WEBSITE ANALYSIS REPORT

http://cpssssmail-update-new01079012.mdbgo.io/?cpsess=3D18613707105743384938

03 Dec 2025 · 17:16:56.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:16:32.133 GET 200 document 10.3 KB 472 ms 6 alerts

17:16:32.760 GET 200 stylesheet 6.2 KB 1324 ms 2 alerts

17:16:32.762 GET 200 stylesheet 139.1 KB 1433 ms 2 alerts

17:16:32.763 GET 200 img 5.2 KB 986 ms 2 alerts

17:16:32.765 GET 200 script 68.0 KB 176 ms —

17:16:32.766 GET 200 script 18.7 KB 89 ms —

17:16:32.768 GET 200 script 47.8 KB 119 ms —

17:16:32.779 GET 200 script 83.6 KB 440 ms —

17:16:32.780 GET 200 script 49.8 KB 142 ms —

17:16:32.782 GET 200 script 17.2 KB 786 ms —

17:16:33.655 GET 200 img 1.0 KB 136 ms 2 alerts

17:16:33.660 GET 200 img 976 B 139 ms 2 alerts

17:16:33.662 GET 200 img 962 B 265 ms 2 alerts

17:16:33.665 GET 200 img 1.0 KB 1232 ms 2 alerts

17:16:33.668 GET 200 img 320 B 220 ms 2 alerts

17:16:33.671 GET 200 img 450 B 253 ms 2 alerts

17:16:33.679 GET 200 font 22.1 KB 1428 ms 2 alerts

17:16:33.683 GET 200 font 22.4 KB 1408 ms 2 alerts

17:16:33.685 GET 200 font 21.9 KB 1383 ms 2 alerts

17:16:34.520 GET 200 font 15.7 KB 144 ms 2 alerts

Transaction #07

Request / response

URL

GET HTTPS

https://sh001.webhostbox.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.ttf

IP / ASN

162.241.27.10

AS46606 · UNIFIEDLAYER-AS-1

Requested by: https://cpssssmail-update-new01079012.mdbgo.io/?cpsess=3D18613707105743384938

Resource information

File type: TrueType Font data, 19 tables, 1st "FFTM"
MIME type: application/octet-stream
First seen (UTC): 08 May 2023 · 01:50:41.000 UTC
Last seen (UTC): 21 Oct 2026 · 02:04:54.288 UTC
Times seen: 2152

Size: 15.7 KB (16077 bytes)
MD5: 372fc1a7f4cb3b27c9a882ad32b9a896
SHA1: 616de1feeaaee2d9876a178b03cabcd6ec35cf10
SHA256: 059b0a3c84f25dffbef834c221ea483bfad7da340d1b344a7458902c937cceb0

Certificate information

Issuer: Sectigo Limited · Sectigo RSA Domain Validation Secure Server CA
Subject: *.webhostbox.net
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 59:C6:A9:6C:1C:4C:BE:E1:DF:00:DF:B9:E0:D4:C0:90:4C:28:8A:22
Valid from: Sun, 04 May 2025 00:00:00 GMT
Valid until: Mon, 04 May 2026 23:59:59 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.ttf HTTP/1.1
Host: sh001.webhostbox.net:2096
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cpssssmail-update-new01079012.mdbgo.io
DNT: 1
Connection: keep-alive
Referer: https://sh001.webhostbox.net:2096/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Wed, 30 Mar 2022 03:16:35 GMT
Date: Wed, 03 Dec 2025 17:16:34 GMT
Cache-Control: max-age=5184000, public
Expires: Sun, 01 Feb 2026 17:16:34 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Length: 38452

17:16:34.540 GET 200 font 15.7 KB 141 ms 2 alerts

17:16:34.546 GET 200 font 15.7 KB 143 ms 2 alerts

http://cpssssmail-update-new01079012.mdbgo.io/?cpsess=3D18613707105743384938

Domain graph

Hostnames

Connections

Network requests

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://cpssssmail-update-new01079012.mdbgo.io/?cpsess=3D18613707105743384938

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://cpssssmail-update-new01079012.mdbgo.io/?cpsess=3D18613707105743384938

Domain graph

Network requests