| cdnupdateservice.com/ |  185.196.10.85 | | 444 B |
IP185.196.10.85:0 ASN#42624 Simple Carrier LLC
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash4ae1d260efd7d494735ac7b74724e505 fbdb7641c3612927dce2c1c624e426d4440c581f e2e8307d168caa27f8d0c0164eef39da2fa997cafa2638dffe13369434eb75ff
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-type: text/html
date: Tue, 07 May 2024 11:45:58 GMT
server: LiteSpeed
location: https://cdnupdateservice.com/
content-encoding: gzip
vary: Accept-Encoding
transfer-encoding: chunked
connection: Keep-Alive
|
|
| cdnupdateservice.com/login.php | 185.196.10.85 | 200 OK | 1.2 kB |
URL User Request GET HTTP/2cdnupdateservice.com/login.php IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeHTML document, ASCII text Hash54e52cc0079ac120d3103242e4442896 f928a86e2daa773cc395b32547553dc0dd904700 accdf7e0d08f879e290b61a3c37b3ada8c9d9d3795cc4b4fd746598817df8079
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | ThreatFox | malicious | Unknown malware | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /login.php HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
content-length: 1223
date: Tue, 07 May 2024 11:46:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/fontawesome-free/css/all.min.css | 185.196.10.85 | 200 OK | 12 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/fontawesome-free/css/all.min.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeASCII text, with very long lines (59158) Hash74bab4578692993514e7f882cc15c218 b6293bcfd851f963edbe859498570c4c0c7eaae4 d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/fontawesome-free/css/all.min.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "e7d0-63b7fcde-82651;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 12369
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/izitoast/css/iziToast.css | 185.196.10.85 | 200 OK | 10 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/izitoast/css/iziToast.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeASCII text, with very long lines (1938) Hashf81337ac106aed3bf571881f088de109 cac1e6481962be968c90f79c32717bca5cac3ec7 a4e0cd56d2b7b8e84bf0550d596bc540ad10a10a15dd803dc061a783a99b6741
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/izitoast/css/iziToast.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "c1e2-63b7fcde-82670;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 10155
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/jquery-confirm/jquery-confirm.css | 185.196.10.85 | 200 OK | 3.4 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/jquery-confirm/jquery-confirm.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
Hash144a36af355bc95cc269a4cf64e20770 b347fc6e8f57e95c61c168334620ea3355106774 bf3ab263ff09bec0414e42ef446c17d2f3e178661c863d5a07b2dbd746ba7836
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/jquery-confirm/jquery-confirm.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "6b88-63b7fcde-82676;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 3379
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/select2/css/select2.min.css | 185.196.10.85 | 200 OK | 1.8 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/select2/css/select2.min.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeASCII text, with very long lines (14965) Hash9f54e6414f87e0d14b9e966f19a174f9 ae5735562faabd1a2d9803bbd7bf4c502b5e4f51 15d6ad4dfdb43d0affad683e70029f97a8f8fc8637a28845009ee0542dccdf81
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/select2/css/select2.min.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "3a76-63b7fcde-82695;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 1790
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/sweetalert2/sweetalert2.min.css | 185.196.10.85 | 200 OK | 4.0 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/sweetalert2/sweetalert2.min.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeASCII text, with very long lines (24454), with no line terminators Hashb1ab0f2f72a18c5131a1969b88549c8c 397e30c517bde3fd86c22962dec839a3d6a3e512 e6e66c379d6664d3e2c2cc6516d66f7917216c21dc1e43e82231bb376638ac85
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/sweetalert2/sweetalert2.min.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "5f86-63b7fcde-826dd;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 3958
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/overlayScrollbars/css/OverlayScrollbars.min.css | 185.196.10.85 | 200 OK | 4.3 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/overlayScrollbars/css/OverlayScrollbars.min.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeASCII text, with very long lines (19782) Hash35f138a4df47405b346f885ffb7ecd4a c4dea04ad659f49d14c1913fb89eb0ad6e8c34e0 049e2dc17a8284c5c1140795fd26abad33357be3ad012e71482a40c47e7d567b
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/overlayScrollbars/css/OverlayScrollbars.min.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "4e29-63b7fcde-82685;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 4254
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-bs4/css/dataTables.bootstrap4.min.css | 185.196.10.85 | 200 OK | 903 B |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-bs4/css/dataTables.bootstrap4.min.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (5224) Hash6793296e50f11c03fe545979f320ef77 41cec9c68f51ad59cce97603aad993a6f1876c10 493a6fee3f77804e876157d95a1bf2597351ef6d1179dc85bbaec8b3d45b0589
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-bs4/css/dataTables.bootstrap4.min.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "1470-63b7fcde-81274;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 903
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-responsive/css/responsive.bootstrap4.min.css | 185.196.10.85 | 200 OK | 853 B |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-responsive/css/responsive.bootstrap4.min.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeASCII text, with very long lines (4462) Hash2f83eb031ec3fb725d8d8e3716d8f19c 428c5c9108a20aa97c1590b208f3240e56157cc8 53b70abc117de82792aa9ccd127c4ee911ff84e25be57c3cf39b6eb134d7eb02
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-responsive/css/responsive.bootstrap4.min.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "116f-63b7fcde-812b0;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 853
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-buttons/css/buttons.bootstrap4.min.css | 185.196.10.85 | 200 OK | 776 B |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-buttons/css/buttons.bootstrap4.min.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeASCII text, with very long lines (3498) Hasha5d9eaa2aef5836154c5cab76a7df8f3 105407577d3f2c88cc21b7e6db0fedcc7832fbfa 806eda23f13babc6e43195840238aeb3e965565f863d3a6c7dc712d6cd94179c
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-buttons/css/buttons.bootstrap4.min.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "dab-63b7fcde-8127b;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 776
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/css/adminlte.min.css | 185.196.10.85 | 200 OK | 104 kB |
URL GET HTTP/2cdnupdateservice.com/assets/css/adminlte.min.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeASCII text, with very long lines (65158) Size104 kB (103627 bytes) Hash3761431942d1adad52b80e4e4d174449 97a30cba1aabe8de821bde5b2d2822c188fbb55a 150fa4d262057d65d54da5b56ab877a8ac7c2175f9066e5fe901bed299148da1
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/css/adminlte.min.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "151a3f-63b7fcde-81207;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 103627
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/css/custom.css | 185.196.10.85 | 200 OK | 1.4 kB |
URL GET HTTP/2cdnupdateservice.com/assets/css/custom.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeassembler source, ASCII text Hashee8ea68e9506343f30d54fb91e9a3540 e090db3c6fef45272fd39ea76f5c491f1dab3340 455d106bb86d385a2d3428e58306124fc90dbc05f4314dbc7e55298b62c79d24
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/css/custom.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "150f-63b7fcde-8121e;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: text/css
content-length: 1404
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/jquery-confirm/jquery-confirm.js | 185.196.10.85 | 200 OK | 9.7 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/jquery-confirm/jquery-confirm.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text Hashdf1ed42a0caed3f4867c6656d60b2dbc bcb86d530cee14f8c64579d8a563358981d14254 f5900e20c660838c78b743c2353df7df3988f28900446b33a97d7efdda33d810
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/jquery-confirm/jquery-confirm.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "c958-63b7fcde-82677;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 9652
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-bs4/js/dataTables.bootstrap4.min.js | 185.196.10.85 | 200 OK | 1.0 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-bs4/js/dataTables.bootstrap4.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (510) Hashf6efabd85fb5c418a848f5f0e0ba0f9f fb6d36d07455c93fb3e3f6543b2f2e6e2cd7f89c c7b7abf54cc3c6d4c454c090efb0446086b32f4398bd1d17b398116c2f5aec53
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-bs4/js/dataTables.bootstrap4.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "832-63b7fcde-81277;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 1014
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-responsive/js/dataTables.responsive.min.js | 185.196.10.85 | 200 OK | 4.6 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-responsive/js/dataTables.responsive.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text, with very long lines (554) Hash9c08197a623203cd1bf273541b694308 fa895deac972f0ca3d77169039aca0ee1a04f34e 94d8439fdad60af6fb881f9aa512fe6e2e12b14ac728ba29bd8f251399ec7322
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-responsive/js/dataTables.responsive.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "36b6-63b7fcde-812b3;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 4626
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-responsive/js/responsive.bootstrap4.min.js | 185.196.10.85 | 200 OK | 533 B |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-responsive/js/responsive.bootstrap4.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (808) Hasha730f5bddecca0c8889a2e91415cc30a a9aa68f014eb6986c467b859832327b46af6da26 69754ee3b45beece7c1613130b06ccdfd7a7ff55dc9b31a40a547305ee6dc4ab
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-responsive/js/responsive.bootstrap4.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "4dc-63b7fcde-812b5;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 533
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-buttons/js/dataTables.buttons.min.js | 185.196.10.85 | 200 OK | 6.4 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-buttons/js/dataTables.buttons.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (560) Hashce1c42a949303738ab70169d21456bd7 e737541ee14e75d59678382292e648d3431ec995 13baf10b24bc6d992af9b590b1c7d9be2ab0421bf6eb8623ba34457a3d0f9c81
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-buttons/js/dataTables.buttons.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "4f57-63b7fcde-81288;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 6385
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-buttons/js/buttons.bootstrap4.min.js | 185.196.10.85 | 200 OK | 471 B |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-buttons/js/buttons.bootstrap4.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (531) Hash8e408dcb8dd84d21b97885b1675eca9a f7e12468c6c350e87856c822de464e971bdbf8dc c9580b9667720a8755d81eb5d10c7ea8f44580958ff77c86148e2924d781acff
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-buttons/js/buttons.bootstrap4.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "413-63b7fcde-8127e;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 471
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-buttons/js/buttons.html5.min.js | 185.196.10.85 | 200 OK | 6.2 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-buttons/js/buttons.html5.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (10031) Hashf005b2c8334ed73115c800f84065dde7 5b8aca189d9e6ffb95eef23b4742e58343c79cbc a272893a5e916e3e420effe9fb328cbeeef12232bf239755142f9ad8be371540
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-buttons/js/buttons.html5.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "6102-63b7fcde-81284;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 6225
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-buttons/js/buttons.colVis.min.js | 185.196.10.85 | 200 OK | 936 B |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-buttons/js/buttons.colVis.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text, with very long lines (558) Hash3305195e00cd4f7b288e4d1c38501146 c0522cdc03ddc90b931d65fee6721c3eb988e079 07be9aff38f58c96fc1e979aa5424b0fa8c5b79bbcab53ff1eefd18dfc97f8fe
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-buttons/js/buttons.colVis.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "b16-63b7fcde-81280;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 936
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/select2/js/select2.min.js | 185.196.10.85 | 200 OK | 18 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/select2/js/select2.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (64131) Hash0f64f3a3a0c620a6756d36abaff1b4a6 4738d7f9885db2cb9370766974c8f6b22e9ec29d 00501810e93307a8882a74d864e7547fd1458deea539361dc1124ac133799a4b
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/select2/js/select2.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "114c3-63b7fcde-826d7;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 18382
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/sweetalert2/sweetalert2.min.js | 185.196.10.85 | 200 OK | 14 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/sweetalert2/sweetalert2.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text, with very long lines (47965), with no line terminators Hashc7cffc8b283719a988fa85b6b5f77a85 9a62bf49bbd6ca0dc23ef1c4c6bc55e83e00b5a8 cad04f1e55ed6543d1dbd9672e6ea9f9d658c0053e8345e9c8cb160f88b4947e
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/sweetalert2/sweetalert2.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "bb5d-63b7fcde-826de;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 14310
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/izitoast/js/iziToast.min.js | 185.196.10.85 | 200 OK | 4.8 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/izitoast/js/iziToast.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (18398) Hasha05a127c793145cec6b721f14fced3e5 5d753b1c803de12f4d2217ab0d143d4dcf047010 ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/izitoast/js/iziToast.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "4831-63b7fcde-82674;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 4778
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/bootstrap/js/bootstrap.bundle.min.js | 185.196.10.85 | 200 OK | 21 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/bootstrap/js/bootstrap.bundle.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hashf81d0a1705048649befc8b595e455a94 aec551e4d573463088fca7d14fb644eb389f1839 b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "1499a-63b7fcde-81255;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 20811
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/jquery/jquery.min.js | 185.196.10.85 | 200 OK | 30 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/jquery/jquery.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/jquery/jquery.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "15d9d-63b7fcde-8267d;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 30112
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/overlayScrollbars/js/jquery.overlayScrollbars.min.js | 185.196.10.85 | 200 OK | 19 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/overlayScrollbars/js/jquery.overlayScrollbars.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text, with very long lines (42375) Hashe3577d030f0182d92ad8ed5b9c554b3a c2ac0fb3b8ebc3b832eee3455967a59a140514cb b41777f2e5a5be07e9b37cc73eb51bd9e3c183e67c12331fd1096814e373a6f5
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/overlayScrollbars/js/jquery.overlayScrollbars.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "a66a-63b7fcde-8268a;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 18823
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/jquery-mousewheel/jquery.mousewheel.js | 185.196.10.85 | 200 OK | 2.3 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/jquery-mousewheel/jquery.mousewheel.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text Hash409ac3648bba069c079fedc1ca107913 3a333a49aaab27466584fdb54902d15f821cba27 55296ec9c96490404114d67a4bc2363a4abf47a5b42271e4a9dba436b78460e6
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/jquery-mousewheel/jquery.mousewheel.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "204b-63b7fcde-8267a;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 2325
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/raphael/raphael.min.js | 185.196.10.85 | 200 OK | 31 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/raphael/raphael.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65518), with no line terminators Hashd215c2fcffdaa7759bf99e6da9f7c402 eee7f2ccba4c7fbbcd87057694221985db44fa45 4da6e9aca75e3576d27ac0962ccadc6d6483cd486901d70d3dee50e77ae7f588
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/raphael/raphael.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "16bef-63b7fcde-8268f;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 30892
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/chartjs/chart.umd.js | 185.196.10.85 | 200 OK | 65 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/chartjs/chart.umd.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text, with very long lines (57336) Hash10c8431fbf76ad4eab813ca969e291ae da070ff7e9aa680a9760c8320a133c4f04c1f3df 9792d6f5a07f0569f16a04b60fbc2bde1984227f6bd1abc47ff3a8b0f60e5193
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/chartjs/chart.umd.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "31889-63b7fcde-81266;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 65107
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/chartjs/chartjs-adapter-date-fns.bundle.min.js | 185.196.10.85 | 200 OK | 11 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/chartjs/chartjs-adapter-date-fns.bundle.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text, with very long lines (50495) Hash87f55b2580c452ec3431f18b5fada114 94fb6f22ccbcff719e8612e0702af5f8935c7886 ea7ab30d26c38dcf1f2d26bb43e73a94537b58f1906f55e1a546dd09321b5615
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/chartjs/chartjs-adapter-date-fns.bundle.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "c5da-63b7fcde-81267;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 10877
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/js/adminlte.js | 185.196.10.85 | 200 OK | 15 kB |
URL GET HTTP/2cdnupdateservice.com/assets/js/adminlte.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text, with very long lines (377) Hashc920148b02d267b16a5f77762fb82e0d 72cfd2c4c999c6a43ec5fc552c2813bd4026d17a 24db05f7655f1274887227317c6d32bff52ee799aaf9d19b8e6c436d86c40a80
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/js/adminlte.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "1866a-63b7fcde-81230;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 14905
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/__UNAM_LIB/unam_lib.js | 185.196.10.85 | 200 OK | 344 B |
URL GET HTTP/2cdnupdateservice.com/__UNAM_LIB/unam_lib.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
Hash7fa82422409fedd9fbc1d63b3de7e75a 1be72e17ed2e99222f4afb820dd3fac010601fc0 c9636b6900533ccd3ba88d5337207a5f5aa31d1dc3222dce0e8d7c71af7400a7
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /__UNAM_LIB/unam_lib.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "3a0-63b7fcde-811fc;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 344
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables-buttons/js/buttons.print.min.js | 185.196.10.85 | 200 OK | 1.0 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables-buttons/js/buttons.print.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, ASCII text, with very long lines (526) Hashdc359e6634a9b1b70b33f4709291ac52 890bfbb06a5a65103b16a3fe22de6dc62a3cd46d 43c9c663cdacecedbae7c913386783e1363bc8fbdc9a4c613b4d1abf98a83f95
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables-buttons/js/buttons.print.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "8a4-63b7fcde-81286;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 1013
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/datatables/jquery.dataTables.min.js | 185.196.10.85 | 200 OK | 27 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/datatables/jquery.dataTables.min.js IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (539) Hash2ecadb4a04d1e60e9a8b3e6c70bc2896 aee29a94a6aa066fad6d5bfae51a4b71eb37c949 8ad9b517ea8585c8df1a7aeffafd7c000f856bbb00f2b4084fb27461e9cd1fae
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/datatables/jquery.dataTables.min.js HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "14692-63b7fcde-812ee;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: application/x-javascript
content-length: 27388
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/modules/fontawesome-free/webfonts/fa-solid-900.woff2 | 185.196.10.85 | 200 OK | 78 kB |
URL GET HTTP/2cdnupdateservice.com/assets/modules/fontawesome-free/webfonts/fa-solid-900.woff2 IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 78196, version 331.-31261 Hashe8a427e15cc502bef99cfd722b37ea98 a9922842a120a7f1eaced667480c5e185a106d69 d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/modules/fontawesome-free/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/assets/modules/fontawesome-free/css/all.min.css
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:03 GMT
etag: "13174-63b7fcde-8266d;;;"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: font/woff2
content-length: 78196
accept-ranges: bytes
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/favicon.ico | 185.196.10.85 | 200 OK | 4.2 kB |
URL GET HTTP/2cdnupdateservice.com/favicon.ico IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash2df3bd966f2c8af0095423679735a325 4eabcce6b2b7458895e58e740d82489f2b5020f5 dd09fc33e56f0f4f92970ea4d40f17683e9179006c04bb7583711e737b88efbd
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 11:46:04 GMT
etag: "3c2e-63b7fcde-826ee;br"
last-modified: Fri, 06 Jan 2023 10:50:06 GMT
content-type: image/x-icon
content-length: 4215
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 11:46:04 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnupdateservice.com/assets/css/bootstrap.custom.css | 185.196.10.85 | 404 Not Found | 1.2 kB |
URL GET HTTP/2cdnupdateservice.com/assets/css/bootstrap.custom.css IP185.196.10.85:443 ASN#42624 Simple Carrier LLC
Requested byhttps://cdnupdateservice.com/login.php CertificateIssuerLet's Encrypt Subjectcdnupdateservice.com FingerprintED:B7:62:99:80:38:9C:BE:8C:74:DB:8C:91:63:EA:DB:17:B3:8F:35 ValidityFri, 29 Mar 2024 22:07:16 GMT - Thu, 27 Jun 2024 22:07:15 GMT
File typeHTML document, ASCII text, with very long lines (1274), with no line terminators Hash8c16945397b2ea2fa974494c910f6d08 87289c714f1955cc0a4b8d0f5319bf0dcf771141 16782bd72a33f1963efb1d59aa17f964a604235a255e51dd4aafe0e0587040c6
| Analyzer | Verdict | Alert |
|---|
| urlquery | malware | Malware - Botnet panel | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /assets/css/bootstrap.custom.css HTTP/1.1
Host: cdnupdateservice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnupdateservice.com/login.php
Cookie: PHPSESSID=cbb5j0c94u58484cgr80i3scao
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html
cache-control: private, no-cache, max-age=0
pragma: no-cache
date: Tue, 07 May 2024 11:46:03 GMT
server: LiteSpeed
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|