signedcode.eu/favicon.ico
172.67.186.123403 Forbidden 5.9 kB URL GET HTTP/3 signedcode.eu/favicon.ico
IP 172.67.186.123:443
Requested by https://signedcode.eu/Stb/Loaders/KxgRjl7gaueY3Io008.txt
Certificate IssuerGoogle Trust Services LLC
Subjectsignedcode.eu
FingerprintA7:58:6F:AA:51:FB:5C:D3:89:45:1D:D1:00:7E:AB:FA:32:92:C2:4D
ValidityThu, 07 Dec 2023 01:06:07 GMT - Wed, 06 Mar 2024 01:06:06 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (5936), with no line terminators
Hash 400845d94946570e05831db86284379a
5bbb641cc9d3ee547e062118c9be29f59122b0bf
2784bed47aa4a6295a50820c468963bf75089c62733302b5588ace389a60f4ed
GET /favicon.ico HTTP/1.1
Host: signedcode.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://signedcode.eu/Stb/Loaders/KxgRjl7gaueY3Io008.txt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sun, 10 Dec 2023 08:44:02 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lJyZmFmgup%2BF840zAZZTWXQMgFSb1R9Numr3WjYzljMJlNUhsujg68y04UXyN2j%2B0z%2FKejvhwVrY9WerTu6IZMUhanBMqq7wO%2B5hkuAPt6T0P4v5%2BM3HggxBUjV9n30y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83343425fc67b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
signedcode.eu/Stb/Loaders/KxgRjl7gaueY3Io008.txt
172.67.186.123200 OK 42 kB URL User Request GET HTTP/2 signedcode.eu/Stb/Loaders/KxgRjl7gaueY3Io008.txt
IP 172.67.186.123:443
Certificate IssuerGoogle Trust Services LLC
Subjectsignedcode.eu
FingerprintA7:58:6F:AA:51:FB:5C:D3:89:45:1D:D1:00:7E:AB:FA:32:92:C2:4D
ValidityThu, 07 Dec 2023 01:06:07 GMT - Wed, 06 Mar 2024 01:06:06 GMT
File type ASCII text, with very long lines (42328), with no line terminators
Hash 1af97296be6cfdbf4ac1486aeaf52a7a
68384a9b4392a13fe329f0e06b09c3157db27a84
fa9861c96d8a22bfbf39b6d06c669ac53fe1ccfbbd27f9d7bdfafe2851f0e7d8
Analyzer Verdict Alert urlquery suspicious Suspicious - Base64 encoded file
GET /Stb/Loaders/KxgRjl7gaueY3Io008.txt HTTP/1.1
Host: signedcode.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 08:44:02 GMT
content-type: text/plain
last-modified: Sun, 10 Dec 2023 02:54:55 GMT
etag: W/"6575287f-a558"
x-powered-by: PleskLin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iUL3Pp26PslJXwjX6wAlTOzO84sSAYJSDzDorVWSCMMl6Gayop8c6V39NXClXozA7NwYM8BXs9HB6ieJVJb6m1OTWlXlT1szjgyZPlP%2FG4H88syvWDcMFmEeIGDrCwWY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833434237d71712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2