WEBSITE ANALYSIS REPORT

http://pasteflash.com

06 Sep 2026 · 12:57:06.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

acceptableredheadcaviar.com4 captured requests
c.adsco.re1 captured requests
cdn.bakestubborn.com8 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com14 captured requests
cdn4ads.com1 captured requests
cx.dornrusky.com1 captured requests
exemplarfederallithe.com30 captured requests
flushpersist.com1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
mamshirt.com2 captured requests
pasteflash.com7 captured requests
portalfluently.com2 captured requests
protrafficinspector.com1 captured requests
rewardio-online.com7 captured requests
sowve.com4 captured requests
spendsdetachment.com4 captured requests
static.nresystems.com1 captured requests
wingsmob.com2 captured requests
www.cdn4ads.com1 captured requests
zoologyfibre.com15 captured requests

Connections

pasteflash.com → acceptableredheadcaviar.comLoads from4 captured connections
pasteflash.com → c.adsco.reLoads from1 captured connections
pasteflash.com → cdn.bakestubborn.comCalls3 captured connections
pasteflash.com → cdn.bakestubborn.comLoads from5 captured connections
pasteflash.com → cdn.show-creative1.comCalls1 captured connections
pasteflash.com → cdn.storageimagedisplay.comLoads from14 captured connections
pasteflash.com → cdn4ads.comLoads from1 captured connections
pasteflash.com → cx.dornrusky.comLoads from1 captured connections
pasteflash.com → exemplarfederallithe.comCalls6 captured connections
pasteflash.com → exemplarfederallithe.comLoads from24 captured connections
pasteflash.com → flushpersist.comLoads from1 captured connections
pasteflash.com → fonts.googleapis.comLoads from1 captured connections
pasteflash.com → fonts.gstatic.comLoads from2 captured connections
pasteflash.com → mamshirt.comLoads from2 captured connections
pasteflash.com → portalfluently.comLoads from2 captured connections
pasteflash.com → protrafficinspector.comCalls1 captured connections
pasteflash.com → sowve.comCalls1 captured connections
pasteflash.com → sowve.comLoads from1 captured connections
pasteflash.com → sowve.comRedirects to1 captured connections
pasteflash.com → spendsdetachment.comCalls3 captured connections
pasteflash.com → spendsdetachment.comLoads from1 captured connections
pasteflash.com → static.nresystems.comLoads from1 captured connections
pasteflash.com → wingsmob.comCalls1 captured connections
pasteflash.com → wingsmob.comLoads from1 captured connections
pasteflash.com → www.cdn4ads.comLoads from1 captured connections
pasteflash.com → zoologyfibre.comCalls7 captured connections
pasteflash.com → zoologyfibre.comLoads from8 captured connections
sowve.com → rewardio-online.comRedirects to2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)	Method	Status	Type	Size	Duration	Signals
12:56:26.684	GET	200	document	11.7 KB	338 ms	1 alerts

12:56:27.389	GET	200	script	819 B	47 ms	1 alerts

12:56:27.445	GET	200	img	535.1 KB	244 ms	1 alerts

12:56:27.446	GET	200	script	47.8 KB	192 ms	1 alerts

12:56:27.689	GET	200	xhr	40 B	111 ms	—

12:56:27.822	GET	307	xhr	0 B	500 ms	1 alerts

12:56:28.329	GET	200	xhr	3.9 KB	114 ms	1 alerts

12:56:28.493	GET	200	img	21.7 KB	147 ms	—

12:56:28.495	GET	200	img	0 B	0 ms	1 alerts

12:56:29.477	POST	200	fetch	0 B	412 ms	1 alerts

12:56:47.389	GET	200	document	18.0 KB	1127 ms	1 alerts

12:56:48.303	GET	200	script	819 B	46 ms	1 alerts

12:56:48.305	GET	200	script	5 B	189 ms	—

12:56:48.534	GET	200	script	1.2 KB	46 ms	1 alerts

12:56:48.539	GET	200	script	40.9 KB	3173 ms	—

12:56:48.586	GET	200	script	45.0 KB	109 ms	1 alerts

12:56:48.589	GET	200	script	47.8 KB	126 ms	1 alerts

12:56:48.712	GET	200	script	4.3 KB	54 ms	—

12:56:48.714	GET	200	xhr	14.6 KB	622 ms	1 alerts

12:56:48.716	GET	200	script	79.4 KB	110 ms	—
Transaction #28 Request / response URL GET HTTPS https://wingsmob.com/9/4af6fc9974eec834c116f22db532b568 IP / ASN 104.18.27.190 AS13335 · CLOUDFLARENET Transaction actions#28 Investigate Download resource79.4 KB (81288 bytes) Captured resources may contain malicious code. Sign in to download Raw file and protected ZIP External sources Requested by https://pasteflash.com/n2XOkkPZ Resource information File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators MIME type application/javascript First seen (UTC) 06 Sep 2026 · 12:57:22.928 UTC Last seen (UTC) 06 Sep 2026 · 12:57:22.928 UTC Times seen 1 Size 79.4 KB (81288 bytes) MD5 d451e6fa37d747952f305da044266526 SHA1 472045c37961967dbba68a9268e6945144683b7b SHA256 078fc7aaa5f3af3a3f18caec0dedf915a3dc6a797477596aaef3e36289d5453e Certificate information Issuer Google Trust Services · WE1 Subject wingsmob.com Protocol / cipher TLSv1.3 · TLS_AES_128_GCM_SHA256 SHA1 fingerprint 56:46:F3:10:2C:FE:A3:88:D7:31:85:4E:08:B1:25:FF:EB:0A:2C:81 Valid from Wed, 29 Jul 2026 09:49:13 GMT Valid until Tue, 27 Oct 2026 10:49:00 GMT Technology fingerprints Cloudflare (CDN) Envoy (Reverse proxies) HTTP headers Request headers `GET /9/4af6fc9974eec834c116f22db532b568 HTTP/1.1 Host: wingsmob.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br, zstd Sec-Fetch-Storage-Access: none Sec-GPC: 1 Connection: keep-alive Referer: https://pasteflash.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` Response headers HTTP/2 200 date: Sun, 06 Sep 2026 12:56:48 GMT content-type: application/javascript server: cloudflare set-cookie: uidm=01a076ca-f999-740d-bc7f-4e64e1cde81d_1; Path=/; Expires=Wed, 03 Sep 2036 12:56:48 GMT; Secure; SameSite=None __cf_bm=N1v92gz2hxP3q0y9EqFzcs4P1jPJmOwRWUVeUf41Cqs-1788699408.7408774-1.0.1.1-WkMvoS1aDXkqo1NOlohENXIA16l6HL4DOrWUu_wQ27IaRi1BnKtWYvb19yIe6U05JpkFd_7fPMXxLyKXWDDj7Yp_Hp77NRwhQ47E0C1oGqLP9cuCaIJQxfkuOvMMquWD; HttpOnly; SameSite=None; Secure; Path=/; Domain=wingsmob.com; Expires=Sun, 06 Sep 2026 13:26:48 GMT accept-ch: X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile content-encoding: gzip link: <https://sowve.com>; rel=preconnect; crossorigin, <https://sowve.com>; rel=dns-prefetch, <https://static.nresystems.com>; rel=preconnect; crossorigin, <https://static.nresystems.com>; rel=dns-prefetch vary: Accept-Encoding, Origin x-envoy-upstream-service-time: 9 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-cache, max-age=0, private, no-cache x-request-id: 146a263b50b52f749c3ec82d6d7b7c17 pragma: no-cache access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values access-control-expose-headers: Content-Length,Content-Range access-control-allow-credentials: true access-control-max-age: 1728000 cf-cache-status: DYNAMIC cf-ray: a36da2c89dad56a8-OSL X-Firefox-Spdy: h2
12:56:48.737	GET	307	xhr	0 B	103 ms	2 alerts

12:56:48.788	GET	200	xhr	14.7 KB	606 ms	1 alerts

12:56:48.849	GET	200	xhr	3.9 KB	52 ms	2 alerts

12:56:48.927	GET	200	script	37.1 KB	111 ms	1 alerts

12:56:48.930	GET	200	img	0 B	0 ms	—

12:56:48.978	GET	200	xhr	76 B	105 ms	—

12:56:48.985	GET	200	img	80.3 KB	52 ms	—

12:56:48.987	GET	200	img	0 B	0 ms	2 alerts

12:56:49.347	GET	200	img	145.6 KB	43 ms	—

12:56:49.348	GET	200	img	132.3 KB	58 ms	—

12:56:49.349	GET	200	img	22.0 KB	58 ms	—

12:56:49.353	GET	200	img	147.9 KB	64 ms	—

12:56:49.357	GET	200	img	0 B	0 ms	1 alerts

12:56:49.358	GET	200	img	0 B	0 ms	1 alerts

12:56:49.359	GET	200	img	0 B	0 ms	1 alerts

12:56:49.360	GET	200	img	0 B	0 ms	1 alerts

12:56:49.361	GET	200	img	0 B	0 ms	1 alerts

12:56:49.363	GET	200	img	0 B	0 ms	1 alerts

12:56:49.364	GET	200	img	0 B	0 ms	1 alerts

12:56:49.365	GET	200	img	0 B	0 ms	1 alerts

12:56:49.402	GET	200	img	17.3 KB	20 ms	—

12:56:49.404	GET	200	img	22.4 KB	28 ms	—

12:56:49.406	GET	200	img	32.8 KB	25 ms	—

12:56:49.411	GET	200	img	22.3 KB	21 ms	—

12:56:49.422	POST	200	fetch	0 B	397 ms	1 alerts

12:56:49.424	GET	200	img	0 B	0 ms	1 alerts

12:56:49.425	GET	200	img	0 B	0 ms	1 alerts

12:56:49.427	GET	200	img	0 B	0 ms	1 alerts

12:56:49.428	GET	200	img	0 B	0 ms	1 alerts

12:56:49.429	GET	200	img	0 B	0 ms	1 alerts

http://pasteflash.com

Domain graph

Hostnames

Connections

Network requests

Transaction #28

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://pasteflash.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #28

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

http://pasteflash.com

Domain graph

Network requests