F9:A7:D6:D5:C7:5F","sha256":"62:BF:8D:61:95:E6:F9:F8:6F:D0:69:A2:61:49:1F:9A:DA:09:B3:63:44:8D:B8:5F:13:5D:9F:E0:BE:28:ED:62"}}},"request":{"raw":"GET /tso.html HTTP/1.1\r\nHost: paltrypaste.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jul 2024 04:28:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 06 Jul 2024 03:26:02 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EFFcs8ZmWq53%2Fsy9sq%2FXJyi1UfAIT6E8RI%2FENpgVp2ka8swrpy0o1MA%2BDNH7fvb8%2F1ps2JoFq%2Bb%2Bmx0lgcKgSTcMqFOOeviQXL6URSyEsZhLFIBODPycA1Hw81b2r3tsDFQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 89f516f55c9b56bb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31298,"size_decoded":1047,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"96de3949e8c662b32e6b53ee0b0bff09","sha1":"65be2af11a8860feba81f82343f06549bbfe4ea8","sha256":"2813de993312f0435637fb7d618bd30b3b001da40837c43f6331653f26cb2ca8","sha512":"db5612083ef0349ab8459fabf49d450e604a266c2a57324cb7d35f3948fffff29fe07fadbdc3539082bef64ca7c5671e6a92b1951fc644a09f8a5aa4a6af7977","ssdeep":"","tlshash":"991175974c40f404c0d1d350a8bee6495a128a8debd2c6b362fa813a77ca9d44c093dc","first_seen":"2024-08-19T17:45:43.077702Z","last_seen":"2024-08-19T17:45:43.077702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":22,"dns":0,"connect":1,"send":0,"wait":125,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"absenceoverload.com/watch.1159296135025.js?dev=e\u0026key=64e0e2fafb6940d0946186d56d50ff8b\u0026kw=%5B%5D\u0026pst=1720326588\u0026refer=https%3A%2F%2Fpaltrypaste.com%2Ftso.html\u0026res=14.2071\u0026rmtc=t\u0026shu=9a407f7f59a33b0c7c8d12c74c9979a0c23eb491ee1a368b5fe2cdbc02ea0dc6e0e4a4b9fd9b85e02f55e7a1bc34e575c5ddd7a622d8f0754d42d66325d08fadf98ac6bc2f5ef0a7fbb2f8e0dbcc7f06f16151241dd6715e5b7162\u0026tz=0\u0026uuid=b6d68315-e4c8-49bb-982e-379778f73565%3A2%3A1","fqdn":"absenceoverload.com","domain":"absenceoverload.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paltrypaste.com/tso.html","date":"2024-07-07T04:28:48.139Z","timestamp":1720326528139,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"absenceoverload.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Jun 2024 14:07:46 GMT","end":"Fri, 27 Sep 2024 14:07:45 GMT"},"fingerprint":{"sha1":"08:30:32:85:74:29:F7:9C:F3:88:D7:EC:86:19:CE:C7:33:CF:B5:2F","sha256":"32:80:F3:51:C1:55:A1:47:F3:8B:C2:6E:FF:B9:14:8E:8E:0D:D4:94:D1:9C:FF:C7:67:1F:75:92:E3:C5:32:99"}}},"request":{"raw":"GET /watch.1159296135025.js?dev=e\u0026key=64e0e2fafb6940d0946186d56d50ff8b\u0026kw=%5B%5D\u0026pst=1720326588\u0026refer=https%3A%2F%2Fpaltrypaste.com%2Ftso.html\u0026res=14.2071\u0026rmtc=t\u0026shu=9a407f7f59a33b0c7c8d12c74c9979a0c23eb491ee1a368b5fe2cdbc02ea0dc6e0e4a4b9fd9b85e02f55e7a1bc34e575c5ddd7a622d8f0754d42d66325d08fadf98ac6bc2f5ef0a7fbb2f8e0dbcc7f06f16151241dd6715e5b7162\u0026tz=0\u0026uuid=b6d68315-e4c8-49bb-982e-379778f73565%3A2%3A1 HTTP/1.1\r\nHost: absenceoverload.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paltrypaste.com\r\nReferer: https://paltrypaste.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: u_pl=22940150; ain=eyJhbGciOiJIUzI1NiJ9.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.jf3fb7PSKb-IzxLHr1tdXN1gCLUEL8UEmcZnQGI7Xjw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 07 Jul 2024 04:28:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nCustom-Referer: https://paltrypaste.com\r\nAccess-Control-Allow-Origin: https://paltrypaste.com\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: uid_id2=b6d68315-e4c8-49bb-982e-379778f73565:2:1; expires=Sun, 14 Jul 2024 04:28:48 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 08 Jul 2024 04:28:48 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 08 Jul 2024 04:28:48 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Mon, 08 Jul 2024 04:28:48 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Mon, 08 Jul 2024 04:28:48 GMT; path=/; secure; SameSite=None\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 66dfc4d140b7f3a733c9404cb6c4a8dc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1963,"size_decoded":3305,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (2429)","md5":"e02fb0b9b99c42dcb0ab90c72dc4e4e2","sha1":"64ce0dc118b07d3c0e9ea2f01fda26960170ceec","sha256":"0bd4743b1a5fd1f9c65b723b12c03327c866a527b79a8f9d4183165147ea1fda","sha512":"16cf6f4cda9135c111d308241790c9396af18b0ebb89d72b15bc5d58c54d5707330337aa9aaf82935112fd506364a036580d4389eae061fdf27021b5c7210edb","ssdeep":"","tlshash":"0461e762aed1d534682b74af226653407d25c30b1d08ef4afd4cea28af50ae406b99dd","first_seen":"2024-08-19T17:45:43.078456Z","last_seen":"2024-08-19T17:45:43.078456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recordedthereby.com/sfp.js","fqdn":"recordedthereby.com","domain":"recordedthereby.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paltrypaste.com/tso.html","date":"2024-07-07T04:28:48.211Z","timestamp":1720326528211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recordedthereby.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jul 2024 15:25:15 GMT","end":"Fri, 04 Oct 2024 15:25:14 GMT"},"fingerprint":{"sha1":"A1:CB:3E:AF:CE:F5:E9:D2:26:FB:E2:D4:FE:4B:29:D2:B3:C9:AD:3B","sha256":"81:F5:99:6E:46:59:A5:C0:85:4E:0C:26:66:17:34:C4:6C:13:50:53:0C:9E:F7:CB:57:4B:5D:90:1D:45:3E:4A"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: recordedthereby.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paltrypaste.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jul 2024 04:28:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 762a5cd0bf4125c1c7205941ea7e21aa\r\npragma: no-cache\r\nstrict-transport-security: max-age=0; includeSubdomains\r\ncf-cache-status: BYPASS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=L0hpmX7SMl53rPHpdCjg3YX3pJoE%2BZk3bR8UK%2BNNhUcdYcW%2BEzyXcBa4oEwLcBMPsi3b3TXjoWtuduW6ZV3%2F7dMeMraAvFnJXKUXASFSpHFTT%2FHdijKRr1CsywGssturvVHV%2BAWs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 89f517016e7c5697-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":138543,"size_decoded":85378,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"7e3e44049654b6e244c1777e68ffb8e7","sha1":"8f2a8298666d607afd92a0baa362ef4dc9ccd039","sha256":"4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b","sha512":"8d91a9d1fdeb367e40ac91122f0d0d82d9f63a3f62d6c9b5befd4889e9e4c315e7dc997ceb99348ab22aac93831e90b27c0d1b4c63a217e9357e2c6f3fdcf55d","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRd:nPncLBSUBULGVTfGpucE5fon","tlshash":"2d8395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2024-05-17T16:43:22Z","last_seen":"2025-01-21T11:22:09.699256Z","times_seen":13574,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":130,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hysteriaethicalsewer.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1995\u0026rd=1995\u0026fd=582\u0026bv=24.5.8230\u0026tmpl=70","fqdn":"hysteriaethicalsewer.com","domain":"hysteriaethicalsewer.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paltrypaste.com/tso.html","date":"2024-07-07T04:28:48.208Z","timestamp":1720326528208,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hysteriaethicalsewer.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Jun 2024 14:01:07 GMT","end":"Fri, 27 Sep 2024 14:01:06 GMT"},"fingerprint":{"sha1":"6E:7B:C1:31:3A:F9:A0:55:B7:9F:B0:8B:89:6D:1A:C4:AE:DB:A8:5A","sha256":"B7:35:0A:E2:3C:F4:8C:22:C1:3A:DF:A6:C9:DB:F8:49:73:43:80:88:73:DC:78:3D:E7:AF:86:E0:DE:DB:C4:46"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1995\u0026rd=1995\u0026fd=582\u0026bv=24.5.8230\u0026tmpl=70 HTTP/1.1\r\nHost: hysteriaethicalsewer.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paltrypaste.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 07 Jul 2024 04:28:48 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":992,"timings":{"blocked":413,"dns":23,"connect":127,"send":0,"wait":166,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unseenreport.com/pxf.gif?uuid=b6d68315-e4c8-49bb-982e-379778f73565\u0026eb=978028c5053b26833423c7a069ce3bd5\u0026te=5db3a4e34790624df926db520a13f79f\u0026ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0\u0026dev=e\u0026res=14.2071\u0026b_frame=0\u0026pk=44620b6b0b268f1fdb849874b56f5465\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=4","fqdn":"unseenreport.com","domain":"unseenreport.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paltrypaste.com/tso.html","date":"2024-07-07T04:28:49.106Z","timestamp":1720326529106,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.unseenreport.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 May 2024 07:36:27 GMT","end":"Mon, 19 Aug 2024 07:36:26 GMT"},"fingerprint":{"sha1":"F5:95:0F:2B:01:D6:36:49:AB:2E:61:76:F7:EC:A5:45:3D:F1:0E:59","sha256":"25:E1:1C:8F:F1:C7:25:91:35:D9:34:36:1C:50:7A:A9:81:10:C4:AD:73:F3:56:50:A1:68:D5:F6:B1:55:CD:C8"}}},"request":{"raw":"GET /pxf.gif?uuid=b6d68315-e4c8-49bb-982e-379778f73565\u0026eb=978028c5053b26833423c7a069ce3bd5\u0026te=5db3a4e34790624df926db520a13f79f\u0026ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0\u0026dev=e\u0026res=14.2071\u0026b_frame=0\u0026pk=44620b6b0b268f1fdb849874b56f5465\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=4 HTTP/1.1\r\nHost: unseenreport.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paltrypaste.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Sun, 07 Jul 2024 04:28:49 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c9f6f51cb44fa9d0ed52edbba2897570\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1,"size_decoded":1,"mime_type":"image/gif","magic":"very short file (no magic)","md5":"93b885adfe0da089cdf634904fd59f71","sha1":"5ba93c9db0cff93f52b521d7420e43f6eda2784f","sha256":"6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d","sha512":"b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:01:45Z","last_seen":"2026-04-09T04:16:13.039106Z","times_seen":28520,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":443,"dns":0,"connect":145,"send":0,"wait":143,"receive":1,"ssl":293},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-06","alert":"Sinkholed","trigger":"unseenreport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paltrypaste.com/favicon.ico","fqdn":"paltrypaste.com","domain":"paltrypaste.com","tld":"com"},"ip":{"addr":"172.67.208.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paltrypaste.com/tso.html","date":"2024-07-07T04:28:47.922Z","timestamp":1720326527922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paltrypaste.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 May 2024 11:56:19 GMT","end":"Mon, 26 Aug 2024 11:56:18 GMT"},"fingerprint":{"sha1":"37:1C:81:81:25:E6:AF:29:8A:57:AE:85:03:C6:F9:A7:D6:D5:C7:5F","sha256":"62:BF:8D:61:95:E6:F9:F8:6F:D0:69:A2:61:49:1F:9A:DA:09:B3:63:44:8D:B8:5F:13:5D:9F:E0:BE:28:ED:62"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: paltrypaste.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paltrypaste.com/tso.html\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=b6d68315-e4c8-49bb-982e-379778f73565%3A2%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 07 Jul 2024 04:28:48 GMT\r\ncontent-type: text/html\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uL0uj%2B1%2F758xKF00BTzv9UdLytBaCJkDFbEgN3GJLbGexhFPJoYbPol7U3iRqJhtisYTR%2FLTFBaNUO3WmMv7SbucaCsgdIpVL%2BaGMpW7TyR9C%2FtdLfkiS1lJ4G7YK9wneIA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 89f516ff8a4bb511-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":5282,"size_decoded":153,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-04-09T08:37:15.357749Z","times_seen":4147,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudimagesb.com/cti/bb/59/ee/bb59ee37dc1dd0489ac3b5ab7eeb3863/1627915891.png","fqdn":"cdn.cloudimagesb.com","domain":"cloudimagesb.com","tld":"com"},"ip":{"addr":"45.133.44.9","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paltrypaste.com/tso.html","date":"2024-07-07T04:28:48.431Z","timestamp":1720326528431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.cloudimagesb.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 May 2024 05:00:31 GMT","end":"Mon, 19 Aug 2024 05:00:30 GMT"},"fingerprint":{"sha1":"C0:36:FD:5D:4E:7E:6F:E0:13:60:82:58:0C:BC:8B:40:A2:6B:2C:22","sha256":"13:90:E8:1E:A4:AA:B0:2E:BF:17:A1:C6:19:8A:7D:28:40:7D:C3:D4:3E:00:9E:17:06:76:37:CE:49:62:80:C0"}}},"request":{"raw":"GET /cti/bb/59/ee/bb59ee37dc1dd0489ac3b5ab7eeb3863/1627915891.png HTTP/1.1\r\nHost: cdn.cloudimagesb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jul 2024 04:28:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 111057\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 02 Aug 2021 14:51:41 GMT\r\netag: \"6108067d-1b1d1\"\r\nexpires: Tue, 09 Jul 2024 04:28:48 GMT\r\ncache-control: max-age=172800\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111057,"size_decoded":111057,"mime_type":"image/png","magic":"PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced","md5":"1da8cd55f8d6f2f83002d45575b7499d","sha1":"b7fb60c04d04cb55259c92cc184662aebabb3f32","sha256":"c818c1651508b4817d15851e5a688f70551f10dbec541782757b9e4a9dc2280e","sha512":"8410ba2f695eeeefb7a036cd98489bea232e9721b420023ab660f46abbde8afb1d4b0c8ce1aad0db63ee2bdd6b5bc95bf718a078fdcf6883102044fc76c54cb2","ssdeep":"3072:MSubLdBSO3ZWLylkVo0EutLrx/vMOmi0dnaIV:ubpsO3iKkm0LNvMOmldnt","tlshash":"b7b312459e5ae52a703c67e151b53832c294c370bc9046e22f66fa171e813ebec3f34a","first_seen":"2023-04-11T22:55:51Z","last_seen":"2024-08-21T09:31:49.469757Z","times_seen":172,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":90,"dns":44,"connect":19,"send":0,"wait":19,"receive":62,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"absenceoverload.com/44/62/0b/44620b6b0b268f1fdb849874b56f5465.js","fqdn":"absenceoverload.com","domain":"absenceoverload.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paltrypaste.com/tso.html","date":"2024-07-07T04:28:47.593Z","timestamp":1720326527593,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"absenceoverload.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Jun 2024 14:07:46 GMT","end":"Fri, 27 Sep 2024 14:07:45 GMT"},"fingerprint":{"sha1":"08:30:32:85:74:29:F7:9C:F3:88:D7:EC:86:19:CE:C7:33:CF:B5:2F","sha256":"32:80:F3:51:C1:55:A1:47:F3:8B:C2:6E:FF:B9:14:8E:8E:0D:D4:94:D1:9C:FF:C7:67:1F:75:92:E3:C5:32:99"}}},"request":{"raw":"GET /44/62/0b/44620b6b0b268f1fdb849874b56f5465.js HTTP/1.1\r\nHost: absenceoverload.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paltrypaste.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Sun, 07 Jul 2024 04:28:48 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 678448cf2cbb121c480d68022e78544d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84247,"size_decoded":84247,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"980dd427fa4fcdc01b6dcdbb9c0b66a2","sha1":"bff07692fb40d0d4bbc435fcd42e191adc634ba5","sha256":"cd453ee056abcf09f0e4f0b8443127e9d2c8e0b4b38858d5879ca0ef90957417","sha512":"35f3e9689df55ce7f886b3c2f62a24cb1a3f97af08f9f295b5d37a6e273f531fd1709d465ed6a63d96ef74e5b0b368964b32066e575540f84593676a2fdd4b6a","ssdeep":"1536:3u8/QZx7ERV/PaSAAfJxm8AAeccI10y79pXLIZIhCau9:ExnEtAA8GvpWku9","tlshash":"0183d78e3f9ab05603f6f076622fd12ff12e0c5352c8d498d623a49c6bad70bd535a19","first_seen":"2024-08-19T17:45:43.082943Z","last_seen":"2024-08-19T17:45:43.082943Z","times_seen":1,"resource_available":true,"data":null}},"time_used":935,"timings":{"blocked":358,"dns":18,"connect":104,"send":0,"wait":111,"receive":105,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}