| ghfast.top/http://github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$ |  129.146.41.82 | 403 Forbidden | 14 B |
URL User Request GET ghfast.top/http://github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$ IP129.146.41.82:443 ASN#31898 ORACLE-BMC-31898
CertificateIssuerZeroSSL Subjectghfast.top Fingerprint61:46:A5:63:29:78:D0:E6:DB:F3:F7:4A:31:3E:21:D7:A0:C0:97:7F ValiditySat, 01 Feb 2025 00:00:00 GMT - Fri, 02 May 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hashd3d11a221d183ce06a75950631e42cb1 a4da734e673f93d84bc52c955729495efa4b5ca8 a7596aa3beb103b542384e4c191806e0c5f2c0dffd6094c7a9e2e1185cd81e7c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /http://github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$ HTTP/1.1
Host: ghfast.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: nginx
date: Mon, 07 Apr 2025 07:19:55 GMT
content-type: text/html; charset=utf-8
content-length: 14
strict-transport-security: max-age=63072000
X-Firefox-Spdy: h2
|
IP129.146.41.82:443 ASN#31898 ORACLE-BMC-31898
Requested byhttps://ghfast.top/http://github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$ CertificateIssuerZeroSSL Subjectghfast.top Fingerprint61:46:A5:63:29:78:D0:E6:DB:F3:F7:4A:31:3E:21:D7:A0:C0:97:7F ValiditySat, 01 Feb 2025 00:00:00 GMT - Fri, 02 May 2025 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 48x48, 32 bits/pixel Hasha3b83d9ea6dc3eb100473b6c628efcb1 5b424ad00b76712d0d80035547a8d093df1134f4 d884be9f1f36321f3e6b903fd3ad404dd49161922c56ddf7db8adb96c545302f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: ghfast.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ghfast.top/http://github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 07 Apr 2025 07:19:55 GMT
content-type: image/vnd.microsoft.icon
content-length: 1540
accept-ranges: bytes
access-control-allow-origin: *
age: 421313
cache-control: max-age=300
content-disposition: inline; filename="favicon.ico"
content-encoding: br
etag: "a3b83d9ea6dc3eb100473b6c628efcb1"
last-modified: Tue, 01 Apr 2025 17:54:21 GMT
strict-transport-security: max-age=63072000
x-vercel-cache: HIT
x-vercel-id: sfo1::7wl9z-1744010395532-18dff7c0f188
X-Firefox-Spdy: h2
|
| ghfast.top/https:/github.com/CKylinMC/PasteMe/releases/latest/download/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$ | 129.146.41.82 | 302 Found | 276 kB |
URL User Request GET ghfast.top/https:/github.com/CKylinMC/PasteMe/releases/latest/download/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$ IP129.146.41.82:443 ASN#31898 ORACLE-BMC-31898
CertificateIssuerZeroSSL Subjectghfast.top Fingerprint61:46:A5:63:29:78:D0:E6:DB:F3:F7:4A:31:3E:21:D7:A0:C0:97:7F ValiditySat, 01 Feb 2025 00:00:00 GMT - Fri, 02 May 2025 23:59:59 GMT
Size276 kB (276365 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /https:/github.com/CKylinMC/PasteMe/releases/latest/download/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$ HTTP/1.1
Host: ghfast.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 07 Apr 2025 07:19:54 GMT
content-type: text/html; charset=utf-8
content-length: 0
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame,Accept-Encoding, Accept, X-Requested-With
location: /https://github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
set-cookie: _gh_sess=YnkLAJHcHYfweevWFEoSOzqGqo4RFE28OJwl9Fc%2FZmm2ojtqrO9Bz1zXvhy%2Fj5VwgzqUd10SPjECHZJBvUfnEzP%2Ba3wJjElLnoR2aDn8awnO%2B%2BFKnA3DTbgetEWEu7GgYjXrA2sGMTH6XAzHFoT4Gh%2BwJTyIQTKHjr4BP1slfMVS8LX%2F2zh5Flc%2BGLiAYwwhgSJ7ojb6fHmKpzR308SSPJE1rqDJP1zDB4Muykuo5J3BFtYttgdZ8ttI3etjs8k7walUP9xN2QllZo4ZZthZtw%3D%3D--IHyGsGcvGxSmAbbl--E3osGzH0dVYHVgb7j8wizQ%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax, _octo=GH1.1.152822613.1744010394; Path=/; Domain=github.com; Expires=Tue, 07 Apr 2026 07:19:54 GMT; Secure; SameSite=Lax, logged_in=no; Path=/; Domain=github.com; Expires=Tue, 07 Apr 2026 07:19:54 GMT; HttpOnly; Secure; SameSite=Lax
x-github-request-id: B9FC:197707:2BB06B:3BED1D:67F37C99
X-Firefox-Spdy: h2
|
| ghfast.top/https://github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$ | 129.146.41.82 | 404 Not Found | 276 kB |
URL User Request GET ghfast.top/https://github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$ IP129.146.41.82:443 ASN#31898 ORACLE-BMC-31898
CertificateIssuerZeroSSL Subjectghfast.top Fingerprint61:46:A5:63:29:78:D0:E6:DB:F3:F7:4A:31:3E:21:D7:A0:C0:97:7F ValiditySat, 01 Feb 2025 00:00:00 GMT - Fri, 02 May 2025 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1658) Size276 kB (276365 bytes) Hash7394cc4df04c9dd7cbdbc0b3f934f89c dbffda3a338ed3af4b41cf9b62f3fd0c0219548c 245577759959fc2096e60fe79a65c70c417a68a57950aa107c53cb9aef0f4325
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /https://github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$/https:/github.com/CKylinMC/PasteMe/releases/download/v1.2.4/latest.json$ HTTP/1.1
Host: ghfast.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Apr 2025 07:19:54 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame,Accept-Encoding, Accept, X-Requested-With
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-github-request-id: BA08:3AC0E5:2A2B39:3A40EC:67F37C9A
X-Firefox-Spdy: h2
|
139.185.37.214