URL User Request GET HTTP/2 IP
Certificate IssuerDigiCert Inc
Subject*.github.io
FingerprintA1:46:14:C7:2A:1D:52:79:F6:AA:2B:B2:C5:0A:3B:D3:F5:02:06:75
ValidityTue, 21 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
Hash 8bb124de00bb581abc0d3949b780c652
470ef607ffe004565ba075d0f80badee783c4c66
b38dbaea648ef7da1c639f4fdaac0d88f03306ea42f0edc9af512c613dbdb7e1
Analyzer Verdict Alert ThreatFox malicious zgRAT
GET /src.txt HTTP/1.1
Host: eldi8.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: GitHub.com
content-type: text/plain; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Sun, 05 Mar 2023 16:19:22 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"6404c10a-19e"
expires: Thu, 07 Dec 2023 18:25:57 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: DE28:1034E:321390:32F303:65720BDC
accept-ranges: bytes
date: Thu, 07 Dec 2023 18:15:57 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1652-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1701972957.294502,VS0,VE125
vary: Accept-Encoding
x-fastly-request-id: 5eee618d2442f47e04281486b903f2c8d943ed19
content-length: 120
X-Firefox-Spdy: h2
eldi8.github.io/favicon.ico
404 Not Found 5.3 kB URL GET HTTP/2 eldi8.github.io/favicon.ico
IP
Requested by https://eldi8.github.io/src.txt
Certificate IssuerDigiCert Inc
Subject*.github.io
FingerprintA1:46:14:C7:2A:1D:52:79:F6:AA:2B:B2:C5:0A:3B:D3:F5:02:06:75
ValidityTue, 21 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3909)
Hash c1f9838a645648cb3b25359f7890a288
0cf12d25140e329bcb4c304feefce63f8f0ba7b3
b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368
GET /favicon.ico HTTP/1.1
Host: eldi8.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eldi8.github.io/src.txt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64d248ca-24a3"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 5ADC:11C25:1CF8763:1D73E2B:65720BDD
accept-ranges: bytes
date: Thu, 07 Dec 2023 18:15:57 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1652-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1701972958.727307,VS0,VE127
vary: Accept-Encoding
x-fastly-request-id: 93aea99dca8beae2c365e31663009be0282a7ee6
content-length: 5254
X-Firefox-Spdy: h2
185.199.109.153