WEBSITE ANALYSIS REPORT

http://cpssssmail-update-new01079012.mdbgo.io/?cpsess=3D18613707105743384938

03 Dec 2025 · 17:16:56.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:16:32.133 GET 200 document 10.3 KB 472 ms 6 alerts

17:16:32.760 GET 200 stylesheet 6.2 KB 1324 ms 2 alerts

17:16:32.762 GET 200 stylesheet 139.1 KB 1433 ms 2 alerts

17:16:32.763 GET 200 img 5.2 KB 986 ms 2 alerts

17:16:32.765 GET 200 script 68.0 KB 176 ms —

17:16:32.766 GET 200 script 18.7 KB 89 ms —

17:16:32.768 GET 200 script 47.8 KB 119 ms —

17:16:32.779 GET 200 script 83.6 KB 440 ms —

17:16:32.780 GET 200 script 49.8 KB 142 ms —

17:16:32.782 GET 200 script 17.2 KB 786 ms —

17:16:33.655 GET 200 img 1.0 KB 136 ms 2 alerts

17:16:33.660 GET 200 img 976 B 139 ms 2 alerts

17:16:33.662 GET 200 img 962 B 265 ms 2 alerts

17:16:33.665 GET 200 img 1.0 KB 1232 ms 2 alerts

17:16:33.668 GET 200 img 320 B 220 ms 2 alerts

17:16:33.671 GET 200 img 450 B 253 ms 2 alerts

17:16:33.679 GET 200 font 22.1 KB 1428 ms 2 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://sh001.webhostbox.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff

IP / ASN

162.241.27.10

AS46606 · UNIFIEDLAYER-AS-1

Requested by: https://cpssssmail-update-new01079012.mdbgo.io/?cpsess=3D18613707105743384938

Resource information

File type: Web Open Font Format, TrueType, length 22660, version 1.0
MIME type: application/font-woff
First seen (UTC): 06 Apr 2023 · 15:25:07.000 UTC
Last seen (UTC): 22 Oct 2026 · 07:17:24.154 UTC
Times seen: 14024

Size: 22.1 KB (22660 bytes)
MD5: 79515ad0788973c533405f7012dfeccd
SHA1: 5092881fad2caffdc6bf71bdab1ea547b73d3564
SHA256: 22e7a1b10c110072f5a0bfd16e2197a76b279ec879bcce8978fada1dc9ee5d40

Certificate information

Issuer: Sectigo Limited · Sectigo RSA Domain Validation Secure Server CA
Subject: *.webhostbox.net
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 59:C6:A9:6C:1C:4C:BE:E1:DF:00:DF:B9:E0:D4:C0:90:4C:28:8A:22
Valid from: Sun, 04 May 2025 00:00:00 GMT
Valid until: Mon, 04 May 2026 23:59:59 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1
Host: sh001.webhostbox.net:2096
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cpssssmail-update-new01079012.mdbgo.io
DNT: 1
Connection: keep-alive
Referer: https://sh001.webhostbox.net:2096/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Content-Type: application/font-woff
Last-Modified: Wed, 30 Mar 2022 03:16:35 GMT
Date: Wed, 03 Dec 2025 17:16:34 GMT
Cache-Control: max-age=5184000, public
Expires: Sun, 01 Feb 2026 17:16:34 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Length: 22660

17:16:33.683 GET 200 font 22.4 KB 1408 ms 2 alerts

17:16:33.685 GET 200 font 21.9 KB 1383 ms 2 alerts

17:16:34.520 GET 200 font 15.7 KB 144 ms 2 alerts

17:16:34.540 GET 200 font 15.7 KB 141 ms 2 alerts

17:16:34.546 GET 200 font 15.7 KB 143 ms 2 alerts

http://cpssssmail-update-new01079012.mdbgo.io/?cpsess=3D18613707105743384938

Domain graph

Hostnames

Connections

Network requests

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://cpssssmail-update-new01079012.mdbgo.io/?cpsess=3D18613707105743384938

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://cpssssmail-update-new01079012.mdbgo.io/?cpsess=3D18613707105743384938

Domain graph

Network requests