Report - modules.su/pages/login.php/

Report Overview

Submitted URL
modules.su/pages/login.php/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-23 05:32:30
Access
public
Website Title
Unam Web Panel — Login
Final URL
modules.su/pages/login.php/
Tags
botpanel malware
urlquery detections
Malware - Botnet panel

Detections

urlquery
13
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
modules.su	unknown	2024-02-24	2024-03-07	2024-03-21	5.6 kB	82 kB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	modules.su/pages/login.php/	0 B	2023-03-07	2024-05-03
Pretty URL modules.su/pages/login.php/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-03 22:17:52 Times Seen37317024 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (12)

URL IP Response Size

modules.su/pages/assets/css/adminlte.min.css

188.114.97.1

404 Not Found

6.0 kB

URL GET HTTP/3
modules.su/pages/assets/css/adminlte.min.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
gzip compressed data, from Unix
Size
6.0 kB (5955 bytes)
Hash
f6895254716b5843d06af03943cef115
7cd9d1594cb693c627e554c657ccc14391cb2cae
8415d1654883c4b630e6dc757bfbedec8c6ce1dff00e0329f138c5094a54fef3

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/assets/css/adminlte.min.css HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 05:30:27 GMT
content-type: text/html; charset=iso-8859-1
x-robots-tag: noindex, nofollow
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eccsjK%2BM8d2AkBekNA9tbnK0Mlre%2B2dfD1cicP1cuOMU8%2BItRz%2FQKQcxjtQLVP1omWSF4Pr3ZH27hTTei4gntL%2FeSl0H2MwrbCP1H6Xqt%2Fi2KXpS7%2B9GBpNgN2T6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878b76320f44568d-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

modules.su/pages/__UNAM_LIB/unam_lib.js

188.114.97.1

404 Not Found

7.5 kB

URL GET HTTP/3
modules.su/pages/__UNAM_LIB/unam_lib.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
gzip compressed data, from Unix
Size
7.5 kB (7522 bytes)
Hash
8d4c2a304c3de5035533b019be86336d
74b3212a8a534be1a350290518cc47b2b1e3ce95
aa12509ff0c666fe44c3db8e305f076d95b9fd49b2bbd407ddbb648ae417f238

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/__UNAM_LIB/unam_lib.js HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 05:30:27 GMT
content-type: text/html; charset=iso-8859-1
x-robots-tag: noindex, nofollow
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=082o2FzFn%2BQRjJgLIv2DV7%2BxaTFPGUcd7%2BXdH2zwunAzQrmCM2H5dTeOPquvM3DLaVP9wvPwVEFnC%2FgWue6w1s7LM1XQ6%2Fbgzo7HbFaK%2FsziP7PH%2FnNGkY9ilrDT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878b76320f4c568d-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

modules.su/pages/assets/modules/izitoast/iziToast.min.css

188.114.97.1

404 Not Found

8.4 kB

URL GET HTTP/3
modules.su/pages/assets/modules/izitoast/iziToast.min.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
gzip compressed data, from Unix
Size
8.4 kB (8383 bytes)
Hash
63a7cdb3f6296dd87a5d3ab5b4b163fc
48b5b06ecce94ffb620240f21815bf69d7ebe1f6
3cd626c0dcdfa210ba83009b0941f147a5046fa25b3c3a7cd145d93be31a1cb1

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/assets/modules/izitoast/iziToast.min.css HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 05:30:27 GMT
content-type: text/html; charset=iso-8859-1
x-robots-tag: noindex, nofollow
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2wjJ%2By9DB%2FbR6OiQ2fLRej5324EO0eqd%2BBC%2BQQL72a2Cc4lGLxB9xltW8wsbFSuD%2BtTAbWJtE90I7TcZ1x97NDwM7zenEpMv91s8ZnLbO4%2Fzxg5Rzl1L%2B4uRtqNr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878b76320f41568d-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

modules.su/pages/assets/modules/select2/select2.min.css

188.114.97.1

522 No Reason Phrase

7.0 kB

URL GET HTTP/3
modules.su/pages/assets/modules/select2/select2.min.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
HTML document, ASCII text, with very long lines (460)
Size
7.0 kB (7048 bytes)
Hash
7e490dfee16db0f555312f3a7c27a122
1bf83d06389a59ffee4b7bb65362522a3fbc0569
2b1d0f877cd583ea535976ad247ad59a3fc738699758910741a63dc71ca6c01c

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/assets/modules/select2/select2.min.css HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 522 No Reason Phrase
date: Tue, 23 Apr 2024 05:30:42 GMT
content-type: text/html; charset=UTF-8
content-length: 7048
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LIBgfov1I14orop5bzCUDMSG%2FzCqcheqoKgIQLgGRv%2BnBfxykd4VpsDMsID3U8bLcNKqUBvxmbNKuxQkyEqNzuzXx7xxm4dWAw7SGBib8HjxTpPjGoRWaFHJQUpM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 878b76320f43568d-OSL
alt-svc: h3=":443"; ma=86400

modules.su/pages/assets/modules/izitoast/iziToast.min.js

188.114.97.1

404 Not Found

7.0 kB

URL GET HTTP/3
modules.su/pages/assets/modules/izitoast/iziToast.min.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
HTML document, ASCII text, with very long lines (460)
Size
7.0 kB (7048 bytes)
Hash
df79b6f5f3b19641c1895b111460dc50
c51275a7c54b985b6ae40eb15113333c94c3ebdf
c9ce4aee4478cea99c0de10cc55a10d4e4d599fffd2bf303f68287817cb7d035

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/assets/modules/izitoast/iziToast.min.js HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 522 No Reason Phrase
date: Tue, 23 Apr 2024 05:30:42 GMT
content-type: text/html; charset=UTF-8
content-length: 7048
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QJSJrcRebduUQ1z6DckbkETH1eeM%2BifZ2v2X7HwBeCtcQu%2FyjpeX6jPRQLpg5E5fONGw3e7xoTi1%2BNDN2XHV1PazylxAItv91gFfFptP3TUzlbzfZ%2FuieKaqLweS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 878b76320f4a568d-OSL
alt-svc: h3=":443"; ma=86400

modules.su/pages/assets/modules/select2/select2.min.js

188.114.97.1

522 No Reason Phrase

7.0 kB

URL GET HTTP/3
modules.su/pages/assets/modules/select2/select2.min.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
HTML document, ASCII text, with very long lines (460)
Size
7.0 kB (7048 bytes)
Hash
7482c960e3df94d9c33fb3814f2a9ced
d52b139cda72a687ce47ac711b5263d857b46536
b298bb5721c10b9dbe45a6eb552ab98b7046a09d75d32e2e5c5850852be1228c

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/assets/modules/select2/select2.min.js HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 522 No Reason Phrase
date: Tue, 23 Apr 2024 05:30:42 GMT
content-type: text/html; charset=UTF-8
content-length: 7048
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nijcFZ16gfULZUFTDK4RNC4FamciK52EBp1SytDVAA8lPNCzT%2BCRDkWjF%2Fwcmep9gaj%2FFcXryGzup49JAZdgicJJp6lAdFZZJQREjIuCE%2Ftevqbk8rrVzZwu%2FbEk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 878b76320f4b568d-OSL
alt-svc: h3=":443"; ma=86400

modules.su/pages/assets/modules/fontawesome-free/css/fontawesome.min.css

188.114.97.1

522 No Reason Phrase

7.0 kB

URL GET HTTP/3
modules.su/pages/assets/modules/fontawesome-free/css/fontawesome.min.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
HTML document, ASCII text, with very long lines (460)
Size
7.0 kB (7048 bytes)
Hash
31dbbe173b15da678cd303ce4ecb5aca
6f8da6f29ba890c98ebc2bbf9c13481c21a326ba
faf8cbb1e5cb87c04db55f894f12924f051f3436ceb1527c2d7dca38cd32ca71

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/assets/modules/fontawesome-free/css/fontawesome.min.css HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 522 No Reason Phrase
date: Tue, 23 Apr 2024 05:30:42 GMT
content-type: text/html; charset=UTF-8
content-length: 7048
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o1qel%2BamKJtEnrWbBmCTCbeJkjtodcJdZl2%2FDqM6tC%2BG1GKDz5Sc4DkIX9dPQYASmbawu7gKzwIamUFVBqiycb7gfze8plqnRX6sftGpNxwOkycwzmu6JY2R%2FP4K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 878b7631ff3f568d-OSL
alt-svc: h3=":443"; ma=86400

modules.su/pages/login.php/

188.114.97.1

200 OK

8.3 kB

URL User Request GET HTTP/2
modules.su/pages/login.php/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
gzip compressed data, from Unix
Size
8.3 kB (8295 bytes)
Hash
a0d1b2663d36a6bae44c2938177207aa
9f4e920603e6fbdf5a6054e811c9b2395662095d
363b414aeb048738477e3fa340f8e2e06bd38fef71274a2867267c69d6a72d3f

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/login.php/ HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 23 Apr 2024 05:30:27 GMT
content-type: text/html; charset=UTF-8
x-robots-tag: noindex, nofollow, noindex, nofollow
x-powered-by: PHP/7.4.33
content-security-policy: default-src 'self'; script-src 'self' 'nonce-cuTQ5h0YDbOKws0ftOH4QA=='; style-src 'self'; img-src 'self' data:; object-src 'none'; frame-src 'none'; child-src 'none'; worker-src 'none'; media-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none';
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'
permissions-policy: geolocation=(), microphone=(), camera=()
referrer-policy: no-referrer
x-content-type-options: nosniff
x-frame-options: DENY
cross-origin-resource-policy: same-origin
set-cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31; path=/; HttpOnly; SameSite=Strict
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S9aBrQk5vwEMyjdSi9QyxvzNAhEizYdcVZq04JljBSlEyM8WVjGzLegEu1VbMZgkAzbp2H95%2B%2BkCQEvl%2FGXSfTiC%2BnIEXWFJZanjPPU7hS6%2FcpGUzxPGt3roDrYS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878b76303d8ab4eb-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

modules.su/pages/assets/img/favicon.png

188.114.97.1

522 No Reason Phrase

7.0 kB

URL GET HTTP/3
modules.su/pages/assets/img/favicon.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
HTML document, ASCII text, with very long lines (460)
Size
7.0 kB (7048 bytes)
Hash
aa0308a71d3336b7443534f78f902891
075582a7dd19110d2bed1063a358eca686742520
057e988b9c16e16cf1a21702ea2c44ef4f07183ac2240b01ba3f3e9674cf1fcd

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/assets/img/favicon.png HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 522 No Reason Phrase
date: Tue, 23 Apr 2024 05:30:47 GMT
content-type: text/html; charset=UTF-8
content-length: 7048
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hc6%2F9vGne3lkBZ4prKqp4djnr6mi60UOgx2n4JQP4xd7SDR74GUE2x6VXPrSv44PDrt0OpkYMSebhFFQKYHIMCefmsrp%2BrDxEajwXSufkze7kmu0j2ZTasCj73ps"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 878b764fcd12568d-OSL
alt-svc: h3=":443"; ma=86400

modules.su/pages/assets/css/custom.css

188.114.97.1

404 Not Found

225 B

URL GET HTTP/3
modules.su/pages/assets/css/custom.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
HTML document, ASCII text, with no line terminators
Size
225 B (225 bytes)
Hash
627c6496d5f87787bb699b1055b040c4
2c4206007312dddd24a1759e8056f95b6bdcde95
6e6c0bff48b162f12fe310d88f894fd7a7968c13103fd2a1fe81668763cc704c

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/assets/css/custom.css HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 05:30:28 GMT
content-type: text/html; charset=iso-8859-1
x-robots-tag: noindex, nofollow
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R5gHXWHR04XPIQCn3PnbMXZwp0aFmNT5X3brCelT%2F4BbSn%2B7NE5hgk6nSpUtO5c0okV45Wa%2Fq2PrJbU9SElxFVQLLjWsJDwm5McDccxeMnZm1tbg20Qj8A4zIpLC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878b76320f47568d-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

modules.su/pages/assets/modules/jquery/jquery-3.7.1.min.js

188.114.97.1

522 No Reason Phrase

7.0 kB

URL GET HTTP/3
modules.su/pages/assets/modules/jquery/jquery-3.7.1.min.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
HTML document, ASCII text, with very long lines (7377), with no line terminators
Size
7.0 kB (7048 bytes)
Hash
e4d4403262981b4f7ec6ebdfb4eeb884
ee4e0362a257ff632b4df4b8af697a3773f33590
bb3afde51624f440e04a0541445f81206a36be5a18dafe26e9e07a2da2c25c00

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/assets/modules/jquery/jquery-3.7.1.min.js HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 522 No Reason Phrase
date: Tue, 23 Apr 2024 05:30:43 GMT
content-type: text/html; charset=UTF-8
content-length: 7048
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=842YYMwDMg%2Bca1tNfDE35zuJ6e4HS%2BLxYWQuPko2tjNAjnMbSqMTVtWg3XMDk2JyzR2yOY2DXP30oOE19I9FLcIZdTDSV0skhvM4YqHgTvwF2h1qoFeDMfpP%2Fee8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 878b76320f49568d-OSL
alt-svc: h3=":443"; ma=86400

modules.su/pages/assets/modules/fontawesome-free/css/solid.min.css

188.114.97.1

404 Not Found

253 B

URL GET HTTP/3
modules.su/pages/assets/modules/fontawesome-free/css/solid.min.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://modules.su/pages/login.php/
Certificate
IssuerLet's Encrypt
Subjectmodules.su
FingerprintED:98:AA:95:36:99:7C:6B:F0:89:13:95:54:9A:5F:95:D8:7F:D8:E3
ValidityThu, 07 Mar 2024 08:02:43 GMT - Wed, 05 Jun 2024 08:02:42 GMT

File type
HTML document, ASCII text, with no line terminators
Size
253 B (253 bytes)
Hash
ec7825a3f39afbe2ad849f5b153b55ca
788207f0c1f8e5dac495391f299ee371755cc98a
491f337270d5a4276d1eae97604f1f99d0f064d8f8171fea6b8e5edeaae54d08

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /pages/assets/modules/fontawesome-free/css/solid.min.css HTTP/1.1
Host: modules.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=e1ea8509177bc515ef41832a162bfc31
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 05:30:27 GMT
content-type: text/html; charset=iso-8859-1
x-robots-tag: noindex, nofollow
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x15z%2BPqIz1Qf7yMHtVVx3WBdzNkgVU%2F9na%2BebpQvdOBMKQEoCNtczjz%2BVXI%2Fsc3ezc2qyzLHhRy8QGWHHrADWJ8vSC6dUSeEl7bvmWVI4YROc%2FIIPflMEIGCoemE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878b76320f40568d-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3