| paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found! | 172.67.144.225 | 403 Forbidden | 1.4 kB |
URL User Request GET HTTP/2paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found! IP172.67.144.225:443
CertificateIssuerCloudflare, Inc. Subjectpaste.fo Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22 ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (1494) Hashab112bb985721eceae1c915b123e0838 046a49c2812142ebf54d13ebbb3148fd64ca5fe4 8e1f12acefb0a1a796a4019696d49fe0fcfb1c4aae25eba763cf049e002a09b2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found! HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Wed, 17 Apr 2024 11:02:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Retry-After: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SnSW%2Fw5OwOYmK6dZlQUaVVWBpkRSKwajGwQ2b8JTnm3Bwj3TRlCdXtYX3So39zKcEV%2FfOzmDmrmRURtRuUliJw%2BL%2Bj2YMs5j9DA0%2FHInDN1zH3ilr3irDFc23A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 875bebb2fbc8abe1-CPH
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 | 104.16.80.73 | 200 OK | 7.3 kB |
URL GET HTTP/2static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 IP104.16.80.73:443
Requested byhttp://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found! CertificateIssuerGoogle Trust Services LLC Subjectcloudflareinsights.com Fingerprint73:92:5A:16:97:55:FC:A5:32:7C:F3:9D:0C:84:EF:F3:2F:AA:B5:00 ValiditySun, 10 Mar 2024 02:33:42 GMT - Sat, 08 Jun 2024 02:33:41 GMT
File typegzip compressed data, from Unix Hash88049ce94cb3feb9175b12138c26e571 c48071889e461b404fc515031a43fa9d989b3fd7 37d33e857fc0ca885875e3eec6c33b5196874ee1bf8a421a437954c3ca49d4ab
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://paste.fo
DNT: 1
Connection: keep-alive
Referer: http://paste.fo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 11:02:04 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Mon, 15 Apr 2024 22:09:58 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bebb45d5210eb-CPH
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.144.225 | 302 Moved Temporarily | 143 B |
URL GET HTTP/1.1paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.144.225:80
Requested byhttp://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
File typeHTML document, ASCII text, with CRLF line terminators Hashcb7b8f439b04c00f4a2d78160ddfee8d 9aa44b5d68f6359f10de0dcd24ea3e12548d9bd4 12755429beb15d5eb57eafa45b8dba326343dd099bf0552038694c3856e8860e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Wed, 17 Apr 2024 11:02:04 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J4UewtAjhAEECUQ%2Fyg00x1N6j9tLYqxIRtB9L%2FYRW52%2BVdA%2FMl54I%2B819QSunPYrkQo4jrw71KnD1R%2Beutli8OIcgBESM824BAL9aIwCxnVtD7Y46RF8AFhPlA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 875bebb52feeabe1-CPH
alt-svc: h2=":443"; ma=60
|
|
| fonts.googleapis.com/css2?family=Source+Code+Pro:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap | 142.250.74.106 | 200 OK | 23 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Source+Code+Pro:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap IP142.250.74.106:443
Requested byhttp://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found! CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hash357d1122c532f909d9b5fd6b7ef4bc42 b9c4a35f23df155528b05981bef85eccdfb3ea5b da80b32a4d2139d9add377dc0ef7e0163a98a14ba0e9df061d85304f110dc65f
GET /css2?family=Source+Code+Pro:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://paste.fo/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 11:02:04 GMT
date: Wed, 17 Apr 2024 11:02:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.144.225 | 302 Moved Temporarily | 0 B |
URL GET HTTP/1.1paste.fo/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.144.225:80
Requested byhttp://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 17 Apr 2024 11:02:04 GMT
content-length: 0
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zDzV%2Fh5EvxiGz8Q6n7oLFPSUeeMZLFXS1BOhlLiJ0ITE%2BX1ZpfD%2FF7huqrjJnWuINYDnPm%2BAA7vVO6FupjSPjFlfeHZbX9TANAlxAb%2BLjFElDyn0fh8MLbi5ag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875bebb5ce156df0-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 | 142.251.209.131 | 200 OK | 22 kB |
URL GET HTTP/2fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 IP142.251.209.131:443
Requested byhttp://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found! CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 21528, version 1.0 Hash6113a25a586aeb6d0d3af5b5b652b973 25619eeae1fe17389310e4d392c427b7711dba44 539bdb4bd9bb71c694451bbf2d5d7c0b2849e3584f0b50be3588a07605d3337f
GET /s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://paste.fo
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 13 Apr 2024 22:47:07 GMT
expires: Sun, 13 Apr 2025 22:47:07 GMT
cache-control: public, max-age=31536000
age: 303297
last-modified: Wed, 13 Sep 2023 23:21:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| paste.fo/favicon.ico | 172.67.144.225 | | 167 B |
IP172.67.144.225:0
Requested byhttp://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 17 Apr 2024 11:02:04 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 17 Apr 2024 12:02:04 GMT
Location: https://paste.fo/favicon.ico
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uInJjtM8z2b%2BsATUb1uC52IQ5U5lUKpazpaRcRyJlx1Qkq9VOYCVCY%2FLjbYIbM68UWVZRNjeoPs2ShuVYpxmZe3z7v9abBFzofvIYdSYHKcNDyUWBQR7n6YvBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 875bebb63a48abe1-CPH
alt-svc: h2=":443"; ma=60
|
|
| paste.fo/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js | 172.67.144.225 | 200 OK | 3.7 kB |
URL GET HTTP/2paste.fo/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js IP172.67.144.225:443
Requested byhttp://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found! CertificateIssuerCloudflare, Inc. Subjectpaste.fo Fingerprint45:4F:E3:CB:01:43:C2:8B:CA:E1:64:B0:D4:A7:73:8A:C0:79:E2:22 ValidityWed, 17 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7819), with no line terminators Hash9463d7eb5039e48b6b68b9b06c6dadd0 3fd97ac468028bb72a4528ca42c3b4b09bd11370 7ad1683d33e378e468c5df5d0d71422c9eafc9f4d51e1b777e76cd65b1639430
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 11:02:04 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
vary: accept-encoding
cache-control: max-age=14400, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DY2Y2Clhu392yaUrUFi6lx3jUyVWt%2FthQOGcVpQXa1Zcb6ivkJgNPQNRGTp4hKx%2BJxFknelf5AuWcPlaxkokkdEvThCnEAYhrpaldsB3nrXz4KhUvwh2yOpt5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875bebb60e926df0-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| paste.fo/cdn-cgi/challenge-platform/h/g/jsd/r/875bebb2fbc8abe1 | 104.21.28.76 | 302 Moved Temporarily | 143 B |
URL POST HTTP/1.1paste.fo/cdn-cgi/challenge-platform/h/g/jsd/r/875bebb2fbc8abe1 IP104.21.28.76:80
Requested byhttp://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
File typeHTML document, ASCII text, with CRLF line terminators Hashcb7b8f439b04c00f4a2d78160ddfee8d 9aa44b5d68f6359f10de0dcd24ea3e12548d9bd4 12755429beb15d5eb57eafa45b8dba326343dd099bf0552038694c3856e8860e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/g/jsd/r/875bebb2fbc8abe1 HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 11722
Origin: http://paste.fo
DNT: 1
Connection: keep-alive
Referer: http://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Wed, 17 Apr 2024 11:02:04 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://paste.fo/cdn-cgi/challenge-platform/h/g/jsd/r/875bebb2fbc8abe1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g1jYhnH1x2S6NrSrRejTkNzXR7bK1Q2HCHe919aQmSzA7iA5b8wEQ%2BIW1QcpBf6ZGmvrCbA2tqZAg9udnF2oQxsuV6NDs6cXrj8iCn%2BqBdEIOgEGBCq%2BR4ACUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 875bebb6ef6592d4-CPH
alt-svc: h2=":443"; ma=60
|
|
| paste.fo/cdn-cgi/rum? | 104.21.28.76 | 204 No Content | 0 B |
IP104.21.28.76:80
Requested byhttp://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/rum? HTTP/1.1
Host: paste.fo
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
content-type: application/json
Content-Length: 1232
Origin: http://paste.fo
DNT: 1
Connection: keep-alive
Referer: http://paste.fo/da5f4c27ad9a/unlock/da5f4c27ad9a/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!/?error=404%20Not%20Found!
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Date: Wed, 17 Apr 2024 11:02:04 GMT
Connection: keep-alive
access-control-allow-origin: http://paste.fo
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
Server: cloudflare
CF-RAY: 875bebb67ea692d4-CPH
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
|
|