VirusTotal
14 / 91
“Webmail Login”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@wedos.com.
The latest stored availability evidence still shows the domain reachable; 20 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
webmail.topparik24.com — Последний известный активный (HTTP 200). Тип мошенничества: Credential Phishing. Сводка доказательств: VirusTotal 14/91 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Forcepoint ThreatSeeker); URLQuery 2 det.; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 100/100. Регистратор: WEDOS Internet, a.s.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
14 / 91
2 det.
Сообщитьprovider verdict: malicious
СообщитьDBL_PHISH
no community references
Сообщитьсохраненный отчет
Сообщить Анализ завершён
СообщитьChecked; no threat flag recorded
Сообщитьwebmail.topparik24.com was observed returning HTTP status 200 during a check on 2026-10-01, indicating a successful response at that time. Additionally, VirusTotal recorded detections for this domain, providing further context for its recent activity.
An HTTP check on 2026-10-01 recorded status 200 for webmail.topparik24.com. VirusTotal reported 14 detections out of 91 scanners on 2026-09-30. The domain was first observed on 2026-09-21. The PhishDestroy internal listing is marked as true. The PageSpeed performance score was 100 as of 2026-09-21, and the SSL issuer was Let's Encrypt / YR2 on the same date.
These observations document several aspects of webmail.topparik24.com across a range of dates, including HTTP response, detection counts, and catalogue listing. The presence of a PhishDestroy internal listing and VirusTotal detections highlights that multiple sources have recorded information about this domain. The SSL and PageSpeed records add technical context to the available evidence.
For webmail.topparik24.com, retain the HTTP status record, the VirusTotal detection result, and the PhishDestroy internal listing for future reference. Compare any new HTTP or VirusTotal results with these source records to identify changes over time. Keep the PageSpeed and SSL information available for technical review alongside other observations.
Сохраненные данные сравнения данных сканера и браузера для данного хоста, а также проверка отпечатков в режиме реального времени для систем распределения трафика типа «Кейтаро».
LiteSpeedПримечание к сканированию: alive_content: raw=ok; http=200; via=https_proxy; server=LiteSpeed
dns1.hostiq.uadns2.hostiq.uaLocation describes the IP network.
0784c5d6b9c5f57c43de1890ff8e4e321f0a2476850277f14788f21811761bc0topparik24.comwww.topparik24.com.parikk24.comSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of webmail.topparik24.com · checked Sep 21, 2026
45.94.156.222. 14 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
PD-20260921-7FCD44 Recipient: abuse@wedos.com Policy Violations: Illegal Activities: Active phishing operation targeting victims Fraud & Deception: Impersonation of legitimate services Identity Theft: Collection of credentials under false pretenses Applicable Laws (Unknown): International Anti-Cybercrime Regulations Budapest Convention on Cybercrime Universal Fraud Prevention Laws Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws. Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Template-based draft · optional AI wording assistance requires separate consent
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасДобавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьНедавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьОтслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание