Report - pastebin.com/raw/GmQpNnVi

Report Overview

Visited public
2023-09-20 05:38:16
Tags
URL
pastebin.com/raw/GmQpNnVi
Finishing URL
pastebin.com/raw/GmQpNnVi
IP / ASN
172.67.34.170
#13335 CLOUDFLARENET
Title
pastebin.com/raw/GmQpNnVi

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
pastebin.com	25623	2002-09-04	2012-05-20 20:39:30	2023-09-19 13:48:07	916 B	2.8 kB	172.67.34.170

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-20 05:38:12	high	54.37.238.86	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	pastebin.com/favicon.ico	172.67.34.170	200 OK	318 B
URL GET HTTP/2 pastebin.com/favicon.ico IP 172.67.34.170:443 ASN #13335 CLOUDFLARENET Requested by https://pastebin.com/raw/GmQpNnVi Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint55:C8:82:61:30:05:42:80:DB:47:5E:D0:66:B5:DF:AC:14:5B:19:6F ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT File type MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel\012- data Size 318 B (318 bytes) Hash de86a6f000f8f84e20bc7eb2c7d320e3 35af87deef9e6c081d834d08963ada2530dc0618 6a5e064af00286681a3ae734e5407a2ea883955d875c5490e597d1ddb8eda021 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: pastebin.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pastebin.com/raw/GmQpNnVi Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Wed, 20 Sep 2023 05:38:00 GMT content-type: image/x-icon last-modified: Thu, 06 Jul 2023 08:38:48 GMT etag: W/"64a67d98-13e" cache-control: max-age=31536000 cf-cache-status: HIT age: 6337 vary: Accept-Encoding server: cloudflare cf-ray: 8097b83e0fc556ca-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	pastebin.com/raw/GmQpNnVi	172.67.34.170	200 OK	1.7 kB
URL User Request GET HTTP/2 pastebin.com/raw/GmQpNnVi IP 172.67.34.170:443 ASN #13335 CLOUDFLARENET Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint55:C8:82:61:30:05:42:80:DB:47:5E:D0:66:B5:DF:AC:14:5B:19:6F ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT File type ASCII text, with very long lines (1864), with no line terminators Size 1.7 kB (1746 bytes) Hash dfec3c3c4ef02ff6c4e8294467f6e880 af0f97598ecda6c3cd97f64eef59d9df62b41f22 1c0f11c9b1ca52cfc2ca38895b0b196c0c9f9ad186f030b0b90f5d8a1c004422 HTTP Headers `GET /raw/GmQpNnVi HTTP/1.1 Host: pastebin.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Wed, 20 Sep 2023 05:37:59 GMT content-type: text/plain; charset=utf-8 x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 cf-cache-status: EXPIRED last-modified: Tue, 19 Sep 2023 12:43:03 GMT vary: Accept-Encoding server: cloudflare cf-ray: 8097b8390cf956ca-OSL content-encoding: gzip X-Firefox-Spdy: h2`