{"report_id":"64f8be9e-ee50-486f-b201-91cb371f7a5a","version":0,"status":"done","tags":[],"date":"2026-06-26T23:52:31Z","url":{"schema":"http","addr":"cpanel.autocolourpaint.co.za/","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":0,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"title":"cPanel Login","dom":{"size":40301,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11323)","md5":"b46c106cd6fa350da3d02773e4de0007","sha1":"b1db66f00710b7a0e800a65b7e34313518a4dd99","sha256":"45046cb3cc920c221ee701b1574e5f56bcba817072b7f76a97b896678989d76d","sha512":"af591a34b1ea86f9906aef1c6387491e91f19cde4b7756d24632ac1e24dc884a64ead6d05127beb0d8e9739d5e15f261f28cb17f030cc1b43494a0cf1114d646","ssdeep":"384:1ihWD/ZmXg8rgWpnmeZyFhqoD/ZHyXPJ7kkXYrHefyB+5yH+ycR3PydLbFobHqwb:gYTZmXg8DpnmvqoofJ7kkIrTr5e6XS","tlshash":"e1033a2720f90473059a44d93c6f671d29bae323990b8d48b47d8bd48fa2fcfe8a3555","dom_hash":"domhashecf5374b8c80f607405df6484b97ec7f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cpanel.autocolourpaint.co.za/","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":0,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-31T23:52:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cpanel.autocolourpaint.co.za","ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"domain_registered":"2023-09-13","domain_rank":0,"first_seen":"2026-06-26T23:52:31.681993Z","last_seen":"2026-06-26T23:52:31.681993Z","alert_count":28,"request_count":14,"received_data":276553,"sent_data":9980,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"cPanel","description":"cPanel is a web hosting control panel. The software provides a graphical interface and automation tools designed to simplify the process of hosting a website.","website":"https://www.cpanel.net","common_platform_enumeration":"cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*","icon":"cPanel.png","categories":["Hosting panels"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.749Z","timestamp":1782517921749,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/open_sans.min.css\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:02 GMT\r\nServer: Apache\r\nContent-Type: application/font-woff\r\nLast-Modified: Wed, 28 May 2025 16:26:09 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:02 GMT\r\nContent-Length: 22432\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22432,"size_decoded":22746,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 22432, version 1.0","md5":"2e90d5152ce92858b62ba053c7b9d2cb","sha1":"8cf65f42a2a8c349ccd6ab63b6cbd17c96fd665c","sha256":"a0357cb694b5284870c77c0dbcaf33f238004800419288afde313317b0dbd0b7","sha512":"5f452b4ab3e3ff3a8225d092fbf7e147595b398742dec5abce787e54cef471c0bc29044e0e00142cc09af7ea1e2f6fbf6da5d5a8b476c86b71594ad68d30858a","ssdeep":"384:UiXG5Jd1G0Fr+9DY1NpS1pYQDO6kd5Tnd2rL6vhMB4liNPwFxDwlH:yJGGRNU/vDtU5TnG65T2ohwlH","tlshash":"68a2e068eb42fa27edb889773bb051fac154d928b570fbe3877a30d8108474fc460865","first_seen":"2023-04-06T15:25:07Z","last_seen":"2026-07-26T05:15:08.706685Z","times_seen":11151,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":319,"dns":0,"connect":0,"send":0,"wait":193,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/open_sans.min.css","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.018Z","timestamp":1782517921018,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/open_sans.min.css HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:01 GMT\r\nServer: Apache\r\nContent-Type: text/css\r\nLast-Modified: Wed, 28 May 2025 16:26:09 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:01 GMT\r\nContent-Encoding: gzip\r\nContent-Length: 522\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6358,"size_decoded":844,"mime_type":"text/css","magic":"ASCII text, with very long lines (6358), with no line terminators","md5":"681f206ec7530e625c4c2eeb994fa75a","sha1":"99d8c3fa934370dcf591f96721b055977baa75c5","sha256":"519ad7b14bb62f000de602b6f85ac8d1ae791047121ce5321c24bb2c4acfd875","sha512":"5904836fc3ac85ea0251aa73cd3a3fc9efd48581ac25d2eb285eb4d0feaefdfa9bb9e697ed62567839bce0c9d595b8da75046d096476bd6d3ac134580db73e1f","ssdeep":"96:pyAAUWA9nUAoW08ABx0yAc2mAArYSAJreAI9mAk9vGAQqa:pFxx1LT0Dj0F7BAUlFJwBkNhQV","tlshash":"99d1a493cae899da85c79ec238da1471ed3d641a901181d3e368d2c8e9f334df169f1b","first_seen":"2025-10-31T07:24:54.307016Z","last_seen":"2026-07-26T07:53:07.763404Z","times_seen":1358,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1654534366/unprotected/cpanel/images/notice-error.png","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.730Z","timestamp":1782517921730,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1654534366/unprotected/cpanel/images/notice-error.png HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/cPanel_magic_revision_1750121456/unprotected/cpanel/style_v2_optimized.css\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:01 GMT\r\nServer: Apache\r\nContent-Type: image/png\r\nLast-Modified: Mon, 06 Jun 2022 16:52:46 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:01 GMT\r\nContent-Length: 1026\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1026,"size_decoded":1326,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"a3265cc598ae28633c060889e790f80c","sha1":"57530d6996c8f36711ef05681474b8f63d4184b3","sha256":"bcaf01928e5c7246ab0bb7e83f609b485a67a5e442d3dd94539a883c11fb70cd","sha512":"41c2a7085b287d3f3cf6afaaf7bba0c2c42eed1a28f4fbebf2a3e5628e41aaea2c929697de97b939df18221dcd83a477ce3c8b1cdbf499ab64a5fbcbd3689b3e","ssdeep":"","tlshash":"bb11a5c7f3d3e8e8c9846c77c062210cecba32826264869d8a091c82de86c487306d13","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-07-26T05:15:08.714407Z","times_seen":11171,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1654534366/unprotected/cpanel/images/notice-info.png","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.755Z","timestamp":1782517921755,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1654534366/unprotected/cpanel/images/notice-info.png HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/cPanel_magic_revision_1750121456/unprotected/cpanel/style_v2_optimized.css\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d; timezone=Etc/UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:02 GMT\r\nServer: Apache\r\nContent-Type: image/png\r\nLast-Modified: Mon, 06 Jun 2022 16:52:46 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:02 GMT\r\nContent-Length: 976\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":976,"size_decoded":1275,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"14146cf832470d9beca95a708a1d6f8d","sha1":"d4b506f92876baea69409f3a78c4718757a53b33","sha256":"95f8a142dd96c310afeb75329ef504f162ab3102a81fc07f20b268361990f526","sha512":"69f28ff8e02b199cc9d42ba75ec305dbfdf95c0477cbec88a4c09da21d126e1f8063d45415ee9701013ff0546be2203745620ee794f3ce5dc21be4c0a744da67","ssdeep":"","tlshash":"1d1198c2ab6dd0784a51e6350ce1b4f77bbb298e35690bbe380cf14935454051990af1","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-07-26T05:15:08.708512Z","times_seen":9818,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1654534366/unprotected/cpanel/images/warning.png","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.758Z","timestamp":1782517921758,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1654534366/unprotected/cpanel/images/warning.png HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/cPanel_magic_revision_1750121456/unprotected/cpanel/style_v2_optimized.css\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d; timezone=Etc/UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:02 GMT\r\nServer: Apache\r\nContent-Type: image/png\r\nLast-Modified: Mon, 06 Jun 2022 16:52:46 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:02 GMT\r\nContent-Length: 1060\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1060,"size_decoded":1360,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"a64b8c7407bf94cc4448cb210bb882e7","sha1":"a526cf52b2c5b6c2d0409b886de4aa968000fcd8","sha256":"7ecb82019606d891c5197d2f8ba24ec323d9b10a089facc82d089ff1ec3d399b","sha512":"aeea5e9418c62ba9bb896db6ad89b2e8c13f174b10d3960c4d67878ba8c0fb3ce8524515716c120548876131d1f8192c36cb52e48cfd801f8f037a3abe65d179","ssdeep":"","tlshash":"261182ddb608c8baa94369b592fbf02168b9801e9847022c8948d8132f59a68e57235b","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-07-26T05:15:08.711277Z","times_seen":9768,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":462,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1654534366/unprotected/cpanel/images/cpanel-logo.svg","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.027Z","timestamp":1782517921027,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1654534366/unprotected/cpanel/images/cpanel-logo.svg HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:01 GMT\r\nServer: Apache\r\nContent-Type: image/svg+xml\r\nLast-Modified: Mon, 06 Jun 2022 16:52:46 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:01 GMT\r\nContent-Encoding: gzip\r\nContent-Length: 2632\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5617,"size_decoded":2960,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c47b4b5200566a2a496a11ba472ec5da","sha1":"3bd0da9a6ffd62217d3e781fa1356f40d9f91d4c","sha256":"179a9aa9fff4c52850d9ce34a4c435404ddfd4fefa8aab9a6eb4f47b83f922d9","sha512":"b67659bfb2f94cc1124eb88f7582ae2ee1c983210577edc9aaf6fdb65f6b0e2b9fd786169a91fc72a1ac0e8556bc09c7cf35395c7a038a6f6419660b7b64545f","ssdeep":"96:BDol4IVL19t2mY5Ib0Va4FALs/k2eerILEKQhnEIsFGFB/aStUY0NuhHkzTUgCgM:BGjR19tU5Ib0tCY8jeSEptRPFESt70NW","tlshash":"77c174f9c7a053f47ac38f5deb2966d0b0ebf8bd1ea082c451759368c4c0ad9e948874","first_seen":"2023-04-05T04:59:52Z","last_seen":"2026-07-26T06:23:10.959749Z","times_seen":45352,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":670,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1654534366/unprotected/cpanel/images/icon-username.png","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.732Z","timestamp":1782517921732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1654534366/unprotected/cpanel/images/icon-username.png HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/cPanel_magic_revision_1750121456/unprotected/cpanel/style_v2_optimized.css\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:02 GMT\r\nServer: Apache\r\nContent-Type: image/png\r\nLast-Modified: Mon, 06 Jun 2022 16:52:46 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:02 GMT\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":320,"size_decoded":620,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"07ff84f8c855e5fe9d510ff5c9a4b1e4","sha1":"11c262053e2b9be57d1dba7cb3d916ef041a0e50","sha256":"05ce0f813e6236158fa1d115faba62cd2041aab1878cac0960a0f45575cece1e","sha512":"4cee86a25e66e5a4ff1e8135e12d47ce697b86598a5e47d63777dc14536472944b64ca859fedee2c53b2830374cb4932efaf51d6e493e61cb8c9535680320580","ssdeep":"","tlshash":"89e07dd273a48da5e689087917961000783c075da3012bd91c09d1e61999edc22e25ab","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-07-26T05:15:08.717687Z","times_seen":11220,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":159,"send":0,"wait":186,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.746Z","timestamp":1782517921746,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/open_sans.min.css\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:01 GMT\r\nServer: Apache\r\nContent-Type: application/font-woff\r\nLast-Modified: Wed, 28 May 2025 16:26:09 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:01 GMT\r\nContent-Length: 22660\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22660,"size_decoded":22973,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 22660, version 1.0","md5":"79515ad0788973c533405f7012dfeccd","sha1":"5092881fad2caffdc6bf71bdab1ea547b73d3564","sha256":"22e7a1b10c110072f5a0bfd16e2197a76b279ec879bcce8978fada1dc9ee5d40","sha512":"a0f8bc1917ff69550fb6e27671345acbbfdefb22423274c8876e0ba291feaca65240260e64b236ca76f10448b7a938fe27aeb388eba3a8462acd43d54b352346","ssdeep":"384:4ZnXPbd1G0FEDf+rm7QFcBUZvOZmFZDAbZjIBS1Z3BqH48AmgxQS1ZhY3uyJ+:4pGGPryhMv6mFOiBU40Xp1X4J+","tlshash":"e8a2d0dede0ae80aee99323263d77a4ecb0b1d3ae4319117f52c610933d35972ed0158","first_seen":"2023-04-06T15:25:07Z","last_seen":"2026-07-26T07:53:07.74588Z","times_seen":13101,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":159,"send":0,"wait":164,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1654534366/unprotected/cpanel/images/cp-logo.svg","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.759Z","timestamp":1782517921759,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1654534366/unprotected/cpanel/images/cp-logo.svg HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/cPanel_magic_revision_1750121456/unprotected/cpanel/style_v2_optimized.css\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d; timezone=Etc/UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:02 GMT\r\nServer: Apache\r\nContent-Type: image/svg+xml\r\nLast-Modified: Mon, 06 Jun 2022 16:52:46 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:02 GMT\r\nContent-Encoding: gzip\r\nContent-Length: 900\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1682,"size_decoded":1228,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9e8caf3e2e2cab76e2dfd813f98d261","sha1":"cb2dee89baaed072aaaecfb46bf4d2ffb6d4bd53","sha256":"70667a94ef79118b93b13b1cb41fcb11b09e8fd3ce0c9c82680ed5f991ba9a32","sha512":"3a9e78eb7e09e89607dff382c81a738c1a16d9d19d6a5448808293161598c9218b06cf30995e81f0c4674fce2d55132814d87b2c602ad2166dd6bf49a1d0c83d","ssdeep":"","tlshash":"9c31f2f9e6e061b57ad39f58db2c36d0e0abb57d5a8191c8465843adc1c0a46f948cb0","first_seen":"2023-05-08T01:49:02Z","last_seen":"2026-07-26T07:53:07.804741Z","times_seen":2754,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":310,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1750121456/unprotected/cpanel/style_v2_optimized.css","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.021Z","timestamp":1782517921021,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1750121456/unprotected/cpanel/style_v2_optimized.css HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:01 GMT\r\nServer: Apache\r\nContent-Type: text/css\r\nLast-Modified: Tue, 17 Jun 2025 00:50:56 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:01 GMT\r\nContent-Encoding: gzip\r\nContent-Length: 33195\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":144951,"size_decoded":33520,"mime_type":"text/css","magic":"ASCII text, with very long lines (35968)","md5":"24f90f2c42c6f873a23d6258f03f4fb8","sha1":"471257b3b107212dd8af50924d3715e9c08fe813","sha256":"af6990207e51a99d8c8c8eaa90b6baf40dbe5fda14a1fcdf2f92fc2f227c3bb9","sha512":"21c7ca352ad1d22aeb37bcaa5c0d6d332bce73d60eb98528ec85d7cca5fab6ce49a61ae154bbbaecbeb493853b83ed60f6458b62888d728c5c169fa1fb3b613b","ssdeep":"1536:E1mrmUmF0PxXE4YXJgndFTfy9lQ53xFixF+xFYWxFIuojS67ZB:Es/Px04YXGdFTyHQHYsNm1B","tlshash":"8ae31db0d50c10d9b376c21fff81b2bca2b9f73ed5664d9af41e991c8ac16980191f68","first_seen":"2025-12-16T06:51:11.878296Z","last_seen":"2026-07-20T05:42:03.133844Z","times_seen":7,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":159,"send":0,"wait":192,"receive":160,"ssl":168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.748Z","timestamp":1782517921748,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/cPanel_magic_revision_1748449569/unprotected/cpanel/fonts/open_sans/open_sans.min.css\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:01 GMT\r\nServer: Apache\r\nContent-Type: application/font-woff\r\nLast-Modified: Wed, 28 May 2025 16:26:09 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:01 GMT\r\nContent-Length: 22908\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22908,"size_decoded":23221,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 22908, version 1.0","md5":"697574b47bcfdd2c45e3e63c7380dd67","sha1":"4590722b795938e0b6ff1b99701d1abe37aeabef","sha256":"26b216fadb2ffcd542ca56c2d84f9918f62e40de89bf88b4211fffacd2a4ad83","sha512":"35badb8706e160840f38e8a0ed151f92f84d0e966f5f5dad5f42036b3c52b0f93c3fbdd4d3416bdec39a73bb27ce6f21e19700e4337ca37a18aadd771fd905cb","ssdeep":"384:IgXJsQmd1G0Ffzuohk3yJff9f2oVe4rOmtXTuXjv1BaLnYkimJl4:IEeGGfzu0yyJX9OoVe4rOp12nRi8l4","tlshash":"3ba2e098580d3d46e2d265ba23c64af09a60dd78f448f2df2ee5a4c071e9fd30af15a0","first_seen":"2023-04-06T15:25:07Z","last_seen":"2026-07-26T07:53:07.754469Z","times_seen":11933,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":158,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1654534366/unprotected/cpanel/images/notice-success.png","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.757Z","timestamp":1782517921757,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1654534366/unprotected/cpanel/images/notice-success.png HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/cPanel_magic_revision_1750121456/unprotected/cpanel/style_v2_optimized.css\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d; timezone=Etc/UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:02 GMT\r\nServer: Apache\r\nContent-Type: image/png\r\nLast-Modified: Mon, 06 Jun 2022 16:52:46 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:02 GMT\r\nContent-Length: 962\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":962,"size_decoded":1261,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"0a0ec2a6468d4d1aa3fc2baa70271ac8","sha1":"a31fb01790aca8dc1976450e4234cb6ccc328956","sha256":"cafbe3036533fe094931f5745f8cb9962a34409522e93d63ac8427acb9a02c79","sha512":"a07edcf33db65397902ddfa9fd32b1d12e8eb7fa5a05ef38a0c65c372cd51cb9a03fb2364a6f712fca70ab09a923c2a56eeeffb7bcff63bf772938821402dbd0","ssdeep":"","tlshash":"3a1154b9a0d6bd29dd0a48b2e8930041e555e9691160194ca845e1a3b3760aff76b542","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-07-26T05:15:08.709902Z","times_seen":9798,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":428,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-26T23:51:59.336Z","timestamp":1782517919336,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:00 GMT\r\nServer: Apache\r\nContent-Type: text/html; charset=\"utf-8\"\r\nCache-Control: no-cache, no-store, must-revalidate, private\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nContent-Length: 12505\r\nSet-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure\ncpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d; HttpOnly; path=/; port=443; secure\nroundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure\nroundcube_sessauth=expired; HttpOnly; domain=cpanel.autocolourpaint.co.za; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure\nPPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"cPanel","description":"cPanel is a web hosting control panel. The software provides a graphical interface and automation tools designed to simplify the process of hosting a website.","website":"https://www.cpanel.net","common_platform_enumeration":"cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*","icon":"cPanel.png","categories":["Hosting panels"]}],"data":{"size":40279,"size_decoded":13336,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11323)","md5":"5e77aa06871dcc432fedf59993d087e3","sha1":"3fc62d924a3ae3db606d769b6395982cfe289083","sha256":"fb9b5116375c24c5ee485060f1545c08cb3dec8621571a83d99df7714c6444a1","sha512":"83b63fe5abeefc85c6fee3520a1a8946651aba4cad3242c6f06ba034561a3eafe804cd544630241023b3f5fbeada70dfaaaa7018d7cf683a8c7e325ee5ba1dda","ssdeep":"384:liLJD/ZmXg8r5MpnmeZyFhqoD/ZHyXPJ7kkXYrHefyB+5yH+ycR3PydLbFobHqXF:QlTZmXg8KpnmvqoofJ7kkIrTr5e6XV","tlshash":"9e033a2720f90473059a44d93c6f671d29bae323990b8d48b47d8bd48fa2fcfe9a3155","first_seen":"2026-06-26T23:52:33.33667Z","last_seen":"2026-06-26T23:52:33.33667Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1420,"timings":{"blocked":-1,"dns":585,"connect":159,"send":0,"wait":353,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpanel.autocolourpaint.co.za/cPanel_magic_revision_1654534366/unprotected/cpanel/images/icon-password.png","fqdn":"cpanel.autocolourpaint.co.za","domain":"autocolourpaint.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cpanel.autocolourpaint.co.za/","date":"2026-06-26T23:52:01.734Z","timestamp":1782517921734,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.autocolourpaint.co.za","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 02:18:46 GMT","end":"Wed, 02 Sep 2026 02:18:45 GMT"},"fingerprint":{"sha1":"E4:24:FC:02:1A:00:84:D7:BC:6E:83:57:07:65:07:8C:5A:4B:71:7F","sha256":"3F:E5:93:75:5B:18:E5:4D:55:CB:FA:53:90:BE:14:EE:A4:8A:68:AF:5A:27:5C:3C:0B:E1:21:A4:03:24:93:61"}}},"request":{"raw":"GET /cPanel_magic_revision_1654534366/unprotected/cpanel/images/icon-password.png HTTP/1.1\r\nHost: cpanel.autocolourpaint.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cpanel.autocolourpaint.co.za/cPanel_magic_revision_1750121456/unprotected/cpanel/style_v2_optimized.css\r\nCookie: cpsession=~pre%3aXkw_PouWAd2CQ8ew%2cd10be354a618c243fc38b88ea113ab5d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 26 Jun 2026 23:52:02 GMT\r\nServer: Apache\r\nContent-Type: image/png\r\nLast-Modified: Mon, 06 Jun 2022 16:52:46 GMT\r\nCache-Control: max-age=5184000, public\r\nExpires: Tue, 25 Aug 2026 23:52:02 GMT\r\nContent-Length: 450\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":450,"size_decoded":750,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"7ac1cefcb7eab93c6d6981ecde6c1635","sha1":"1523f8cb80ab19108549d0b7db31a58b71c05d39","sha256":"a02998df88a6efb0baa526796b2b682ce9fdd6471ceb19170b326320f22f7053","sha512":"0005559a3edf6aa149f47c0d2c7c6c385257ac5168fd57951497cfa244b155eeff3955538db93fc40f6622b9b216f030b27ad73df53dbe8bcc9874148a383d3a","ssdeep":"","tlshash":"65f023d3fa981c3cdae91473933b1018b426284a4203273e055dc42612e8dd801251a5","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-07-26T05:15:08.718396Z","times_seen":11205,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":0,"dns":0,"connect":159,"send":0,"wait":182,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"cpanel.autocolourpaint.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}