{"report_id":"9e3adfe0-d6c6-4b13-b68b-b0960b1eb6ec","version":0,"status":"done","tags":[],"date":"2026-09-21T09:20:37Z","url":{"schema":"http","addr":"webmail.topparik24.com/","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":0,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"webmail.topparik24.com/","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"title":"Webmail Login","dom":{"size":36506,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10907)","md5":"51b2b3f8fc42e58f981280c1cfa1be2b","sha1":"8374f4fd24812f65f801b2d2d9f523cba5749501","sha256":"abb9e5e7c12d018428527c9871bae99922de496c198be0e71e313007a0bef330","sha512":"5a5c787b05d4bee5731ed8d6520516f78f70945270bb609cd281d6a654bbfc01892a8bef0f6cfd6921d499a5d5b21238834fe04dd5721af81093e685b29d895a","ssdeep":"768:92TZmXg8s/4NXEvh+n4SrlSt5k8IrKCr5e0d:gTZmXZPNXEvElek8IrKCr5e0d","tlshash":"98f22b3720a904670a8a45d93c7f631d29bae323890fce48b47d87c49f92f8fd993559","dom_hash":"domhash3bf864327056f8f9f590e13c1ebe9c83","first_seen":"2026-09-21T09:20:39.397614Z","last_seen":"2026-09-21T09:20:39.397614Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"webmail.topparik24.com/","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":0,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T09:20:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"webmail.topparik24.com","ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-03-29","domain_rank":0,"first_seen":"2026-09-21T09:20:37.629673Z","last_seen":"2026-09-21T09:20:37.629673Z","alert_count":39,"request_count":13,"received_data":213031,"sent_data":9652,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/OpenSans-Bold-webfont.woff","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.505Z","timestamp":1789982408505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/OpenSans-Bold-webfont.woff HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/open_sans.min.css\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled; timezone=Etc/UTC\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/font-woff\r\nlast-modified: Wed, 28 May 2025 16:26:09 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 22432\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22432,"size_decoded":22771,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 22432, version 1.0","md5":"2e90d5152ce92858b62ba053c7b9d2cb","sha1":"8cf65f42a2a8c349ccd6ab63b6cbd17c96fd665c","sha256":"a0357cb694b5284870c77c0dbcaf33f238004800419288afde313317b0dbd0b7","sha512":"5f452b4ab3e3ff3a8225d092fbf7e147595b398742dec5abce787e54cef471c0bc29044e0e00142cc09af7ea1e2f6fbf6da5d5a8b476c86b71594ad68d30858a","ssdeep":"384:UiXG5Jd1G0Fr+9DY1NpS1pYQDO6kd5Tnd2rL6vhMB4liNPwFxDwlH:yJGGRNU/vDtU5TnG65T2ohwlH","tlshash":"68a2e068eb42fa27edb889773bb051fac154d928b570fbe3877a30d8108474fc460865","first_seen":"2023-04-06T15:25:07Z","last_seen":"2026-09-21T12:17:07.57455Z","times_seen":11469,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1351579784/unprotected/cpanel_custom/images/notice-info.png","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.506Z","timestamp":1789982408506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1351579784/unprotected/cpanel_custom/images/notice-info.png HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/cPanel_magic_revision_1521455537/unprotected/cpanel_custom/style_v2_optimized.css\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled; timezone=Etc/UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Oct 2012 06:49:44 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 976\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":976,"size_decoded":1301,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"14146cf832470d9beca95a708a1d6f8d","sha1":"d4b506f92876baea69409f3a78c4718757a53b33","sha256":"95f8a142dd96c310afeb75329ef504f162ab3102a81fc07f20b268361990f526","sha512":"69f28ff8e02b199cc9d42ba75ec305dbfdf95c0477cbec88a4c09da21d126e1f8063d45415ee9701013ff0546be2203745620ee794f3ce5dc21be4c0a744da67","ssdeep":"","tlshash":"1d1198c2ab6dd0784a51e6350ce1b4f77bbb298e35690bbe380cf14935454051990af1","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-09-21T09:22:17.981782Z","times_seen":9981,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1460573724/unprotected/cpanel_custom/images/webmail-logo.svg","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.153Z","timestamp":1789982408153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1460573724/unprotected/cpanel_custom/images/webmail-logo.svg HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 13 Apr 2016 18:55:24 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 2399\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5360,"size_decoded":2776,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc0c956653325b9e694d4dd1dfb78020","sha1":"e1196e4db68ed573355ade966152a084581b40ec","sha256":"998cd48cdc0414f694d0a3a299dd2beb1134769d5666c7e5567e7d20b4174ef8","sha512":"7c283e8723f01f57c7258ea05aa5d7a72a886246ede76136f2d4dc489061d8400aa4b5f8e61f23f2388dd95fea7307faa2670af09b309fab6678de16e547ae4e","ssdeep":"96:adP/9O0DSiREkC9u8S0CKMEJPSeIWF/1BPHyg6tzzP2943Y8s/kTcUazSTTD9:gO02AlAu8/CKFdSe//zx6ZzP2Wot8TcM","tlshash":"d0b167f5d3b053f47ec34f6cd625a6d0f19bbdfd4aa0838091b48358a8c4ac9e948878","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-09-21T09:21:03.374026Z","times_seen":9926,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1337070108/unprotected/cpanel_custom/images/icon-password.png","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.478Z","timestamp":1789982408478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1337070108/unprotected/cpanel_custom/images/icon-password.png HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/cPanel_magic_revision_1521455537/unprotected/cpanel_custom/style_v2_optimized.css\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Tue, 15 May 2012 08:21:48 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 450\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":450,"size_decoded":775,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"7ac1cefcb7eab93c6d6981ecde6c1635","sha1":"1523f8cb80ab19108549d0b7db31a58b71c05d39","sha256":"a02998df88a6efb0baa526796b2b682ce9fdd6471ceb19170b326320f22f7053","sha512":"0005559a3edf6aa149f47c0d2c7c6c385257ac5168fd57951497cfa244b155eeff3955538db93fc40f6622b9b216f030b27ad73df53dbe8bcc9874148a383d3a","ssdeep":"","tlshash":"65f023d3fa981c3cdae91473933b1018b426284a4203273e055dc42612e8dd801251a5","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-09-21T09:22:17.984147Z","times_seen":11477,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/OpenSans-Semibold-webfont.woff","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.503Z","timestamp":1789982408503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/open_sans.min.css\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled; timezone=Etc/UTC\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/font-woff\r\nlast-modified: Wed, 28 May 2025 16:26:09 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 22908\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22908,"size_decoded":23247,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 22908, version 1.0","md5":"697574b47bcfdd2c45e3e63c7380dd67","sha1":"4590722b795938e0b6ff1b99701d1abe37aeabef","sha256":"26b216fadb2ffcd542ca56c2d84f9918f62e40de89bf88b4211fffacd2a4ad83","sha512":"35badb8706e160840f38e8a0ed151f92f84d0e966f5f5dad5f42036b3c52b0f93c3fbdd4d3416bdec39a73bb27ce6f21e19700e4337ca37a18aadd771fd905cb","ssdeep":"384:IgXJsQmd1G0Ffzuohk3yJff9f2oVe4rOmtXTuXjv1BaLnYkimJl4:IEeGGfzu0yyJX9OoVe4rOp12nRi8l4","tlshash":"3ba2e098580d3d46e2d265ba23c64af09a60dd78f448f2df2ee5a4c071e9fd30af15a0","first_seen":"2023-04-06T15:25:07Z","last_seen":"2026-09-21T12:17:07.581042Z","times_seen":12224,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1521455537/unprotected/cpanel_custom/style_v2_optimized.css","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.149Z","timestamp":1789982408149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1521455537/unprotected/cpanel_custom/style_v2_optimized.css HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Mar 2018 10:32:17 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 21817\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86537,"size_decoded":22190,"mime_type":"text/css","magic":"ASCII text, with very long lines (38557)","md5":"010038d18e2b12d39d578058eedfa3db","sha1":"3593fcba110ec6e3f77f8a4b8763b02d45f131ef","sha256":"5dc52eabf4227cb49c97df538e3d1f80741146cd0ab9dc31142e2655a62d6269","sha512":"87d71918067abaf07287d4c5947d281f8fb59146b20195b9f612d0d35293d72693323603d3c612364cd6883f885d471d9b3b7ab0818f423e8a3c04ef67f0a30a","ssdeep":"1536:ommrmx9lunljUfD/xFixF+xFYWxFkyojS6Vj:oY9Qlj2VYsNSN","tlshash":"1383a4b0d50d10ea7767c15ffbc1b3a87278f33ee4124eaaf15b681c89c169502a1f69","first_seen":"2026-09-21T09:20:28.373304Z","last_seen":"2026-09-21T09:22:17.980275Z","times_seen":4,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/OpenSans-Regular-webfont.woff","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.502Z","timestamp":1789982408502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/open_sans.min.css\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled; timezone=Etc/UTC\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/font-woff\r\nlast-modified: Wed, 28 May 2025 16:26:09 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 22660\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22660,"size_decoded":22999,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 22660, version 1.0","md5":"79515ad0788973c533405f7012dfeccd","sha1":"5092881fad2caffdc6bf71bdab1ea547b73d3564","sha256":"22e7a1b10c110072f5a0bfd16e2197a76b279ec879bcce8978fada1dc9ee5d40","sha512":"a0f8bc1917ff69550fb6e27671345acbbfdefb22423274c8876e0ba291feaca65240260e64b236ca76f10448b7a938fe27aeb388eba3a8462acd43d54b352346","ssdeep":"384:4ZnXPbd1G0FEDf+rm7QFcBUZvOZmFZDAbZjIBS1Z3BqH48AmgxQS1ZhY3uyJ+:4pGGPryhMv6mFOiBU40Xp1X4J+","tlshash":"e8a2d0dede0ae80aee99323263d77a4ecb0b1d3ae4319117f52c610933d35972ed0158","first_seen":"2023-04-06T15:25:07Z","last_seen":"2026-09-21T15:56:05.92629Z","times_seen":13632,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1351579784/unprotected/cpanel_custom/images/notice-success.png","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.508Z","timestamp":1789982408508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1351579784/unprotected/cpanel_custom/images/notice-success.png HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/cPanel_magic_revision_1521455537/unprotected/cpanel_custom/style_v2_optimized.css\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled; timezone=Etc/UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Oct 2012 06:49:44 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 962\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":962,"size_decoded":1287,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"0a0ec2a6468d4d1aa3fc2baa70271ac8","sha1":"a31fb01790aca8dc1976450e4234cb6ccc328956","sha256":"cafbe3036533fe094931f5745f8cb9962a34409522e93d63ac8427acb9a02c79","sha512":"a07edcf33db65397902ddfa9fd32b1d12e8eb7fa5a05ef38a0c65c372cd51cb9a03fb2364a6f712fca70ab09a923c2a56eeeffb7bcff63bf772938821402dbd0","ssdeep":"","tlshash":"3a1154b9a0d6bd29dd0a48b2e8930041e555e9691160194ca845e1a3b3760aff76b542","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-09-21T09:22:17.982419Z","times_seen":9961,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/open_sans.min.css","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.148Z","timestamp":1789982408148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1748449569/unprotected/cpanel_custom/fonts/open_sans/open_sans.min.css HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Wed, 28 May 2025 16:26:09 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 530\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6638,"size_decoded":901,"mime_type":"text/css","magic":"ASCII text, with very long lines (6638), with no line terminators","md5":"c40e23c65e375b95f58c4a854fd239d7","sha1":"5e63a7b544d5e64b54b59a5ca16773e8220013fb","sha256":"240b1d5087098324b4b50e23e3bc00081e72eb5b9f37f9461dba8d1fae94aafa","sha512":"da746f2897ca1de2ed743ed74a8cab2039f17a238f04cbb7ced6d353c9a75575eea46d889360ba74b99890d73f25dfae77b20634532f8ca94ae418d44d9d0717","ssdeep":"192:pUohD1fU8dDpbUWrDPX0UeDDXv0U36DKsUrmD+fUULGDeCUb2DOBUuzDHoNUmbDQ:zAZT","tlshash":"b2d1b953c9e8d99a89cb9ec238da1472dd3d643a941181d3e354c6c898f334ef169f1b","first_seen":"2026-09-19T08:47:48.266171Z","last_seen":"2026-09-21T09:22:17.989651Z","times_seen":6,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1351579784/unprotected/cpanel_custom/images/notice-error.png","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.475Z","timestamp":1789982408475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1351579784/unprotected/cpanel_custom/images/notice-error.png HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/cPanel_magic_revision_1521455537/unprotected/cpanel_custom/style_v2_optimized.css\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Oct 2012 06:49:44 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 1026\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1026,"size_decoded":1352,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"a3265cc598ae28633c060889e790f80c","sha1":"57530d6996c8f36711ef05681474b8f63d4184b3","sha256":"bcaf01928e5c7246ab0bb7e83f609b485a67a5e442d3dd94539a883c11fb70cd","sha512":"41c2a7085b287d3f3cf6afaaf7bba0c2c42eed1a28f4fbebf2a3e5628e41aaea2c929697de97b939df18221dcd83a477ce3c8b1cdbf499ab64a5fbcbd3689b3e","ssdeep":"","tlshash":"bb11a5c7f3d3e8e8c9846c77c062210cecba32826264869d8a091c82de86c487306d13","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-09-21T09:22:17.98118Z","times_seen":11437,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1351579784/unprotected/cpanel_custom/images/warning.png","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.509Z","timestamp":1789982408509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1351579784/unprotected/cpanel_custom/images/warning.png HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/cPanel_magic_revision_1521455537/unprotected/cpanel_custom/style_v2_optimized.css\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled; timezone=Etc/UTC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Oct 2012 06:49:44 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 1060\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1060,"size_decoded":1386,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"a64b8c7407bf94cc4448cb210bb882e7","sha1":"a526cf52b2c5b6c2d0409b886de4aa968000fcd8","sha256":"7ecb82019606d891c5197d2f8ba24ec323d9b10a089facc82d089ff1ec3d399b","sha512":"aeea5e9418c62ba9bb896db6ad89b2e8c13f174b10d3960c4d67878ba8c0fb3ce8524515716c120548876131d1f8192c36cb52e48cfd801f8f037a3abe65d179","ssdeep":"","tlshash":"261182ddb608c8baa94369b592fbf02168b9801e9847022c8948d8132f59a68e57235b","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-09-21T09:22:17.986706Z","times_seen":9931,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T09:20:06.684Z","timestamp":1789982406684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=\"utf-8\"\r\ncache-control: no-cache, no-store, must-revalidate, private\r\npragma: no-cache\r\nset-cookie: webmailrelogin=no; HttpOnly; SameSite=Lax; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure\nwebmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; HttpOnly; SameSite=Lax; path=/; port=443; secure\nroundcube_sessid=expired; HttpOnly; SameSite=Lax; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure\nroundcube_sessauth=expired; HttpOnly; SameSite=Lax; domain=webmail.topparik24.com; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure\nPPA_ID=expired; HttpOnly; SameSite=Lax; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure\nroundcube_cookies=enabled; HttpOnly; SameSite=Lax; expires=Tue, 21-Sep-2027 09:20:07 GMT; path=/; port=443; secure\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 11943\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Mon, 21 Sep 2026 09:20:07 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"webmailrelogin","value":"no","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"webmailrelogin=no; HttpOnly; SameSite=Lax; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure"},{"name":"webmailsession","value":"~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; HttpOnly; SameSite=Lax; path=/; port=443; secure"},{"name":"roundcube_sessid","value":"expired","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"roundcube_sessid=expired; HttpOnly; SameSite=Lax; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure"},{"name":"roundcube_sessauth","value":"expired","quoted":false,"path":"/","domain":"webmail.topparik24.com","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"roundcube_sessauth=expired; HttpOnly; SameSite=Lax; domain=webmail.topparik24.com; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure"},{"name":"PPA_ID","value":"expired","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"PPA_ID=expired; HttpOnly; SameSite=Lax; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure"},{"name":"roundcube_cookies","value":"enabled","quoted":false,"path":"/","expires":"2027-09-21T09:20:07Z","raw_expires":"Tue, 21-Sep-2027 09:20:07 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"roundcube_cookies=enabled; HttpOnly; SameSite=Lax; expires=Tue, 21-Sep-2027 09:20:07 GMT; path=/; port=443; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36486,"size_decoded":13069,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10907)","md5":"9b3716fa350de631ec23a19548b1b0ec","sha1":"4175ad153c2111dda1d1c8b45dc1aebf8b752d17","sha256":"f36f0e9851e3851b9019ed67954149f5f366acff9348ead564a4411fa6276cc7","sha512":"ea1162b706abca81a6990cc64fec760b2766c6d3e0ce55958bbc827be7f056acecf29064c94384460c1b6359d2c495cc643f624c8e97debca333bd1a74451e83","ssdeep":"768:8VTZmXg8s+oNXEvh+n4SrlSt5k8IrKCr5e0f:gTZmXZQNXEvElek8IrKCr5e0f","tlshash":"61f23b2720a904670a8a45d93c7f631d297ae363890fce48b47d87c48f92f8fdda3559","first_seen":"2026-09-21T09:20:39.441381Z","last_seen":"2026-09-21T09:20:39.441381Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1263,"timings":{"blocked":-1,"dns":69,"connect":97,"send":0,"wait":395,"receive":0,"ssl":702},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.topparik24.com/cPanel_magic_revision_1337070108/unprotected/cpanel_custom/images/icon-username.png","fqdn":"webmail.topparik24.com","domain":"topparik24.com","tld":"com"},"ip":{"addr":"45.94.156.222","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.topparik24.com/","date":"2026-09-21T09:20:08.477Z","timestamp":1789982408477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topparik24.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:58:56 GMT","end":"Sun, 06 Dec 2026 16:58:55 GMT"},"fingerprint":{"sha1":"60:C4:33:FA:46:87:31:46:90:AE:E5:9A:6C:34:D9:34:6F:39:EA:22","sha256":"07:84:C5:D6:B9:C5:F5:7C:43:DE:18:90:FF:8E:4E:32:1F:0A:24:76:85:02:77:F1:47:88:F2:18:11:76:1B:C0"}}},"request":{"raw":"GET /cPanel_magic_revision_1337070108/unprotected/cpanel_custom/images/icon-username.png HTTP/1.1\r\nHost: webmail.topparik24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.topparik24.com/cPanel_magic_revision_1521455537/unprotected/cpanel_custom/style_v2_optimized.css\r\nCookie: webmailsession=~pre%3avwd42zsXYz1axl0W%2c6cb73e6eb2304b987588c4e3e137006d; roundcube_cookies=enabled\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Tue, 15 May 2012 08:21:48 GMT\r\ncache-control: max-age=5184000, public\r\nexpires: Fri, 20 Nov 2026 09:20:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-length: 320\r\ndate: Mon, 21 Sep 2026 09:20:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":320,"size_decoded":645,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"07ff84f8c855e5fe9d510ff5c9a4b1e4","sha1":"11c262053e2b9be57d1dba7cb3d916ef041a0e50","sha256":"05ce0f813e6236158fa1d115faba62cd2041aab1878cac0960a0f45575cece1e","sha512":"4cee86a25e66e5a4ff1e8135e12d47ce697b86598a5e47d63777dc14536472944b64ca859fedee2c53b2830374cb4932efaf51d6e493e61cb8c9535680320580","ssdeep":"","tlshash":"89e07dd273a48da5e689087917961000783c075da3012bd91c09d1e61999edc22e25ab","first_seen":"2023-04-08T05:54:15Z","last_seen":"2026-09-21T09:22:17.988387Z","times_seen":11492,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"webmail.topparik24.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}