Report - bash.o2switch.net:2096/

Report Overview

Visitedpublic

2025-02-18 07:33:01

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
bash.o2switch.net	unknown	2007-03-12	2018-01-16	2024-10-26	9.2 kB	125 kB	109.234.162.135

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	bash.o2switch.net:2096/	ScriptElement	84 B	2023-03-07	2025-08-02
URL bash.o2switch.net:2096/ IP / ASN 109.234.162.135 #50474 O2switch SAS Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 2473 Size 84 B (84 bytes) MD5 f88baf75b8e07dd7ec741e96546bc4f7 SHA1 a74b22312f7ce6ea751190a32f188b305f2e71e3 SHA256 1e5f5c8697f7a5934a4e88d298805feb7272c5ae7b1a357b44ec0b5289b60a50 Format Code Loading...

	bash.o2switch.net:2096/	ScriptElement	20 kB	2025-02-18	2025-02-18
URL bash.o2switch.net:2096/ IP / ASN 109.234.162.135 #50474 O2switch SAS Introduced by ScriptElement Embedded true Resource Info First Seen 2025-02-18 Last Seen 2025-02-18 Times Seen 1 Size 20 kB (19981 bytes) MD5 bf957284ebb5fe75a32eb90373196f81 SHA1 2131d64cc65c8bc10111ee62d05baa60c316ee86 SHA256 c9141ec7d238b1c275056205881eda0f8309ce99ed583975745e85101d9a7d9b Format Code Loading...

HTTP Transactions (14)

	URL	IP	Response	Size
	GET bash.o2switch.net:2096/	109.234.162.135	301 Moved	114 B
URL bash.o2switch.net:2096/ IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byN/A Resource Info File typeHTML document, ASCII text First Seen2025-02-18 Last Seen2025-02-18 Times Seen1 Size114 B (114 bytes) MD502f2db2ff803aa3f7a4a840b31f78a59 SHA1656a8219b867d0fc8cfb0fb278911388bdc72ab7 SHA256cff0d3770f4bbe267d32ffcb6c51652a1a1dfef0b01b388eeb67f4332227277a Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers `GET / HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Content-length: 114 Location: https://bash.o2switch.net:2096 Content-type: text/html; charset="utf-8" Cache-Control: no-cache, no-store, must-revalidate, private Pragma: no-cache`

	GET bash.o2switch.net:2096/	109.234.162.135	200 OK	12 kB
URL bash.o2switch.net:2096/ IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byN/A Resource Info File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (11179) First Seen2025-02-18 Last Seen2025-02-18 Times Seen1 Size12 kB (12308 bytes) MD51f895104b757f7085e6df4e668493230 SHA1fe6cbee9f95b78def1a91b18ee8aa23b4424fc57 SHA256f3a44fc72524c5618936b7aae557204b4b856e72106869d049e25ffe8deefdf1 Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers `GET / HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset="utf-8" Date: Tue, 18 Feb 2025 07:32:36 GMT Cache-Control: no-cache, no-store, must-revalidate, private Pragma: no-cache Set-Cookie: webmailrelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; HttpOnly; path=/; port=2096; secure roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure roundcube_sessauth=expired; HttpOnly; domain=bash.o2switch.net; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure roundcube_cookies=enabled; HttpOnly; expires=Wed, 18-Feb-2026 07:32:36 GMT; path=/; port=2096; secure Content-Encoding: gzip Content-Length: 12308

	GET bash.o2switch.net:2096/cPanel_magic_revision_1684677546/unprotected/cpanel/style_v2_optimized.css	109.234.162.135	200 OK	33 kB
URL bash.o2switch.net:2096/cPanel_magic_revision_1684677546/unprotected/cpanel/style_v2_optimized.css IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typeASCII text, with very long lines (35968) First Seen2023-05-05 Last Seen2025-03-11 Times Seen11 Size33 kB (33186 bytes) MD5f8b614017024ab1af1490043bae12bdc SHA146ef567ef79be2951dceafd11140dc029296f00d SHA2565aa588e1f67ef7c36a72c05a6b53cc4adc95319403ba1c96cf3bfbf5f593a186 Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1684677546/unprotected/cpanel/style_v2_optimized.css HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/ Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Sun, 21 May 2023 13:59:06 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Encoding: gzip Content-Length: 33186`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/open_sans.min.css	109.234.162.135	200 OK	522 B
URL bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/open_sans.min.css IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typeASCII text, with very long lines (6358), with no line terminators First Seen2023-04-06 Last Seen2025-08-02 Times Seen3983 Size522 B (522 bytes) MD5952b5c93a75a89c458fe5093480dd1bc SHA1564d17e569cb59cf7043d7f777727c19a3cbda3a SHA25617781767b9edf1ebdde3529494d5cb3d8403702893db10258bedd3f9b8002f20 Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/open_sans.min.css HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/ Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 30 Mar 2022 03:16:35 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Encoding: gzip Content-Length: 522`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/webmail-logo.svg	109.234.162.135	200 OK	2.4 kB
URL bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/webmail-logo.svg IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typeSVG Scalable Vector Graphics image First Seen2023-04-08 Last Seen2025-08-02 Times Seen4399 Size2.4 kB (2399 bytes) MD5bc0c956653325b9e694d4dd1dfb78020 SHA1e1196e4db68ed573355ade966152a084581b40ec SHA256998cd48cdc0414f694d0a3a299dd2beb1134769d5666c7e5567e7d20b4174ef8 Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1665094026/unprotected/cpanel/images/webmail-logo.svg HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/ Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Thu, 06 Oct 2022 22:07:06 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Encoding: gzip Content-Length: 2399`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/notice-error.png	109.234.162.135	200 OK	1.0 kB
URL bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/notice-error.png IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced First Seen2023-04-08 Last Seen2025-08-02 Times Seen4684 Size1.0 kB (1026 bytes) MD5a3265cc598ae28633c060889e790f80c SHA157530d6996c8f36711ef05681474b8f63d4184b3 SHA256bcaf01928e5c7246ab0bb7e83f609b485a67a5e442d3dd94539a883c11fb70cd Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1665094026/unprotected/cpanel/images/notice-error.png HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/cPanel_magic_revision_1684677546/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 06 Oct 2022 22:07:06 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Length: 1026`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/icon-username.png	109.234.162.135	200 OK	320 B
URL bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/icon-username.png IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typePNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced First Seen2023-04-08 Last Seen2025-08-02 Times Seen4746 Size320 B (320 bytes) MD507ff84f8c855e5fe9d510ff5c9a4b1e4 SHA111c262053e2b9be57d1dba7cb3d916ef041a0e50 SHA25605ce0f813e6236158fa1d115faba62cd2041aab1878cac0960a0f45575cece1e Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1665094026/unprotected/cpanel/images/icon-username.png HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/cPanel_magic_revision_1684677546/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 06 Oct 2022 22:07:06 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Length: 320`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/icon-password.png	109.234.162.135	200 OK	450 B
URL bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/icon-password.png IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typePNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced First Seen2023-04-08 Last Seen2025-08-02 Times Seen4737 Size450 B (450 bytes) MD57ac1cefcb7eab93c6d6981ecde6c1635 SHA11523f8cb80ab19108549d0b7db31a58b71c05d39 SHA256a02998df88a6efb0baa526796b2b682ce9fdd6471ceb19170b326320f22f7053 Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1665094026/unprotected/cpanel/images/icon-password.png HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/cPanel_magic_revision_1684677546/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 06 Oct 2022 22:07:06 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Length: 450`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff	109.234.162.135	200 OK	23 kB
URL bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typeWeb Open Font Format, TrueType, length 22660, version 1.0 First Seen2023-04-06 Last Seen2025-08-02 Times Seen5521 Size23 kB (22660 bytes) MD579515ad0788973c533405f7012dfeccd SHA15092881fad2caffdc6bf71bdab1ea547b73d3564 SHA25622e7a1b10c110072f5a0bfd16e2197a76b279ec879bcce8978fada1dc9ee5d40 Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/open_sans.min.css Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: application/font-woff Last-Modified: Wed, 30 Mar 2022 03:16:35 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Length: 22660`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff	109.234.162.135	200 OK	23 kB
URL bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typeWeb Open Font Format, TrueType, length 22908, version 1.0 First Seen2023-04-06 Last Seen2025-08-02 Times Seen4824 Size23 kB (22908 bytes) MD5697574b47bcfdd2c45e3e63c7380dd67 SHA14590722b795938e0b6ff1b99701d1abe37aeabef SHA25626b216fadb2ffcd542ca56c2d84f9918f62e40de89bf88b4211fffacd2a4ad83 Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/open_sans.min.css Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: application/font-woff Last-Modified: Wed, 30 Mar 2022 03:16:35 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Length: 22908`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff	109.234.162.135	200 OK	22 kB
URL bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typeWeb Open Font Format, TrueType, length 22432, version 1.0 First Seen2023-04-06 Last Seen2025-08-02 Times Seen4572 Size22 kB (22432 bytes) MD52e90d5152ce92858b62ba053c7b9d2cb SHA18cf65f42a2a8c349ccd6ab63b6cbd17c96fd665c SHA256a0357cb694b5284870c77c0dbcaf33f238004800419288afde313317b0dbd0b7 Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/open_sans.min.css Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: application/font-woff Last-Modified: Wed, 30 Mar 2022 03:16:35 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Length: 22432`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/notice-info.png	109.234.162.135	200 OK	976 B
URL bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/notice-info.png IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced First Seen2023-04-08 Last Seen2025-08-02 Times Seen4160 Size976 B (976 bytes) MD514146cf832470d9beca95a708a1d6f8d SHA1d4b506f92876baea69409f3a78c4718757a53b33 SHA25695f8a142dd96c310afeb75329ef504f162ab3102a81fc07f20b268361990f526 Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1665094026/unprotected/cpanel/images/notice-info.png HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/cPanel_magic_revision_1684677546/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled; timezone=Etc/UTC Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 06 Oct 2022 22:07:06 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Length: 976`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/notice-success.png	109.234.162.135	200 OK	962 B
URL bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/notice-success.png IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced First Seen2023-04-08 Last Seen2025-08-02 Times Seen4152 Size962 B (962 bytes) MD50a0ec2a6468d4d1aa3fc2baa70271ac8 SHA1a31fb01790aca8dc1976450e4234cb6ccc328956 SHA256cafbe3036533fe094931f5745f8cb9962a34409522e93d63ac8427acb9a02c79 Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1665094026/unprotected/cpanel/images/notice-success.png HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/cPanel_magic_revision_1684677546/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled; timezone=Etc/UTC Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 06 Oct 2022 22:07:06 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Length: 962`

	GET bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/warning.png	109.234.162.135	200 OK	1.1 kB
URL bash.o2switch.net:2096/cPanel_magic_revision_1665094026/unprotected/cpanel/images/warning.png IP / ASN 109.234.162.135 #50474 O2switch SAS Requested byhttps://bash.o2switch.net:2096/ Resource Info File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced First Seen2023-04-08 Last Seen2025-08-02 Times Seen4149 Size1.1 kB (1060 bytes) MD5a64b8c7407bf94cc4448cb210bb882e7 SHA1a526cf52b2c5b6c2d0409b886de4aa968000fcd8 SHA2567ecb82019606d891c5197d2f8ba24ec323d9b10a089facc82d089ff1ec3d399b Certificate Info IssuerLet's Encrypt Subjectbash.o2switch.net Fingerprint59:2D:A7:9C:15:D3:29:4A:10:22:FE:AD:06:F4:82:1C:C0:B9:A1:0C ValidityTue, 24 Dec 2024 16:49:47 GMT - Mon, 24 Mar 2025 16:49:46 GMT HTTP Headers GET /cPanel_magic_revision_1665094026/unprotected/cpanel/images/warning.png HTTP/1.1 Host: bash.o2switch.net:2096 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bash.o2switch.net:2096/cPanel_magic_revision_1684677546/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3asCsJzgagGVI1kiys%2cc514a94e3057629a4e02f0fc60335d39; roundcube_cookies=enabled; timezone=Etc/UTC Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 06 Oct 2022 22:07:06 GMT Date: Tue, 18 Feb 2025 07:32:37 GMT Cache-Control: max-age=5184000, public Expires: Sat, 19 Apr 2025 07:32:37 GMT Content-Length: 1060`

Detections

Host Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (2)

HTTP Transactions (14)

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers