Report - pastebin.com/raw/Y1iemtEh

Report Overview

Visited public
2023-09-20 05:31:19
Tags
URL
pastebin.com/raw/Y1iemtEh
Finishing URL
pastebin.com/raw/Y1iemtEh
IP / ASN
104.20.68.143
#13335 CLOUDFLARENET
Title
pastebin.com/raw/Y1iemtEh

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
pastebin.com	25623	2002-09-04	2012-05-20 20:39:30	2023-09-19 13:48:07	916 B	1.8 kB	104.20.68.143

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-20 05:31:02	high	54.37.238.86	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	pastebin.com/raw/Y1iemtEh	104.20.68.143	200 OK	702 B
URL User Request GET HTTP/2 pastebin.com/raw/Y1iemtEh IP 104.20.68.143:443 ASN #13335 CLOUDFLARENET Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint55:C8:82:61:30:05:42:80:DB:47:5E:D0:66:B5:DF:AC:14:5B:19:6F ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT File type ASCII text, with very long lines (734), with no line terminators Size 702 B (702 bytes) Hash 119b92dd5f802536d3db8bd45115a203 65b9248bb76810cb0e2dae580507f319f3d7d083 696abc7be5120639f2fe753af602a5fc4ccca0072c4396612d9d15f5a0d8605c HTTP Headers `GET /raw/Y1iemtEh HTTP/1.1 Host: pastebin.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Wed, 20 Sep 2023 05:31:03 GMT content-type: text/plain; charset=utf-8 x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 cf-cache-status: EXPIRED last-modified: Tue, 19 Sep 2023 12:23:47 GMT vary: Accept-Encoding server: cloudflare cf-ray: 8097ae0f28c55689-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	pastebin.com/favicon.ico	104.20.68.143	200 OK	318 B
URL GET HTTP/2 pastebin.com/favicon.ico IP 104.20.68.143:443 ASN #13335 CLOUDFLARENET Requested by https://pastebin.com/raw/Y1iemtEh Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint55:C8:82:61:30:05:42:80:DB:47:5E:D0:66:B5:DF:AC:14:5B:19:6F ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT File type MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel\012- data Size 318 B (318 bytes) Hash de86a6f000f8f84e20bc7eb2c7d320e3 35af87deef9e6c081d834d08963ada2530dc0618 6a5e064af00286681a3ae734e5407a2ea883955d875c5490e597d1ddb8eda021 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: pastebin.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pastebin.com/raw/Y1iemtEh Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Wed, 20 Sep 2023 05:31:03 GMT content-type: image/x-icon last-modified: Thu, 06 Jul 2023 08:38:48 GMT etag: W/"64a67d98-13e" cache-control: max-age=31536000 cf-cache-status: HIT age: 5920 vary: Accept-Encoding server: cloudflare cf-ray: 8097ae127b2e5689-OSL content-encoding: gzip X-Firefox-Spdy: h2`