WEBSITE ANALYSIS REPORT

http://pasteflash.com

06 Sep 2026 · 12:57:06.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

acceptableredheadcaviar.com4 captured requests
c.adsco.re1 captured requests
cdn.bakestubborn.com8 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com14 captured requests
cdn4ads.com1 captured requests
cx.dornrusky.com1 captured requests
exemplarfederallithe.com30 captured requests
flushpersist.com1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
mamshirt.com2 captured requests
pasteflash.com7 captured requests
portalfluently.com2 captured requests
protrafficinspector.com1 captured requests
rewardio-online.com7 captured requests
sowve.com4 captured requests
spendsdetachment.com4 captured requests
static.nresystems.com1 captured requests
wingsmob.com2 captured requests
www.cdn4ads.com1 captured requests
zoologyfibre.com15 captured requests

Connections

pasteflash.com → acceptableredheadcaviar.comLoads from4 captured connections
pasteflash.com → c.adsco.reLoads from1 captured connections
pasteflash.com → cdn.bakestubborn.comCalls3 captured connections
pasteflash.com → cdn.bakestubborn.comLoads from5 captured connections
pasteflash.com → cdn.show-creative1.comCalls1 captured connections
pasteflash.com → cdn.storageimagedisplay.comLoads from14 captured connections
pasteflash.com → cdn4ads.comLoads from1 captured connections
pasteflash.com → cx.dornrusky.comLoads from1 captured connections
pasteflash.com → exemplarfederallithe.comCalls6 captured connections
pasteflash.com → exemplarfederallithe.comLoads from24 captured connections
pasteflash.com → flushpersist.comLoads from1 captured connections
pasteflash.com → fonts.googleapis.comLoads from1 captured connections
pasteflash.com → fonts.gstatic.comLoads from2 captured connections
pasteflash.com → mamshirt.comLoads from2 captured connections
pasteflash.com → portalfluently.comLoads from2 captured connections
pasteflash.com → protrafficinspector.comCalls1 captured connections
pasteflash.com → sowve.comCalls1 captured connections
pasteflash.com → sowve.comLoads from1 captured connections
pasteflash.com → sowve.comRedirects to1 captured connections
pasteflash.com → spendsdetachment.comCalls3 captured connections
pasteflash.com → spendsdetachment.comLoads from1 captured connections
pasteflash.com → static.nresystems.comLoads from1 captured connections
pasteflash.com → wingsmob.comCalls1 captured connections
pasteflash.com → wingsmob.comLoads from1 captured connections
pasteflash.com → www.cdn4ads.comLoads from1 captured connections
pasteflash.com → zoologyfibre.comCalls7 captured connections
pasteflash.com → zoologyfibre.comLoads from8 captured connections
sowve.com → rewardio-online.comRedirects to2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:56:26.684 GET 200 document 11.7 KB 338 ms 1 alerts

12:56:27.389 GET 200 script 819 B 47 ms 1 alerts

12:56:27.445 GET 200 img 535.1 KB 244 ms 1 alerts

12:56:27.446 GET 200 script 47.8 KB 192 ms 1 alerts

12:56:27.689 GET 200 xhr 40 B 111 ms —

12:56:27.822 GET 307 xhr 0 B 500 ms 1 alerts

12:56:28.329 GET 200 xhr 3.9 KB 114 ms 1 alerts

12:56:28.493 GET 200 img 21.7 KB 147 ms —

12:56:28.495 GET 200 img 0 B 0 ms 1 alerts

12:56:29.477 POST 200 fetch 0 B 412 ms 1 alerts

12:56:47.389 GET 200 document 18.0 KB 1127 ms 1 alerts

12:56:48.303 GET 200 script 819 B 46 ms 1 alerts

12:56:48.305 GET 200 script 5 B 189 ms —

12:56:48.534 GET 200 script 1.2 KB 46 ms 1 alerts

12:56:48.539 GET 200 script 40.9 KB 3173 ms —

12:56:48.586 GET 200 script 45.0 KB 109 ms 1 alerts

12:56:48.589 GET 200 script 47.8 KB 126 ms 1 alerts

12:56:48.712 GET 200 script 4.3 KB 54 ms —

12:56:48.714 GET 200 xhr 14.6 KB 622 ms 1 alerts

12:56:48.716 GET 200 script 79.4 KB 110 ms —

12:56:48.737 GET 307 xhr 0 B 103 ms 2 alerts

12:56:48.788 GET 200 xhr 14.7 KB 606 ms 1 alerts

12:56:48.849 GET 200 xhr 3.9 KB 52 ms 2 alerts

Transaction #11

Request / response

URL

GET HTTPS

https://spendsdetachment.com/watch.394239525525.js?dev=e&fstu=01a076ca-f9c0-706f-a74e-75b64b3b8099&key=21b0e994d14a596d05cc4cc50311bbc7&kw=%5B%22005%22%2C%22%E2%80%93%22%2C%22pasteflash%22%5D&ps1=1788699408&rb=e&refer=https%3A%2F%2Fpasteflash.com%2Fn2XOkkPZ&res=14.1055&rmtc=t&sht=EKq_EYQ4VdMGufQ0J9JHRxxKnbslmeVdFb9diLj2WBk&shv=2&st1=4fe8973d17bea1050101bd86e94e5016&tz=0&uuid=01a076ca-a78e-78c2-801d-a9236aabac53%3A3%3A1

IP / ASN

23.111.84.4

AS7979 · SERVERS-COM

Requested by: https://pasteflash.com/n2XOkkPZ

Resource information

File type: JavaScript source, ASCII text, with very long lines (3117)
MIME type: text/html
First seen (UTC): 06 Sep 2026 · 12:57:22.910 UTC
Last seen (UTC): 06 Sep 2026 · 12:57:22.910 UTC
Times seen: 1

Size: 3.9 KB (3993 bytes)
MD5: b348a85934007d10429ada1497c5b016
SHA1: cc87bd9110e25cd123a607ba0bab679fbd5a5e08
SHA256: 186e35f85c8baf14091e85319163eb9a3ad0682618668f3ba8bc67df01bd5bf5

Certificate information

Issuer: Let's Encrypt · YR2
Subject: spendsdetachment.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2
Valid from: Wed, 26 Aug 2026 04:27:12 GMT
Valid until: Tue, 24 Nov 2026 04:27:11 GMT

Technology fingerprints

Nginx:1.30.2 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /watch.394239525525.js?dev=e&fstu=01a076ca-f9c0-706f-a74e-75b64b3b8099&key=21b0e994d14a596d05cc4cc50311bbc7&kw=%5B%22005%22%2C%22%E2%80%93%22%2C%22pasteflash%22%5D&ps1=1788699408&rb=e&refer=https%3A%2F%2Fpasteflash.com%2Fn2XOkkPZ&res=14.1055&rmtc=t&sht=EKq_EYQ4VdMGufQ0J9JHRxxKnbslmeVdFb9diLj2WBk&shv=2&st1=4fe8973d17bea1050101bd86e94e5016&tz=0&uuid=01a076ca-a78e-78c2-801d-a9236aabac53%3A3%3A1 HTTP/1.1
Host: spendsdetachment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Origin: https://pasteflash.com
Referer: https://pasteflash.com/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=01a076ca-a78e-78c2-801d-a9236aabac53:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.D05Ns47h7VRfkMv2jD2dzTV_5I95HZjkyJGWmyR5VVM
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.30.2
Date: Sun, 06 Sep 2026 12:56:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform
access-control-allow-credentials: true
access-control-allow-origin: https://pasteflash.com
content-encoding: zstd
set-cookie: uid_id2=01a076ca-a78e-78c2-801d-a9236aabac53:3:1; Path=/; Expires=Sun, 13 Sep 2026 12:56:48 GMT; Secure; SameSite=None
pdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 12:56:48 GMT; Secure; SameSite=None
uncs=1; Path=/; Expires=Mon, 07 Sep 2026 12:56:48 GMT; Secure; SameSite=None
pdhtkv23=true; Path=/; Expires=Mon, 07 Sep 2026 12:56:48 GMT; Secure; SameSite=None
uncs23=1; Path=/; Expires=Mon, 07 Sep 2026 12:56:48 GMT; Secure; SameSite=None
u_pl28759353=1; Path=/; Expires=Mon, 07 Sep 2026 12:56:48 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 19
Host: spendsdetachment.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 4e5a04f6b56d28d9234e49c32ff102c1
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

12:56:48.927 GET 200 script 37.1 KB 111 ms 1 alerts

12:56:48.930 GET 200 img 0 B 0 ms —

12:56:48.978 GET 200 xhr 76 B 105 ms —

12:56:48.985 GET 200 img 80.3 KB 52 ms —

12:56:48.987 GET 200 img 0 B 0 ms 2 alerts

12:56:49.347 GET 200 img 145.6 KB 43 ms —

12:56:49.348 GET 200 img 132.3 KB 58 ms —

12:56:49.349 GET 200 img 22.0 KB 58 ms —

12:56:49.353 GET 200 img 147.9 KB 64 ms —

12:56:49.357 GET 200 img 0 B 0 ms 1 alerts

12:56:49.358 GET 200 img 0 B 0 ms 1 alerts

12:56:49.359 GET 200 img 0 B 0 ms 1 alerts

12:56:49.360 GET 200 img 0 B 0 ms 1 alerts

12:56:49.361 GET 200 img 0 B 0 ms 1 alerts

12:56:49.363 GET 200 img 0 B 0 ms 1 alerts

12:56:49.364 GET 200 img 0 B 0 ms 1 alerts

12:56:49.365 GET 200 img 0 B 0 ms 1 alerts

12:56:49.402 GET 200 img 17.3 KB 20 ms —

12:56:49.404 GET 200 img 22.4 KB 28 ms —

12:56:49.406 GET 200 img 32.8 KB 25 ms —

12:56:49.411 GET 200 img 22.3 KB 21 ms —

12:56:49.422 POST 200 fetch 0 B 397 ms 1 alerts

12:56:49.424 GET 200 img 0 B 0 ms 1 alerts

12:56:49.425 GET 200 img 0 B 0 ms 1 alerts

12:56:49.427 GET 200 img 0 B 0 ms 1 alerts

12:56:49.428 GET 200 img 0 B 0 ms 1 alerts

12:56:49.429 GET 200 img 0 B 0 ms 1 alerts

http://pasteflash.com

Domain graph

Hostnames

Connections

Network requests

Transaction #11

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://pasteflash.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #11

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://pasteflash.com

Domain graph

Network requests