Report - pastenote.net/nxgmw

Report Overview

Visited public
2024-08-04 19:39:30
Tags
URL
pastenote.net/nxgmw
Finishing URL
pastenote.net/nxgmw
IP / ASN
160.153.128.2
#21501 Host Europe GmbH
Title
cp video leak teen - PasteNote.netPasteNote.net

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Sent	Received	IP
www.googletagmanager.com	75	873 B	168 kB	142.250.74.168
r11.o.lencr.org	unknown	327 B	887 B	23.36.76.226
caribedkurukh.com	unknown	409 B	1.5 kB	23.109.170.99
r10.o.lencr.org	unknown	2.6 kB	7.1 kB	23.33.119.57
pastenote.net	216623	7.2 kB	191 kB	160.153.128.2
o.pki.goog	unknown	650 B	1.4 kB	142.250.74.99

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-08-04	medium	caribedkurukh.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (12)

	URL	From	Size	First Seen	Last Seen
	caribedkurukh.com/t4vvXvWmagfWc/80526	ScriptElement	5 B	2023-03-07	2025-04-28
Pretty URL caribedkurukh.com/t4vvXvWmagfWc/80526 IP 23.109.170.99 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14 Last Seen2025-04-28 18:23 Times Seen5956 Hash f7a2939527fd9e68723da600e96d76bd a9e717b6364d2895ee0a716050db32ca0ef1bb42 d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a Loading...

	pastenote.net/static/site_static/js/bootstrap.min.js	ScriptElement	32 kB	2023-03-07	2025-04-28
Pretty URL pastenote.net/static/site_static/js/bootstrap.min.js IP 160.153.128.2 ASN #21501 Host Europe GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-04-28 20:58 Times Seen2918 Hash abda843684d022f3bc22bc83927fe05f 26908395e7a9a4eab607d80aa50a81d65f3017cb 24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f Loading...

	pastenote.net/static/site_static/js/plugins.js	ScriptElement	955 B	2023-12-10	2024-09-28
Pretty URL pastenote.net/static/site_static/js/plugins.js IP 160.153.128.2 ASN #21501 Host Europe GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-10 09:35 Last Seen2024-09-28 08:36 Times Seen38 Hash f2f44331791c0ccb9bf32ce8704042b2 5705afd47cb009d5ebe99f28112fedcebef9a74e 6f0a06036ab3b9b6701311cab9ffbfa76063b19bee1efdd7e4c4d4d449c5b05f Loading...

	pastenote.net/sandbox%20eval%20code		147 B	2023-04-11	2025-04-29
Pretty URL pastenote.net/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-04-29 07:11 Times Seen339184 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	www.google-analytics.com/analytics.js	ScriptElement	4.7 kB	2023-04-11	2025-04-29
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-04-29 07:11 Times Seen338394 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

	www.googletagmanager.com/gtag/js?id=G-LEB216M2DC&l=dataLayer&cx=c	ScriptElement	256 kB	2024-08-19	2024-08-19
Pretty URL www.googletagmanager.com/gtag/js?id=G-LEB216M2DC&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-19 14:39 Last Seen2024-08-19 14:39 Times Seen1 Hash c7e0ec27256263ae220a68eebfba6f7f 983e8bd8909fc63f69edd33c9368204e3513360b 33374dc73e3ebff86b622bbf2723a6673c4b1e159929c8c16c2db3726c90288c Loading...

	pastenote.net/static/site_static/js/jquery-1.11.1.min.js	ScriptElement	96 kB	2023-03-07	2025-04-29
Pretty URL pastenote.net/static/site_static/js/jquery-1.11.1.min.js IP 160.153.128.2 ASN #21501 Host Europe GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-04-29 06:08 Times Seen24931 Hash 8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441 Loading...

	pastenote.net/nxgmw	ScriptElement	0 B	0001-01-01	2025-04-29
Pretty URL pastenote.net/nxgmw IP 160.153.128.2 ASN #21501 Host Europe GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-04-29 07:30 Times Seen4571521 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	pastenote.net/static/site_static/js/popper.min.js	ScriptElement	21 kB	2023-03-07	2025-04-27
Pretty URL pastenote.net/static/site_static/js/popper.min.js IP 160.153.128.2 ASN #21501 Host Europe GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:21 Last Seen2025-04-27 15:10 Times Seen210 Hash e11897ebd453d3c3af1c11ba9564098b 12670810c3b4625b7f47fc99cfb3dd62689ee2a0 93d7d214a51f645213446ea00bf9a8b6d6a12ef89f4153b26c687f73664505ab Loading...

	pastenote.net/static/site_static/js/wow.min.js	ScriptElement	7.1 kB	2023-03-07	2025-04-28
Pretty URL pastenote.net/static/site_static/js/wow.min.js IP 160.153.128.2 ASN #21501 Host Europe GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:01 Last Seen2025-04-28 11:30 Times Seen291 Hash 5fa2e4b6acb5db11843b66b812040de3 13895175fe8fc3bb341af017a197ce8599e59451 36a88df037dc6c940450a9e251a34c9321d76d894d3d1734ee8cede45028d84c Loading...

	pastenote.net/nxgmw	ScriptElement	17 B	2023-03-07	2025-04-28
Pretty URL pastenote.net/nxgmw IP 160.153.128.2 ASN #21501 Host Europe GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:24 Last Seen2025-04-28 12:46 Times Seen326 Hash e52349c92d9c5d60645eee2ba3e4b279 7959a26efffd8ed32d632ff7186b66bce051dc5f 36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9 Loading...

	www.googletagmanager.com/gtag/js?id=UA-177418439-1	ScriptElement	214 kB	2024-08-19	2024-08-19
Pretty URL www.googletagmanager.com/gtag/js?id=UA-177418439-1 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-19 14:39 Last Seen2024-08-19 14:39 Times Seen1 Hash 0e7278f6369275bf18e06c801e1e5412 157e7a23e575f6e8587ab54872e85fa1d23d2148 7cae03715c25632a7486be4ed58545e845f05eeccf72f796c7cafbbdfc78b615 Loading...

HTTP Transactions (30)

URL IP Response Size

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
aadf4023fd478bb51576a5f2358b225e
a9d7b5d1e6a9d4f3fd800815a784607563dae142
cc1e53796ec8c93a6a4cf66399a32249a405bd6ec1bd7399d5926c11657868a9

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CC1E53796EC8C93A6A4CF66399A32249A405BD6EC1BD7399D5926C11657868A9"
Last-Modified: Sat, 03 Aug 2024 18:56:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8723
Expires: Sun, 04 Aug 2024 22:04:27 GMT
Date: Sun, 04 Aug 2024 19:39:04 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
fbcbba6bdbe62bf043a449052e96c537
78ba577fb46d8f5471d6b956b571a64840d68762
af55de43044220deca1e257adc161f81a25c20dd9e7208ee4efec19b1a194f2a

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "AF55DE43044220DECA1E257ADC161F81A25C20DD9E7208EE4EFEC19B1A194F2A"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10777
Expires: Sun, 04 Aug 2024 22:38:41 GMT
Date: Sun, 04 Aug 2024 19:39:04 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
8bd7201be8d12c4b511d2c5643b45dbc
f2ecb2ebafbf4f8d92f92007753001befcedc634
25cb2e6ad29d4503f32121fbe37e2b0f4ce64a7f6cb57233ebf16df5d6b78d53

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "25CB2E6AD29D4503F32121FBE37E2B0F4CE64A7F6CB57233EBF16DF5D6B78D53"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2910
Expires: Sun, 04 Aug 2024 20:27:34 GMT
Date: Sun, 04 Aug 2024 19:39:04 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ce1b905034e90f867689d7ecc2b1474a
3bd664cdb6cb4b15e019c8bb2aee3d05fbf76284
451d5e86e99d588962352e93af3efb99a57a3b7b3375ca25649ab65d4b2b07b9

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "451D5E86E99D588962352E93AF3EFB99A57A3B7B3375CA25649AB65D4B2B07B9"
Last-Modified: Sat, 03 Aug 2024 20:23:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9121
Expires: Sun, 04 Aug 2024 22:11:06 GMT
Date: Sun, 04 Aug 2024 19:39:05 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
3653abf0951eea060f104ae59d60cf7c
75790e8c59cb78c77ab522e7dc7140b62a046bb9
d059eeda67b64dd02259f5a9352df39cc808e3f9e03068a434e0f6486814893d

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D059EEDA67B64DD02259F5A9352DF39CC808E3F9E03068A434E0F6486814893D"
Last-Modified: Sat, 03 Aug 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14693
Expires: Sun, 04 Aug 2024 23:43:58 GMT
Date: Sun, 04 Aug 2024 19:39:05 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
78be19d93b8add0d8f3c63b67e490038
2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6
b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3269
Expires: Sun, 04 Aug 2024 20:33:36 GMT
Date: Sun, 04 Aug 2024 19:39:07 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
78be19d93b8add0d8f3c63b67e490038
2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6
b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3269
Expires: Sun, 04 Aug 2024 20:33:36 GMT
Date: Sun, 04 Aug 2024 19:39:07 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
78be19d93b8add0d8f3c63b67e490038
2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6
b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3364
Expires: Sun, 04 Aug 2024 20:35:11 GMT
Date: Sun, 04 Aug 2024 19:39:07 GMT
Connection: keep-alive

pastenote.net/nxgmw

160.153.128.2

200 OK

2.4 kB

URL User Request GET HTTP/2
pastenote.net/nxgmw
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
HTML document, ASCII text, with very long lines (349)
Size
2.4 kB (2363 bytes)
Hash
10847fd5338fe6ffeada94df8c5c862a
f4581ad9b90d94ad28d313d8682b00a29cedf250
0a093a3ea23e35a87a60e3a006135c7e3e77fd37553ece53f1b85f6930026931

HTTP Headers

GET /nxgmw HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Cookie,Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:05 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
status: 200 OK
content-encoding: br
content-length: 2363
content-type: text/html; charset=utf-8
server: Apache
X-Firefox-Spdy: h2

pastenote.net/

160.153.128.2

2.8 kB

URL
pastenote.net/
IP
160.153.128.2:0
ASN
#21501 Host Europe GmbH

Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
HTML document, ASCII text, with very long lines (349)
Size
2.8 kB (2819 bytes)
Hash
325f5907b236193c8fe6cd6b13e97624
37ce91b24332c1f8fe33774babb074c748244903
9b7f7aca87e4e26e422824166381e9ea2c65a655cdbf7196f3e668f914fa3c2e

HTTP Headers

GET / HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 04 Aug 2024 19:39:08 GMT
Server: Apache
Vary: Cookie,Accept-Encoding
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger(R) 6.0.22
Set-Cookie: csrftoken=HAOqQVM9LCF2EEYsdBllxxp92qr06kv0fdAByY3MKvVywzQzYRpdh8ZDUyOFyNfo; expires=Sun, 03 Aug 2025 19:39:15 GMT; Max-Age=31449600; Path=/; SameSite=Lax
Upgrade: h2,h2c
Status: 200 OK
Content-Encoding: gzip
Content-Length: 2819
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8

o.pki.goog/wr2

142.250.74.99

471 B

URL
o.pki.goog/wr2
IP
142.250.74.99:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
81a79c4b857dbae03350ec16019194a2
a8ec0d561c980e63a14eae3a37d55810cf5cb28d
a1a5e840420d4fe1c5c697d6d66e051889f881eb9b2cc381d7e37ee3ff329248

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Aug 2024 19:39:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtag/js?id=UA-177418439-1

142.250.74.168

200 OK

77 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=UA-177418439-1
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT

File type
JavaScript source, ASCII text, with very long lines (4179)
Size
77 kB (76728 bytes)
Hash
0e7278f6369275bf18e06c801e1e5412
157e7a23e575f6e8587ab54872e85fa1d23d2148
7cae03715c25632a7486be4ed58545e845f05eeccf72f796c7cafbbdfc78b615

HTTP Headers

GET /gtag/js?id=UA-177418439-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Aug 2024 19:39:15 GMT
expires: Sun, 04 Aug 2024 19:39:15 GMT
cache-control: private, max-age=900
last-modified: Sun, 04 Aug 2024 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76728
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
c05c1b146288466c2658d78ddaf34b64
b7794984ee19bfb56f166272cb602682bdbec245
59bda798ea74756bee8494e99285b9f695fad3c0b99eac171ce77566c2d9d764

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "59BDA798EA74756BEE8494E99285B9F695FAD3C0B99EAC171CE77566C2D9D764"
Last-Modified: Sat, 03 Aug 2024 19:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2891
Expires: Sun, 04 Aug 2024 20:27:26 GMT
Date: Sun, 04 Aug 2024 19:39:15 GMT
Connection: keep-alive

o.pki.goog/wr2

142.250.74.99

471 B

URL
o.pki.goog/wr2
IP
142.250.74.99:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
81a79c4b857dbae03350ec16019194a2
a8ec0d561c980e63a14eae3a37d55810cf5cb28d
a1a5e840420d4fe1c5c697d6d66e051889f881eb9b2cc381d7e37ee3ff329248

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Aug 2024 19:39:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

caribedkurukh.com/t4vvXvWmagfWc/80526

23.109.170.99

200 OK

25 B

URL GET HTTP/1.1
caribedkurukh.com/t4vvXvWmagfWc/80526
IP
23.109.170.99:443
ASN
#7979 SERVERS-COM

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectcaribedkurukh.com
FingerprintD1:71:4A:72:A3:38:6A:D8:40:6A:54:A3:4D:D8:4C:C2:2D:1C:85:91
ValidityTue, 11 Jun 2024 00:30:52 GMT - Mon, 09 Sep 2024 00:30:51 GMT

File type
ASCII text, with no line terminators
Size
25 B (25 bytes)
Hash
f7a2939527fd9e68723da600e96d76bd
a9e717b6364d2895ee0a716050db32ca0ef1bb42
d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /t4vvXvWmagfWc/80526 HTTP/1.1
Host: caribedkurukh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Aug 2024 19:39:15 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://pastenote.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Mon, 05-Aug-2024 19:39:15 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Mon, 05-Aug-2024 19:39:15 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

pastenote.net/static/site_static/css/default_theme.css

160.153.128.2

200 OK

296 B

URL GET HTTP/2
pastenote.net/static/site_static/css/default_theme.css
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
ASCII text
Size
296 B (296 bytes)
Hash
32eb4e696f70575fa6a5213222db8f30
3b08e0feebbc7c85184ac6721f0878764b2f08f2
44d4121a917cd71441d4f9971db845a8adf66dade072055ddd1ad099a6ffe97f

HTTP Headers

GET /static/site_static/css/default_theme.css HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:10 GMT
etag: "5ef7d2fe-297"
content-length: 296
status: 200 OK
content-type: text/css; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/css/hover.css

160.153.128.2

200 OK

4.2 kB

URL GET HTTP/2
pastenote.net/static/site_static/css/hover.css
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
ASCII text
Size
4.2 kB (4171 bytes)
Hash
59f2645a3810a64d3bf6c5c9cb0bbbc7
f0f8eb2142ddf0aa972d1ce878d95bb09dff5171
26dfe14f80a36023442a20eb96d57d763074aec66a4c975be7830b5e72f99e48

HTTP Headers

GET /static/site_static/css/hover.css HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:10 GMT
etag: "5ef7d2fe-b5dd"
content-length: 4171
status: 200 OK
content-type: text/css; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/css/bootstrap.css

160.153.128.2

200 OK

19 kB

URL GET HTTP/2
pastenote.net/static/site_static/css/bootstrap.css
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
ASCII text, with very long lines (540)
Size
19 kB (19232 bytes)
Hash
e2958a4ebe9166dbaa6c59311b281021
b3e8e99a31e0a9a717d1edc53f007a476164e9fd
d08f291bcb83079b1333094f4c021641b33182915b5e74ae8bddf5d7b4fd4698

HTTP Headers

GET /static/site_static/css/bootstrap.css HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:10 GMT
etag: "5ef7d2fe-205c2"
content-length: 19232
status: 200 OK
content-type: text/css; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/js/popper.min.js

160.153.128.2

200 OK

7.5 kB

URL GET HTTP/2
pastenote.net/static/site_static/js/popper.min.js
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
JavaScript source, ASCII text, with very long lines (21084), with CRLF line terminators
Size
7.5 kB (7506 bytes)
Hash
e11897ebd453d3c3af1c11ba9564098b
12670810c3b4625b7f47fc99cfb3dd62689ee2a0
93d7d214a51f645213446ea00bf9a8b6d6a12ef89f4153b26c687f73664505ab

HTTP Headers

GET /static/site_static/js/popper.min.js HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:06 GMT
etag: "5ef7d2fa-530c"
content-length: 7506
status: 200 OK
content-type: application/javascript; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/js/plugins.js

160.153.128.2

200 OK

393 B

URL GET HTTP/2
pastenote.net/static/site_static/js/plugins.js
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
393 B (393 bytes)
Hash
f2f44331791c0ccb9bf32ce8704042b2
5705afd47cb009d5ebe99f28112fedcebef9a74e
6f0a06036ab3b9b6701311cab9ffbfa76063b19bee1efdd7e4c4d4d449c5b05f

HTTP Headers

GET /static/site_static/js/plugins.js HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:06 GMT
etag: "5ef7d2fa-3bb"
content-length: 393
status: 200 OK
content-type: application/javascript; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/js/wow.min.js

160.153.128.2

200 OK

2.4 kB

URL GET HTTP/2
pastenote.net/static/site_static/js/wow.min.js
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
JavaScript source, ASCII text, with very long lines (7052)
Size
2.4 kB (2433 bytes)
Hash
5fa2e4b6acb5db11843b66b812040de3
13895175fe8fc3bb341af017a197ce8599e59451
36a88df037dc6c940450a9e251a34c9321d76d894d3d1734ee8cede45028d84c

HTTP Headers

GET /static/site_static/js/wow.min.js HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:06 GMT
etag: "5ef7d2fa-1baa"
content-length: 2433
status: 200 OK
content-type: application/javascript; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/js/bootstrap.min.js

160.153.128.2

200 OK

8.5 kB

URL GET HTTP/2
pastenote.net/static/site_static/js/bootstrap.min.js
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
JavaScript source, ASCII text, with very long lines (31650)
Size
8.5 kB (8507 bytes)
Hash
abda843684d022f3bc22bc83927fe05f
26908395e7a9a4eab607d80aa50a81d65f3017cb
24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f

HTTP Headers

GET /static/site_static/js/bootstrap.min.js HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:06 GMT
etag: "5ef7d2fa-7c4b"
content-length: 8507
status: 200 OK
content-type: application/javascript; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/css/animate.css

160.153.128.2

200 OK

4.3 kB

URL GET HTTP/2
pastenote.net/static/site_static/css/animate.css
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
ASCII text, with very long lines (460)
Size
4.3 kB (4298 bytes)
Hash
cb67371414710491ee3730390d1efb33
2e70ccc82e0ed3de2fd87409e6ca66e7b1a2d285
59a1460df6cb458204ec993345ff4964fa7e1a77da4ab7137e50fce8434c1d6a

HTTP Headers

GET /static/site_static/css/animate.css HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:10 GMT
etag: "5ef7d2fe-df07"
content-length: 4298
status: 200 OK
content-type: text/css; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/images/logo.m2.png

160.153.128.2

200 OK

7.6 kB

URL GET HTTP/2
pastenote.net/static/site_static/images/logo.m2.png
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
PNG image data, 562 x 152, 8-bit/color RGBA, non-interlaced
Size
7.6 kB (7626 bytes)
Hash
9a58afb7904615daf7b008095b22909a
44d4f9809490f721a1adca8b7a79ac91d7370b97
7bda294a684c896cb9920de2c3cdbac72a10edc488fa11766879268c5a3dfde0

HTTP Headers

GET /static/site_static/images/logo.m2.png HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:09 GMT
etag: "5ef7d2fd-1dca"
content-length: 7626
status: 200 OK
content-type: image/png
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/css/font-awesome.min.css

160.153.128.2

200 OK

4.6 kB

URL GET HTTP/2
pastenote.net/static/site_static/css/font-awesome.min.css
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
ASCII text, with very long lines (20604)
Size
4.6 kB (4612 bytes)
Hash
bbfef9385083d307ad2692c0cf99f611
63a234ea4d60f6643a60a4d79e28f291b93c1743
b769324e0921f9f649611113e65f528ebae5e140da8a7e63c5d6ea7bc7a33bc0

HTTP Headers

GET /static/site_static/css/font-awesome.min.css HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:10 GMT
etag: "5ef7d2fe-511e"
content-length: 4612
status: 200 OK
content-type: text/css; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/js/jquery-1.11.1.min.js

160.153.128.2

200 OK

33 kB

URL GET HTTP/2
pastenote.net/static/site_static/js/jquery-1.11.1.min.js
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
JavaScript source, ASCII text, with very long lines (32086)
Size
33 kB (33202 bytes)
Hash
8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441

HTTP Headers

GET /static/site_static/js/jquery-1.11.1.min.js HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:08 GMT
etag: "5ef7d2fc-1762a"
content-length: 33202
status: 200 OK
content-type: application/javascript; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/css/style.css

160.153.128.2

200 OK

1.5 kB

URL GET HTTP/2
pastenote.net/static/site_static/css/style.css
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
ASCII text, with CRLF line terminators
Size
1.5 kB (1454 bytes)
Hash
23fadf18064796e876c70bd4abeb3981
b4e2fb67da3154f433899ba0e3f918177d24ad5f
014a24a6d5b8bf9af85e04545c76d144e27bac26dd69bda45d23b82e16435d55

HTTP Headers

GET /static/site_static/css/style.css HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:15 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:10 GMT
etag: "5ef7d2fe-109b"
content-length: 1454
status: 200 OK
content-type: text/css; charset="utf-8"
server: Apache
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-LEB216M2DC&l=dataLayer&cx=c

142.250.74.168

200 OK

90 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-LEB216M2DC&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT

File type
JavaScript source, ASCII text, with very long lines (4179)
Size
90 kB (90232 bytes)
Hash
c7e0ec27256263ae220a68eebfba6f7f
983e8bd8909fc63f69edd33c9368204e3513360b
33374dc73e3ebff86b622bbf2723a6673c4b1e159929c8c16c2db3726c90288c

HTTP Headers

GET /gtag/js?id=G-LEB216M2DC&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Aug 2024 19:39:22 GMT
expires: Sun, 04 Aug 2024 19:39:22 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90232
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

pastenote.net/static/site_static/images/icon.ico

160.153.128.2

200 OK

338 B

URL GET HTTP/2
pastenote.net/static/site_static/images/icon.ico
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
338 B (338 bytes)
Hash
80ade8b3a18ff5d67375a215f8538784
bc7ee0c4b4d05652f6cdbab9efc3ce53eec3946f
624a418a7bfcbf9b24a8f6c284d30387c12d8af6ac063ce2ff17b7a4826096f4

HTTP Headers

GET /static/site_static/images/icon.ico HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/nxgmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:21 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:08 GMT
etag: "5ef7d2fc-47e"
content-length: 338
status: 200 OK
content-type: image/x-icon
server: Apache
X-Firefox-Spdy: h2

pastenote.net/static/site_static/fonts/fontawesome-webfont.woff?v=4.1.0

160.153.128.2

200 OK

84 kB

URL GET HTTP/2
pastenote.net/static/site_static/fonts/fontawesome-webfont.woff?v=4.1.0
IP
160.153.128.2:443
ASN
#21501 Host Europe GmbH

Requested by
https://pastenote.net/nxgmw
Certificate
IssuerLet's Encrypt
Subjectpastenote.net
Fingerprint10:EC:85:E3:EE:DB:11:CA:3B:31:35:0F:C2:82:BB:0C:6B:4A:48:04
ValiditySun, 21 Jul 2024 15:12:10 GMT - Sat, 19 Oct 2024 15:12:09 GMT

File type
Web Open Font Format, TrueType, length 83760, version 1.0
Size
84 kB (83760 bytes)
Hash
fdf491ce5ff5b2da02708cd0e9864719
7f2f3c55c2de192387c351b995115f6b79e09173
66db52b456efe7e29cec11fa09421d03cb09e37ed1b567307ec0444fd605ce31

HTTP Headers

GET /static/site_static/fonts/fontawesome-webfont.woff?v=4.1.0 HTTP/1.1
Host: pastenote.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://pastenote.net/static/site_static/css/font-awesome.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=60, public
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: DENY
x-content-type-options: nosniff
date: Sun, 04 Aug 2024 19:39:22 GMT
x-powered-by: Phusion Passenger(R) 6.0.22
last-modified: Sat, 27 Jun 2020 23:15:10 GMT
etag: "5ef7d2fe-14730"
content-length: 83760
status: 200 OK
vary: Accept-Encoding
content-type: application/font-woff
server: Apache
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by