Web activity logs 1.2 guided exercise

What is the Pastebin URL (pastebin.com/somepath) that our compromised endpoint successfully connected to?

i recorded the answer. but says incorrect