{"report_id":"690cd933-722f-4d5f-82ad-2151550607e8","version":6,"status":"done","tags":[],"date":"2026-05-12T15:00:07Z","url":{"schema":"https","addr":"htmlpreview.github.io/?https://paste.rs/rM76o?r=1778597973140","fqdn":"htmlpreview.github.io","domain":"htmlpreview.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"unctadstat-api.unctad.org/datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4","fqdn":"unctadstat-api.unctad.org","domain":"unctad.org","tld":"org"},"title":"unctadstat-api.unctad.org/datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4","dom":{"size":27020,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27020), with no line terminators","md5":"b77f814e8e25ffd293bd6dc2fd512e78","sha1":"3971099b144dfb31f83da915e1b593d753ad6343","sha256":"b0aa3d7ab055a5d9be3c5c8aca75c1cc56bf40a1cc46eb81700f4a1e8a1d5642","sha512":"86808504e62758edcf98d4517213dfb1ced980e5fdbe991315bc8b40df807381bf8ee5a7a2214128c00ac75e604172689dda591782dacb825c201e713704141a","ssdeep":"384:KFjnlUl49cFoL4YLIYL+ELBL4LyDaLW8LpLQO:KFLcFoL4YLIYL+ELBL4LoaLW8LpLQO","tlshash":"68c21ee079d18c39e89a16c8e0f0db29a0c3f59fdc929485ee9502fd27dada0354d2dd","dom_hash":"domhash4192813a29aabef1bfeea54e929c7f29","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"htmlpreview.github.io/?https://paste.rs/rM76o?r=1778597973140","fqdn":"htmlpreview.github.io","domain":"htmlpreview.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-16T15:00:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"htmlpreview.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"htmlpreview.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"paste.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"paste.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"paste.rs","ip":{"addr":"45.63.94.214","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"domain_registered":"2016-11-21","domain_rank":197362,"first_seen":"2018-08-29T09:39:20Z","last_seen":"2026-05-10T12:21:15.694349Z","alert_count":2,"request_count":1,"received_data":831,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.codetabs.com","ip":{"addr":"104.21.58.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-09-07","domain_rank":3131649,"first_seen":"2018-11-13T14:04:03Z","last_seen":"2026-05-10T10:10:58.21308Z","alert_count":0,"request_count":1,"received_data":1066,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unctadstat-api.unctad.org","ip":{"addr":"172.66.174.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-02-17","domain_rank":0,"first_seen":"2026-04-13T01:13:45.518265Z","last_seen":"2026-05-05T19:06:52.504582Z","alert_count":0,"request_count":1,"received_data":975,"sent_data":747,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"htmlpreview.github.io","ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":1115930,"first_seen":"2013-12-05T17:36:09Z","last_seen":"2026-05-06T14:32:12.865847Z","alert_count":6,"request_count":3,"received_data":17347,"sent_data":1487,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"htmlpreview.github.io/htmlpreview.js","fqdn":"htmlpreview.github.io","domain":"htmlpreview.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dda994c4fc9b9d812cf528f7001eeccd","sha1":"86963cc3558673a993493dd21e810d1928d9aed9","sha256":"68636cf5930de24848122bb2f2650a20bc160d9e99377454ca084861c05f8842","sha512":"424a096981a11f196ef8ea382c2191367f94a66a99617f8bcca1d731e514ef71c2c2af8392e8eba5fe71dd65665e72dc88786fb590d2d79e18df1abbc700befb","ssdeep":"96:iCifKKYpnfePmGTf43wbfvNgr7Vf26xWsbBXaUpVFOGYEhjn38v:ijYpfAD74ADvghIeXaUf5R38v","tlshash":"31a195b19b1e853e0332b1e189b5f1d8617e5116fc01d807cc98da5858e8f7e759dca4","size":4664,"data":"","first_seen":"2023-03-14T04:55:30Z","last_seen":"2026-06-15T07:25:53.051551Z","times_seen":1299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"htmlpreview.github.io/?https://paste.rs/rM76o?r=1778597973140","fqdn":"htmlpreview.github.io","domain":"htmlpreview.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"606a1f75fc8a252fa55abd4618c7db92","sha1":"8830363faefdc20458caf8b156712cfb70c922b9","sha256":"5ea7390dcb2904d3245444912208b1978bf1943c904ad4d6c27a556dc9a58a09","sha512":"779099a4e3f47354d544f793ae3ab8f311e6bf8f6b837c3411dac812cb18d69374bf373d2db29de8ffbe53c297837a1d342b536a46d896d580e7fd899ba91f6d","ssdeep":"","tlshash":"f25000000c3303c00000003c00000000000030c00000000000300c30000cc00000000c","size":10,"data":"","first_seen":"2026-04-27T05:49:49.161409Z","last_seen":"2026-06-15T08:39:17.092446Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"9d2bdadff932c44fd8bb7a68cd9dd07b","sha1":"23a32229f3c1cb2e01af6b9a34f0e8de1eda1641","sha256":"b47b19b5435c64d550d2ccdde9e4a2204e70743c4c8a91265a7c2a3920e43369","sha512":"ab142744b123660a7c07412ed5b523ff9e274babe5f6bd7aa83956aef8a284bd2a7d276b6a35e9f2cd2e32bce8f48053699af96fdfaf5b3249c31f7c79dc6ad5","ssdeep":"","tlshash":"35f023e33c50de985e160df0edd35406e46ceb512b04de4227d512a999ec24a0635fcf","size":482,"data":"","first_seen":"2026-05-12T15:00:08.939789Z","last_seen":"2026-05-12T15:00:08.939789Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"htmlpreview.github.io/?https://paste.rs/rM76o?r=1778597973140","fqdn":"htmlpreview.github.io","domain":"htmlpreview.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-12T14:59:45.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /?https://paste.rs/rM76o?r=1778597973140 HTTP/1.1\r\nHost: htmlpreview.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sun, 11 Jul 2021 09:15:51 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"60eab6c7-4f5\"\r\nexpires: Tue, 12 May 2026 02:46:01 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: F990:2C3C9:C93387:CAE2D0:6A029210\r\naccept-ranges: bytes\r\ndate: Tue, 12 May 2026 14:59:45 GMT\r\nvia: 1.1 varnish\r\nage: 83\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 2\r\nx-timer: S1778597986.683847,VS0,VE0\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 41d9f91cb65f52e3e87098f49df9e89902786a14\r\ncontent-length: 680\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":1269,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"00fea4290c2fb473a36da40ac1987f35","sha1":"5069f27b01308f3cf71c9d7f3a5c924e3a91b243","sha256":"5497ad8c2cbbc4e89f76417df799a907f3dab0f387802d7fc763fffd0a960e71","sha512":"d1b2e49ba42cbc689fa0901b4607d863976f65b20308cf73d7c4f83ff9934659fafed6632a3f2a808b881ffa77639de62bb41d6a50cdd304d468fd7d0c5075b5","ssdeep":"","tlshash":"312154e3e72543421f0b3cd4aee8e394b52b24066a114fdef022412df4f4619169c6c4","first_seen":"2023-09-24T05:58:09Z","last_seen":"2026-06-15T07:25:53.05678Z","times_seen":1296,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":28,"dns":0,"connect":13,"send":0,"wait":14,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"htmlpreview.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"htmlpreview.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"htmlpreview.github.io/htmlpreview.js","fqdn":"htmlpreview.github.io","domain":"htmlpreview.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://htmlpreview.github.io/?https://paste.rs/rM76o?r=1778597973140","date":"2026-05-12T14:59:45.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /htmlpreview.js HTTP/1.1\r\nHost: htmlpreview.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://htmlpreview.github.io/?https://paste.rs/rM76o?r=1778597973140\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 11 Jul 2021 09:15:51 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"60eab6c7-1238\"\r\nexpires: Tue, 12 May 2026 03:45:29 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: B7A4:3862EF:D6A5B7:D885B9:6A02A001\r\naccept-ranges: bytes\r\ndate: Tue, 12 May 2026 14:59:45 GMT\r\nvia: 1.1 varnish\r\nage: 83\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 2\r\nx-timer: S1778597986.876622,VS0,VE0\r\nvary: Accept-Encoding\r\nx-fastly-request-id: dbdf5b578c8240c55b0917656af9b84daccd9a52\r\ncontent-length: 1566\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4664,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (322)","md5":"dda994c4fc9b9d812cf528f7001eeccd","sha1":"86963cc3558673a993493dd21e810d1928d9aed9","sha256":"68636cf5930de24848122bb2f2650a20bc160d9e99377454ca084861c05f8842","sha512":"424a096981a11f196ef8ea382c2191367f94a66a99617f8bcca1d731e514ef71c2c2af8392e8eba5fe71dd65665e72dc88786fb590d2d79e18df1abbc700befb","ssdeep":"96:iCifKKYpnfePmGTf43wbfvNgr7Vf26xWsbBXaUpVFOGYEhjn38v:ijYpfAD74ADvghIeXaUf5R38v","tlshash":"31a195b19b1e853e0332b1e189b5f1d8617e5116fc01d807cc98da5858e8f7e759dca4","first_seen":"2023-03-14T04:55:30Z","last_seen":"2026-06-15T07:25:53.051551Z","times_seen":1299,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"htmlpreview.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"htmlpreview.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paste.rs/rM76o?r=1778597973140","fqdn":"paste.rs","domain":"paste.rs","tld":"rs"},"ip":{"addr":"45.63.94.214","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://htmlpreview.github.io/?https://paste.rs/rM76o?r=1778597973140","date":"2026-05-12T14:59:45.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"paste.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:14:26 GMT","end":"Tue, 30 Jun 2026 10:14:25 GMT"},"fingerprint":{"sha1":"B8:DF:37:9A:71:C9:4E:32:97:CA:F2:62:24:66:11:94:68:D1:FE:E8","sha256":"D9:F8:E1:12:FF:9D:64:4C:9E:77:57:4D:99:10:BA:36:8C:29:E4:24:EC:D7:41:D8:EA:EB:8D:04:53:4D:C1:77"}}},"request":{"raw":"GET /rM76o?r=1778597973140 HTTP/1.1\r\nHost: paste.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://htmlpreview.github.io/\r\nOrigin: https://htmlpreview.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 12 May 2026 14:59:46 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 458\r\nConnection: close\r\npermissions-policy: interest-cohort=()\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains;\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"HTML document, ASCII text","md5":"acfab4f161ffa5d44fef29be2c0c3712","sha1":"fa63d76f1e34d1878b244f018940fcf188bf8a29","sha256":"050f437cf8dbacd646e0c72cd4e283555a97cd64591f87593a651a46a85c731f","sha512":"df5799cb493e80b84a9730b7b3bef0660e65c4a9bb9ca42d530abdf3041b0d8d3d3ed070eada25e653fd22d455453c7703de8df10287ef7bb8b75d9041d18864","ssdeep":"","tlshash":"42f023d33c10de545e150df0edd3140aa45cda512a04990117c5126495e42420635fce","first_seen":"2026-05-12T15:00:08.936505Z","last_seen":"2026-05-12T15:00:08.936505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":543,"dns":1,"connect":165,"send":0,"wait":266,"receive":1,"ssl":378},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"paste.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"paste.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"htmlpreview.github.io/favicon.ico","fqdn":"htmlpreview.github.io","domain":"htmlpreview.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://htmlpreview.github.io/?https://paste.rs/rM76o?r=1778597973140","date":"2026-05-12T14:59:46.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: htmlpreview.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://htmlpreview.github.io/?https://paste.rs/rM76o?r=1778597973140\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7D24:54D72:208C433:20CDAA8:6A033A36\r\naccept-ranges: bytes\r\ndate: Tue, 12 May 2026 14:59:46 GMT\r\nvia: 1.1 varnish\r\nage: 1579\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 4\r\nx-timer: S1778597986.031053,VS0,VE0\r\nvary: Accept-Encoding\r\nx-fastly-request-id: de1514da1363354749df8d71f05c48543015089c\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9379,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-06-15T10:34:33.091787Z","times_seen":17735,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"htmlpreview.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"htmlpreview.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.codetabs.com/v1/proxy/?quest=https://paste.rs/rM76o?r=1778597973140","fqdn":"api.codetabs.com","domain":"codetabs.com","tld":"com"},"ip":{"addr":"104.21.58.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://htmlpreview.github.io/?https://paste.rs/rM76o?r=1778597973140","date":"2026-05-12T14:59:46.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"codetabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 20:45:38 GMT","end":"Sat, 11 Jul 2026 21:43:07 GMT"},"fingerprint":{"sha1":"13:D6:1C:43:64:55:B0:37:84:D8:8F:D8:77:70:64:88:C9:01:07:DA","sha256":"68:0B:1B:C9:6A:BB:57:94:F4:EF:E6:B7:A4:82:F1:E3:C2:F1:DB:53:2A:C2:01:1A:F1:06:29:D1:40:DC:D6:A6"}}},"request":{"raw":"GET /v1/proxy/?quest=https://paste.rs/rM76o?r=1778597973140 HTTP/1.1\r\nHost: api.codetabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://htmlpreview.github.io/\r\nOrigin: https://htmlpreview.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 14:59:47 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZiLLaYKX%2F14dRb2ZqcdCAB4qkU2GA1v%2BL10p1YfkJkyjoD3u4qDM8P5xsQE0Vq%2Fz2i5Bd3uUiuXC0C0xzwLI5FFzfPGXrE%2Bj9deYfoI9bt5ZNwO7pstpWTNv6Ib7w1izaOse\"}]}\r\ncf-ray: 9faa4a09694923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458,"size_decoded":0,"mime_type":"text/plain","magic":"HTML document, ASCII text","md5":"acfab4f161ffa5d44fef29be2c0c3712","sha1":"fa63d76f1e34d1878b244f018940fcf188bf8a29","sha256":"050f437cf8dbacd646e0c72cd4e283555a97cd64591f87593a651a46a85c731f","sha512":"df5799cb493e80b84a9730b7b3bef0660e65c4a9bb9ca42d530abdf3041b0d8d3d3ed070eada25e653fd22d455453c7703de8df10287ef7bb8b75d9041d18864","ssdeep":"","tlshash":"42f023d33c10de545e150df0edd3140aa45cda512a04990117c5126495e42420635fce","first_seen":"2026-05-12T15:00:08.936505Z","last_seen":"2026-05-12T15:00:08.936505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":989,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":949,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unctadstat-api.unctad.org/datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4","fqdn":"unctadstat-api.unctad.org","domain":"unctad.org","tld":"org"},"ip":{"addr":"172.66.174.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-12T14:59:47.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unctad.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 09:27:35 GMT","end":"Wed, 05 Aug 2026 10:27:32 GMT"},"fingerprint":{"sha1":"2B:A7:72:CB:32:2D:65:6C:8D:F8:DB:A6:20:7F:D3:EE:CF:4C:1C:B1","sha256":"F4:E9:4E:F2:CE:A2:AE:2A:DE:B5:9C:F9:45:0D:56:5E:86:5D:FD:3F:35:6D:3C:FB:3E:A9:02:0C:C8:23:60:C8"}}},"request":{"raw":"POST /datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4 HTTP/1.1\r\nHost: unctadstat-api.unctad.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 173\r\nOrigin: https://htmlpreview.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://htmlpreview.github.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":173,"data":"%24select=Year%2CEconomy%2FCode%2CM3763%2CM5080\u0026%24filter=Industry%2FCode+eq+%27I02%27+and+Economy%2FCode+eq+%271640%27+and+Sex%2FCode+eq+%271%27+and+Year+eq+2010\u0026culture=en"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 14:59:47 GMT\r\ncontent-type: application/json; charset=utf-8; odata.metadata=minimal; odata.streaming=true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nrequest-context: appId=cid-v1:91d02cc2-becc-44a8-aeb0-03e315318773\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=24,cfOrigin;dur=54\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncf-ray: 9faa4a0fe9fcb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":342,"size_decoded":0,"mime_type":"application/vnd.mozilla.json.view; charset=utf-8","magic":"JSON text data","md5":"0885a672d81bba63f86a6acad2706b56","sha1":"55a9d6d64ea4488209c2f1411130641095870f74","sha256":"7fa319d10d9ad252a1285c18da62b3e2325655232a4c3ff7650666ec54e7f876","sha512":"5da4180e4a2eb514c5faad6437c4d5a0edb360a2765293f12e263e689fb3703cc0b432238bc9f90ec1747a2ae08b550aaec1ea184873589df489da4f1a14a145","ssdeep":"","tlshash":"ede0205bb894f17b35318483e537b901b7bcf06b68594c116b9ccfdcadc80a71114918","first_seen":"2026-05-12T15:00:08.937988Z","last_seen":"2026-05-12T15:00:08.937988Z","times_seen":1,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":85,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}