{"report_id":"40a9b21b-55c5-4f4a-8e8d-4f6f884219d3","version":0,"status":"done","tags":[],"date":"2026-07-07T02:56:23Z","url":{"schema":"http","addr":"etisalcmrex.click/","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/c/quick-pay","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"title":"Pay postpaid bill or recharge your prepaid plan online","dom":{"size":662919,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52318)","md5":"94eb554e685809db2f6cd242fce06a13","sha1":"7ca1ab2f9204301e74e8520f407bc75ba55673bf","sha256":"f4a3dc639a7f4ccc7b9d59094c56d8842289e1538b69c534c5cfd1f2069677a3","sha512":"92293ad411ed77042f54ea4db9a70c9047b703d26bdd1f5612ea35513706af90a47ffd4de274cc8b7b3dd7984886f1bff72e1ffb695a8ed38b2d18892391d935","ssdeep":"3072:pHaRBJvBAFHXw9IctU90fqPw1AxX4D0OZC8hWXNWPRfC/TnGep6kDsoWS:p6LJJtU90fswDZC8hWXNWPRfETnBpeS","tlshash":"bce4a4e2f180343e299bd6949465ffbae63ee482d7050fa5f10367a407ca2c31975acd","dom_hash":"domhash98ab2cbaa00c5f56166d2018eb6575dd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"etisalcmrex.click/","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T02:56:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"etisalcmrex.click","ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-07T00:13:29.540223Z","last_seen":"2026-07-07T00:13:29.540223Z","alert_count":284,"request_count":71,"received_data":5707995,"sent_data":66252,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fded9d03c895a879eb40441b36ff022c","sha1":"3b1bdca201a2d619a5dfba5fa396760d1cd724ef","sha256":"b662bc644cf2d81f8f9eecc3302bf177bcfa719f980ef813185afc0044129e25","sha512":"8c4797d4e3deb02a1b10eaf8b42b7ef13ce4f091d0ab22a6e1a215b12e47e89b665ad21c929f790e441b1f7c96254adecb3154b40ba66e53ba57567ba42add81","ssdeep":"96:DqaRHuyYh3IlbF7WO+/73M6gJ0nvpkObShTz86hTBE98fNlsVSTaibY4:DqaROy03I3OYohEu6g8ldU4","tlshash":"a9c14437560fa4b2193c3cbfc2a97d8c1589f342599356c0f49e5c98d85fb3b1a0a2e9","size":6150,"data":"","first_seen":"2026-06-16T14:05:20.094755Z","last_seen":"2026-07-07T02:57:15.753002Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e02ac2e66c1f22baca52ec2ef7c9525","sha1":"3e57169d0b3659ca1f4e4da37053d1a83f93c1ad","sha256":"2dd392951a0311ab8b0c4f876761b8b4705e225176c6d3aff366e970bea5a377","sha512":"39bd7c918592dedf837ca658e8d251e17ab7e553d33e0ad327f9ee052cd5d240168b7134047980d913ad7616e04a9158155704612da467a0fb581ce4b6fbd63f","ssdeep":"","tlshash":"06e061b5b39db57602e19534455f3b0490772bc30d410945d63a5bc0fc74d06c8719d9","size":396,"data":"","first_seen":"2026-06-12T06:47:47.894672Z","last_seen":"2026-07-07T02:57:15.753502Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47356c220e3125762a2ad323ca3c63d7","sha1":"e21c1598c247375e14aa84438eaa63c3374224a6","sha256":"cc23e286ae2994fbce2fa7f1cf8d1910c86f0561ae8670f5fb67167869b2da1e","sha512":"444df29142fb602cae922483bc33ca7c1e84d56b0f0138d078aef024d75ae1110dc5a400e70ba4603019d9df5e4a218761478ac4a05b3b40c92f77b9b3c76b82","ssdeep":"","tlshash":"ad11dcbb7660b52a105a8962344d23004973c1963b10d0924d39af80ae188494a76baf","size":874,"data":"","first_seen":"2026-06-16T14:05:20.097969Z","last_seen":"2026-07-07T02:57:15.75401Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90ca2211fc52d7e4617faea35fae7f39","sha1":"84dd1662be2653661d88f2d3fca1b8fe1707a506","sha256":"74facf3a1eda221ec765a7276682475cbf54c4356fb894e396d7837c7cf699d1","sha512":"e890bedf717b4680fa98344da64d82ce5ed61e211d3f73aef1fd01f24bb056867438b2a4ace5c6f22d0d060c3fde2f20cd1671bf8d06ee305f1be797ca74c97c","ssdeep":"192:ioUPj0fFZP9p2tqvpTQjH6nS/9+whwH9ADtBxhJwBTflqzD3fdnrJtdvBq2pySnc:iom4FZPj2t2pm6nQ+whweDxhJwBTIzDE","tlshash":"b132d8ea73c339b113f22524286fae01b57e4ad26c4d8062d56be9812c7cd498577efc","size":11560,"data":"","first_seen":"2026-06-24T08:31:30.81879Z","last_seen":"2026-07-07T02:57:15.754533Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"332aac0d16f0e6d9041a702e498a0f7c","sha1":"32aef9aeb4d915fc3f75691e5eeb9a22047d7724","sha256":"1e49c4810c2ec1018f7bf3343b001bb874c1ced0085deacf6b50f8078d598a72","sha512":"d9f37847cc3b2b3791564662be1a73b5f7b2c9dbc6ca025efd01a4a2c9423c59ced5a6cafa0a315d9f32239d64b683fd9ee8611c7755b9930f074c1035e4790f","ssdeep":"","tlshash":"5f316576b27a601843e3553633fec60871ba9e841b0e1181487b98a19d7cc849936ff8","size":1563,"data":"","first_seen":"2026-06-12T06:47:47.896525Z","last_seen":"2026-07-07T02:57:15.755046Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b713cf110179fcaac7000366d30e760b","sha1":"9624326824de27602b583b695675ac918871ba98","sha256":"470417350a6df9365880a05803482ab050e19a9673e528b65cacf203f0ae3a5e","sha512":"1ae2bc8966c5db277e52efd41bec9931cf02df79c5eb68874164cc13d6c2ae763797769c1ab30852e714c9f3586dca402a4dd5191c2c43959821b442417ef616","ssdeep":"384:s+/ObnJQ0wug4Pu7MqD+9l5nmXn2z3/Zc3iL91kY5da0zZrHMG9xVb:PmTJQJuvLqqEiZf0YPzZd9z","tlshash":"b8c209b073e62175a3eb883420bedb45f174ce059d058590c85bec68bcacd968677ebc","size":27074,"data":"","first_seen":"2026-06-24T08:31:30.821647Z","last_seen":"2026-07-07T02:57:15.755525Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a5a4cfa1bd64153449f813f71aebbef","sha1":"dc1340795710f9140d39debc06e9c49f9afa693a","sha256":"eef0b34706a4e0b12f75e81afa73bbbb9bb2b14fea49565d86e0c15653b8d79a","sha512":"6d92bfe56e388c6b30b3cc95ad976ae3628d6606edbda45aca000f6f6112063dcdc7717c3ebaa45909473f2b248918048192471f3e563728c305009aaf9adc6d","ssdeep":"","tlshash":"5d41a676b2e12e7401e70435b3af5f48f0f68a82c50b0951482dff6a1968c959e3dbe8","size":1921,"data":"","first_seen":"2026-06-24T08:31:30.82297Z","last_seen":"2026-07-07T02:57:15.756024Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cff65d9bb1cc18c67e91d5ef9d2bc1c","sha1":"832dd4610d31e536d1894e0566b58620ee55427e","sha256":"bbc77a536e02295a62b69f9d97f570f61f01b3898c6a7f174d26e4f56621af92","sha512":"53cd0fdb660a916411233d5ddc90ae4f628c2875a84509db5fe5cee9d8283cffda96942207710e54cab83d282e467fee29d069b481cdfb5e9a78029a545bf226","ssdeep":"","tlshash":"94e0683a7394093412d3ad76e07ddb8964fb2da29d43c092163d6c048659ed18936ee8","size":409,"data":"","first_seen":"2026-06-12T06:47:47.898358Z","last_seen":"2026-07-07T02:57:15.756501Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ea4c89e05550c9015ae4ea660bc6bac","sha1":"e6726e10c2c3cc76a932956bb4462e2e90d7779c","sha256":"5a89045cc6fe067289b04f30e18e659494ddbc7d2a6d77a39af7a564bb6c1ddf","sha512":"2e8c36f77fcca90713704872f2581a3de3142d0a02b64df3f7008b02c48900fda02bae20f1d53bda4a0c4c86b7fe99ad2038833a4ad6bfdae83040ca98695fa5","ssdeep":"","tlshash":"8601bd5532d3f33d879a8c2d607e9684f1b62ea17d0d80d0952ad6443968e15c339fee","size":799,"data":"","first_seen":"2026-06-12T06:47:47.899171Z","last_seen":"2026-07-07T02:57:15.756989Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c34c6d8df1e0e1a6a4a218ac6b40575","sha1":"4daa004576812c52db3edd10fcd38ac8d7708cb1","sha256":"47bc5f2ebd255dd5c1e048d6ddf3cd099495e2c57b92b1ca77a48ab1af037415","sha512":"5fca61e816dab37b5392f14c0e2f1021944ae14d2df713e8cd67f75534cd075f6cf3eb810778ecb9cd3418b47ebe4ff0dcfb4b8e079531c4d614a1d697be0e3e","ssdeep":"","tlshash":"71a002ea03030c0800e0770c1f8efe44b102122190f0d0313e8a712efb30c0bba08186","size":74,"data":"","first_seen":"2026-06-12T06:47:47.899986Z","last_seen":"2026-07-07T02:57:15.757486Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/runtime.691f5f7227d03402.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4eff532dfcd3ad63fae90fbfd96f041","sha1":"4817ce6969e36510c4e6f8b1f2d49e572816dde6","sha256":"7d6e32c45eabbec8170a82a19b658a570a730c7bdc2290100beebbce6ac72941","sha512":"11915b78c106bee6350b2133ab1981023cea6f5f6d7b397af0348d785863a67c617ee86dce05f9a177d9661830d64bb5ed65a5fd1375a80386fd0484248d35fd","ssdeep":"","tlshash":"4c810bb63674fdb72a7554d0583dc842f6297036141bf8f1ab5bcea95064ec60c22ef1","size":4088,"data":"","first_seen":"2026-07-07T00:13:37.698307Z","last_seen":"2026-07-07T02:57:15.722092Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a03d97b1fb135e029cb6218ae4f95663","sha1":"04ce4d322ae40f099c3db0c0c853e56df8c2e01a","sha256":"ed566bbeaade8bdf0e86e5cdb7a17dd51f3633a97b5f93f90cdd8d56d2db9f68","sha512":"999c45d7e7528c3e8a84db151ab6aa0f196872b3ce70f460be4f21b585e498cd60f0d29cfccff995b9067274a91ba25b19dd4e9ddee828063333a6303d84b104","ssdeep":"12288:zH2zge+8xVXgRizvohR/Rkm55Ny+wVezR8CaO:0gOvgR8voym55Ny+wVFCaO","tlshash":"c3c5b5d1f361351d2a0bc701987bfeec452dbcc2c55b8975bb2a17d443882853daa3ab","size":2729799,"data":"","first_seen":"2026-07-07T00:13:37.740229Z","last_seen":"2026-07-07T02:57:15.758373Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/vendor.62ac21f3ea5ee07c.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a275ce00ef34d4a917e63b76e9515a6","sha1":"c8851e4ba0666dd3c85e7e9acb84243f8d8a77e7","sha256":"a69f24d1cc2bb0ff7a07043a2c24f556ca0e34745529adc1416b1e0e75f6efa6","sha512":"c42a22ea8b14124ffceb31329f3b17bb53c364b1859ff6c1d5c83df5b2c128d3752f5aa20ffcb2b56cca7a2ff9e9feeb9a4d192bb7a565c4da8c00017b511f82","ssdeep":"49152:ezaPf1e6leBslvebOB9SOQmS1XnYsSj4Nofm0JsHTrxO7wq4dHX3DjTXWoq2ksqv:OulKRqv","tlshash":"40853bd532c2702243e240f69077054bf2696849750a819cf5accdee6faed4d62bbb7c","size":1720897,"data":"","first_seen":"2026-06-12T06:47:47.902644Z","last_seen":"2026-07-07T02:57:15.759069Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/polyfills.197dcadece2ff59a.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6ffde237c23a6a83796f6821f023889","sha1":"e6d52ee446baecacb12122e47fbcc6558abb79ac","sha256":"f513cae12324ef89d977f502573958d9043c011711590747b62c431e61c45fce","sha512":"c8df86d4a2e87e67089619e1feb97d71aac0cadf19cc79b3afbdb69be2bac2edd136964e06aed5ec518ff7c412bfb92e3f6b6c76051b7b38f47d9ff8a864840c","ssdeep":"768:xK8K6x159hBF4q7rhvM893a1UNlJ1T+xuQP/WOB9toPHQxCKArbvlkCdjGLzw7mv:xfrbHzeVtKTir","tlshash":"a8f2e7da73d1b07687f209b1853b804bf62b2565784c88d8f51c86fa3f3715991a2f2e","size":37050,"data":"","first_seen":"2026-06-12T06:47:47.856251Z","last_seen":"2026-07-07T02:57:15.739944Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/882.ad8e672ab8498e43.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c067b2553ff672573226a52489bcc5e0","sha1":"e34d42e92c9eac322970fc161f309a4eb7c43173","sha256":"e081a22394962cc6d9714a97237e8b32cf815327b3fa711038f29c10fb03795d","sha512":"8859c0ac6e6aa701a41c3e196d05ecd3d31a4b41977f35d70a924c38dbb22acd0173c65c0da52827cb4869cbae12e06d27736275ef1c031b808b478c753bb639","ssdeep":"384:xK8KrQzpAXA54fs/+bBmU6XOeKVSiHltLVmwm8TRmz3fuF7HeDLygGHA3f3oCwKu:xK8KrYpAQ54fs/+b9VSMtIntR7pR/Zpq","tlshash":"c19231cbf2865dfe74c8073a910985c42b2cb8d37c19457cb7461eb3a1045a8bd5aafe","size":19490,"data":"","first_seen":"2026-06-16T14:05:20.049256Z","last_seen":"2026-07-07T02:57:15.746723Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/735.cc1bcd4cf7aa7ccb.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3758711c432d726fc43280b1604c109","sha1":"605acc4c37f6bc3e645a943fb4674a3539f44c82","sha256":"dc078c31c761e0dc034952b6ef0048406989c786f37b121d1dc975944f1de664","sha512":"d1c112ab50dd5763af8c19eba9b8871f16a160fb040c281dd31de0df303f404e52eaa739d0b84014c443ed3f92c8a949b8add02890b91fd506e59dbd3b1279c8","ssdeep":"768:xK8KILrn4srZZJcgoCKfK3eFK3eVDovY24Ga9/nufvzxXI:xfDHn4s9ZegoCoK3eFK3eVDovY24Ga9N","tlshash":"f2c2405f7691b86516c983bc187b1e08e335998e1f2c000db2189ed6dfa5c466aaf738","size":27888,"data":"","first_seen":"2026-06-16T14:05:19.98475Z","last_seen":"2026-07-07T02:57:15.729557Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/839.8532b49a16632ca4.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8c4ed980801a7211ef6383402be7d44","sha1":"bcd3405f248628fd63a112c3a46419b3b5b184d9","sha256":"5dabd08bdf275f531b16a5f4c2937763673349001908efd54544950ec818ecf6","sha512":"2be999c9cae38fbbd4de7b10f6c1aa33555441be1db897b4dde6d513dec9ce10f1483bea6ab9f85ec0bcf7feaf4d76316d9c47606e624f909c3abee7793a385a","ssdeep":"1536:xfjtGx0dTLxSmUc7vuTZK5uWQYm2n712Nq3GwTWYCHFcjCAnmsYbgFLgcMxkNfR1:1tGx0dTLxSmUc7vuTZK5uWQYm2n712NY","tlshash":"bb33fa21be705079d27960666bea4a4b073cd4a15a024a9cf2dc4fec37c8dd9671b3bc","size":50894,"data":"","first_seen":"2026-06-16T14:05:20.060401Z","last_seen":"2026-07-07T02:57:15.745621Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/668.e43d0cd77bf31d0f.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"941d6539f61fe9c68d53649f639b2fc6","sha1":"6b94c3a2ee766e0ad8b936e49f2c669105434396","sha256":"78a4df96773d7088b76879b0a859fe6a6f3c114b3c69802ed97e87fe1dfa56d0","sha512":"9c12acdfdd50ff5681a114029df5222e799a1d67685b6a758971f0a4a71a15c45a56a872285e65c6f15c840e07a3ef39ea82028d61a667e07a0475666be23dc6","ssdeep":"768:xK8KBN0fe1y64YuTkyEIyPC6EEdaqywnGpcag17wK+1POAA5uZHn+nVFHrZek:xf0XKN/wFX","tlshash":"4b23c600bad4503a56661075f7bb4e070a1ce961a815865df1cc9fe837add8e33abb3c","size":45974,"data":"","first_seen":"2026-06-16T14:05:20.063336Z","last_seen":"2026-07-07T02:57:15.747228Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/c/quick-pay","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bacab872dbe3a0818505ae2abfdd0e7a","sha1":"446a0b9f0b53de3c549d9e62ebed1f2294d0c205","sha256":"2e7d7a729d7dfb365784cdcd418d7d7d08be441d164a3b62a3c4602c5a309683","sha512":"fe47805be459ebdad53a84891ad7364c75160f1c0aaa0d43138db9c07c6dd5b7da7b6f4050b4ce6f4556a1fa885d29826806bac77c214c7a12082a1c00261545","ssdeep":"","tlshash":"8341cc89f9b719309523506c0fff52817474110ba84ae98dbe4cd5c06f50d7626aaff9","size":1887,"data":"","first_seen":"2025-10-06T11:26:32.92681Z","last_seen":"2026-07-07T02:57:15.752461Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/scripts.d9574d0e6cd3bf5c.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c133ecc32ea46e7bfb19fe41727baead","sha1":"f14a9582c633ab6a27882f98b483ee3733bc809b","sha256":"28968ccce7405788636552434a1a47527722b8d7078720f23c9fcd81e95ab630","sha512":"c383113f7c1295499d445b4b41f07e666eae3e69489db277617fe2f78cf6d15b25d508eb08a2f3310838d0e8c3774be1765e8150ec1cc4b4ef63f9b13d2b7085","ssdeep":"1536:o8/9b4Q+R1P2ilvoXkilrW8rVnvidWw+qmZYCFdT/FQyDid:JrVtqWwwTf/FQyw","tlshash":"ea73d75a3244b47309df85b78037420bf2265da8b14a812cb56cadde2a7dc863277f7d","size":79889,"data":"","first_seen":"2026-06-12T06:47:47.889237Z","last_seen":"2026-07-07T02:57:15.733081Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/824.a9b798eca73a1c49.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0af501d7b539d6ee6e67763bbf50bc","sha1":"2880da0fe25139e3ac8f55dff394b12893ce8c4a","sha256":"c4e98d05a455399353714085817e1414b389792697a01706f597ffa55b6b6a6a","sha512":"3f213c07e5fb73984762f8a24b13708077561ddd7bff720d72582598fb421d50c2f55aa404049b1b36cef216a32e52fbca6aaddb537a362602ff3572bee1c0c3","ssdeep":"","tlshash":"2b41b818365bb5ed1f293e60cab5599c1f581c88a08e8ae8425edef44b4e40cf1d7778","size":2316,"data":"","first_seen":"2026-06-16T14:05:20.004588Z","last_seen":"2026-07-07T02:57:15.743644Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/515.f63eeaa81966b9bf.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f887620d659e5451f3c770d37d1d29c","sha1":"8c12da1be5fb4deccf33a0546ed8ea2b3ec0bcb7","sha256":"c50cd8cfb250df7c123fdbb12eec993c31e48cd02e32c6c816b38f1686190f0f","sha512":"0cabbe0cae13a741332d40651b565e9b7599bc05bf72826c49d3541abf77bda6b689c0a014fd61528df9d0b9bb895f773eb3924cfaba7cbc8268428cc84a70b3","ssdeep":"192:xK8KIVcpJPShcM59rAkFlwLGSTPCQJatDKr5ePVZe2LIzfRErWRTawlb:xK8KIYKrWaHnkduAPh","tlshash":"a602b9d73484203b4a6d61d1fd7205486231610d9aaa446cf1dc9e8a3b8dd593fcfafb","size":8648,"data":"","first_seen":"2026-06-16T14:05:19.99724Z","last_seen":"2026-07-07T02:57:15.740451Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-17T14:38:23.474862Z","times_seen":334537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/smart-banner/new-smart-app-banner.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0ec3630e473d46ca2e3b26cf4751eaa","sha1":"ddd543d3cc6b7daee04126eef170bf131f37b3d0","sha256":"5560d4d2a6f3038fbae6041b6271a611718a772b55665141c6a69f3ac8421c95","sha512":"f4d0a04e62a5a5eef946dbd90594fdaa90ab9fc0e72197ccec184f6e45b45e5f7e54967286701f0487a495b7a3f83c85e8e6524f403a52e2e9a2ecddc0909e67","ssdeep":"96:RxMPNH4Hpy4+KXSPNj6UtdF9rmcbh/qA+yui0Pay0iNtR4SD4zLwzK:RK1kpy9KiNjfacbh6i0PapiNbLD8LEK","tlshash":"74022e496e511231457357aeafa36a1cf7a26d63e202c1263bec63505fb6805c2b2fcd","size":9014,"data":"","first_seen":"2025-11-17T21:22:01.731386Z","last_seen":"2026-07-07T02:57:15.747649Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"STOP","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":1121872},{"level":"log","text":"This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a feature or \"hack\" someone's account, it is a scam and will give them access to your e\u0026 account., if you are interested to join us; please visit https://careers.etisalat.ae/","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":1121923},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: GTM Reverting to the default value: GTM-T57KNFL","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MAP_KEY Reverting to the default value: AIzaSyDGHGq1W76Xca8Q2YbMmlAu6LDpD3-UOL8","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: CMS_HOST Reverting to the default value: ","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: ADOBE_SCRIPT Reverting to the default value: https://assets.adobedtm.com/0d04dd99f59e/07c17e71a414/launch-a7928db5324a.min.js","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_quickPayDisable Reverting to the default value: false","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isMleEnabled Reverting to the default value: false","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isResponsiveDesktopEnabled Reverting to the default value: true","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isApplePaySupported Reverting to the default value: true","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isSearchEnabled Reverting to the default value: false","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isAdobeAnalyticsEnabled Reverting to the default value: false","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isGoogleAnalyticsEnabled Reverting to the default value: false","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isAiChatWidgetEnabled Reverting to the default value: false","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isNeedHelpChatWidgetEnabled Reverting to the default value: false","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isAutopayDeltasEnabled Reverting to the default value: false","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isSystemFeedbackEnabled Reverting to the default value: true","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_ESHOP_isMFECartCheckoutEnabled Reverting to the default value: true","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: EFR_TOKEN Reverting to the default value: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJldGlzYWxhdC5zdGdAc3Ntcy5hZSIsImp0aSI6Ijg5MzEwMmY1LTZlMWQtNDNlZC1hNTAwLTY4ZjA5N2E3MDljZiIsImlzcyI6InJoc2F1dGhzZXJ2ZXIiLCJhdWQiOiJyaHMiLCJpZCI6IjQwMGM2NTRlLTZmZjUtNDVmYS1hMzk0LTE2ZDYzMGQ3YmViZiIsImN1c3RvbWVySWQiOiI1MDEiLCJjdXN0b21lck5hbWUiOiJFVElTQUxBVF9TU01TX1NURyIsIm5iZiI6MTY4Mzc5MjIyNCwiZXhwIjoxNjgzODc4NjIzLCJpYXQiOjE2ODM3OTIyMjR9.vFr2EvAoFmyyHhlQ3VaPAbtNpPvIgr5YnSxD7o6NPyE","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MAGENTO_STOREFRONT_CONFIGURATIONS Reverting to the default value: map[actor:server1.conn0.watcher17.process7//obj53 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[environment:map[configurable:true enumerable:true value:staging writable:true] environmentId:map[configurable:true enumerable:true value:0395851a-203a-4580-b349-937b7d767b57 writable:true] instanceId:map[configurable:true enumerable:true value:bbbbbb writable:true] storeCode:map[configurable:true enumerable:true value:base_store writable:true] storeId:map[configurable:true enumerable:true value:111111 writable:true] storeUrl:map[configurable:true enumerable:true value: writable:true] storeViewCode:map[configurable:true enumerable:true value:en writable:true] storeViewId:map[configurable:true enumerable:true value:222222 writable:true] websiteCode:map[configurable:true enumerable:true value:base writable:true] websiteId:map[configurable:true enumerable:true value:333333 writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293}]},"http":[{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/instagram-dualtone.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.909Z","timestamp":1783392959909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/instagram-dualtone.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960060\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJXJ3NWsBO7mkbe9cfz7%2FwfFJtIWHoUBMN6X3Xu0L3Pvb9Vsn8FlcVDBZDx%2BN9m95rR8HXAunWInAMlMwE4cFQBFr5nSkQpwBJUk6FQLUbL2DyrWz9u4Wrczyd41nnM59Y%2F23w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf78c24c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480,"size_decoded":958,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"598dc7ddd591280df1b7befe3c9cf92a","sha1":"acd4adf685fc5ed50826393f5369536786abf487","sha256":"56e91111694d073f66ebf0fcaf7827919b89ced3482645dc5c26f601de2cb55f","sha512":"eab2e5163f327f953db2536b59ac3e57266da63a9d155c44cf2d576083fc527537bfd977ef1bb2b8ce7d94b60e79c8f3c220ca23448605c409276b22bf4328dd","ssdeep":"","tlshash":"cef0e2de430c5cbcf8264a64c73c3135235949b3331840a7b83e4171254152ce92fed0","first_seen":"2026-06-12T06:47:47.852427Z","last_seen":"2026-07-07T02:57:15.73401Z","times_seen":27,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/amex-dualtone.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.913Z","timestamp":1783392959913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/amex-dualtone.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960066\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKw1c5CmZGurFbGIAbOxI3HZgcgBRYGJMgywMlaRbrYGyGHcQb9zeUaH2cweHmWfBR9IQDEFXLTuS4IqdjKGHsRSsnfjtO1aJcSlBizwgXMxHqwrEJmQ%2BFxQ5owSj1q%2BQC63Rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf78c64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":1127,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e98590c575d77cfe48fc31435d023f8","sha1":"71eae56d1544692141c2915b7bfb22b2a216f428","sha256":"95c4f695e62afe789334a5d7daf5787632c66d9383e98a587daa06f4a8126f48","sha512":"e6a68a88a80beddbcd5bed93f3fb58393bf19d499bd9c76f912ebdaff9326cadea6ecb51ab82acf281d6713bea789901e16b40f3f70286ece433e5aeecfc3b98","ssdeep":"","tlshash":"2201d07a6354d74cbf034835ef3e7ee6a21f10e1350c1261d436a720614259ae40bbd4","first_seen":"2026-06-12T06:47:47.861861Z","last_seen":"2026-07-07T02:57:15.734491Z","times_seen":27,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/visa-dualtone.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.916Z","timestamp":1783392959916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/visa-dualtone.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960062\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=as4gAX5Hj9eYKiYcV7qKcTM61jok1vBXA3ZFMoKmiaSJC4wDwyEHgADgFJ2xQjbnh1Te2UrZRE2fbY6PADjnpQgRIzStd6QCk%2F9Pm0J7XXjiQc76%2FhTtZLKiuqpIgKQSPDeJLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf78c84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1099,"size_decoded":1321,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cae299f35ae42f860950fe24b886acc4","sha1":"2676fbe07c3b307617f5897fbf549b3dccbea44b","sha256":"fea238ed4c41647bb929064181e82c680f45d683c330eed3da918f31e35f3ae2","sha512":"3c110373dd4957ad667ddaffc8df030c36cb380bf21f1929c183ac9b835c7952b8762c998cf5ae82cd1373f672cad954a8a11b3ccec6784a22660c46900adb03","ssdeep":"","tlshash":"ea11d0f613688a5d1dc5c67c9b2daee5c11fe0c7396452908d7ecf64204b588f2276d4","first_seen":"2026-06-12T06:47:47.868756Z","last_seen":"2026-07-07T02:57:15.741886Z","times_seen":27,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/668.e43d0cd77bf31d0f.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.916Z","timestamp":1783392958916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/668.e43d0cd77bf31d0f.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dw2n%2B7LzPLncPbcl9qElAqDI2gmT81rkZKv8KFcHltIXdcTm3kY7HBFyL6Rc1K%2Fw2JMYOfSevpDlSHG%2BXE%2Fw3k8WRlOvBHK1I%2BYHDiH0V5aEqdjdd7MWyASv846GRCZyEe3JLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c938534c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9784\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:54 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383174870\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45974,"size_decoded":12748,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45974), with no line terminators","md5":"941d6539f61fe9c68d53649f639b2fc6","sha1":"6b94c3a2ee766e0ad8b936e49f2c669105434396","sha256":"78a4df96773d7088b76879b0a859fe6a6f3c114b3c69802ed97e87fe1dfa56d0","sha512":"9c12acdfdd50ff5681a114029df5222e799a1d67685b6a758971f0a4a71a15c45a56a872285e65c6f15c840e07a3ef39ea82028d61a667e07a0475666be23dc6","ssdeep":"768:xK8KBN0fe1y64YuTkyEIyPC6EEdaqywnGpcag17wK+1POAA5uZHn+nVFHrZek:xf0XKN/wFX","tlshash":"4b23c600bad4503a56661075f7bb4e070a1ce961a815865df1cc9fe837add8e33abb3c","first_seen":"2026-06-16T14:05:20.063336Z","last_seen":"2026-07-07T02:57:15.747228Z","times_seen":26,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/smart-banner/new-smart-app-banner.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.823Z","timestamp":1783392959823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/smart-banner/new-smart-app-banner.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:55:59 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392959975\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VMxCdwDKGhcw%2FqZSMSJVtWRKhRAI897VVBg2b5xC%2BlsAv5ni5sPhY9F2jKIh%2Fj3PGjh1LfBAdVxP9gv7fnRon6eh4WJHIqjEVTjrQ1Mr96qPjozUgHkhLVxYWBrQAIq2Uejsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cee8994c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9014,"size_decoded":3409,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b0ec3630e473d46ca2e3b26cf4751eaa","sha1":"ddd543d3cc6b7daee04126eef170bf131f37b3d0","sha256":"5560d4d2a6f3038fbae6041b6271a611718a772b55665141c6a69f3ac8421c95","sha512":"f4d0a04e62a5a5eef946dbd90594fdaa90ab9fc0e72197ccec184f6e45b45e5f7e54967286701f0487a495b7a3f83c85e8e6524f403a52e2e9a2ecddc0909e67","ssdeep":"96:RxMPNH4Hpy4+KXSPNj6UtdF9rmcbh/qA+yui0Pay0iNtR4SD4zLwzK:RK1kpy9KiNjfacbh6i0PapiNbLD8LEK","tlshash":"74022e496e511231457357aeafa36a1cf7a26d63e202c1263bec63505fb6805c2b2fcd","first_seen":"2025-11-17T21:22:01.731386Z","last_seen":"2026-07-07T02:57:15.747649Z","times_seen":33,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/assets/fonts/en/suisseintl-medium-webfont.woff2","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.845Z","timestamp":1783392959845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-medium-webfont.woff2 HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392788151\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UqXb249B5eeBLD%2Fkz55nDw4a474Nu8pP%2BSr5mhAv974Amf8yHOv%2B8r1gmAZvEkIi%2Bdnj%2Fyklii8i942u8qh8KacTudgvlkfDW00drkkFAEbV80iw6wpaneurCOF9rsEadOXOyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17392cf08a54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22888,"size_decoded":23580,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22888, version 1.0","md5":"a64d76f4b2b8032d0ee7766c90897519","sha1":"dde1d9973bdb7de262c2987cdc0ba68c993c9331","sha256":"2e1c906a39bc6303901b430a8cc16da85ce77d48f4e08c6ccebbaaef246c188b","sha512":"3942e419447a04ff5af421173b4b7a712a4c97f5f2f9f2358ed0f01e3a2c6e6829c5556bc94aedf762a60ddf48bc0346e30c18685a4aaba07086392531f392c5","ssdeep":"384:gzdqSbHII3wabQMrTCUX0iGVKj8A8Ohkz/5O1re6G5Kz7qFSmqPxTyMUZzzt/XA9:4dqEx0iGUOWG5KvqFSXP1ybltfCU4Ukn","tlshash":"5ca2f13d16031fbb0b465525a5da723d1285909d51fe62333f0a74b6284c7ca0e7dbe7","first_seen":"2024-12-30T21:22:19.812773Z","last_seen":"2026-07-07T02:57:15.730669Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/assets/icons/icon-info-dual-tone.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.900Z","timestamp":1783392959900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/assets/icons/icon-info-dual-tone.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392821079\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNgmtRj%2BBP4uMcSDqEuNd3RYhtZGOGZvCm5wRXwFgGSTysJkx8EYLJ6IhS%2B%2FUgp%2B%2F0mWW8jdYu%2F7Fncc2nQlfhO1tQpUgPkwJLantQO5qfp8Z%2F1%2B5GMwDooOTqpRKJQ1CZUB0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf68bc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67f9b49d520a871a86bc8f97f76edc0d","sha1":"9f53e76146e94f7f5dbeb4e81e14d230a4d68cd0","sha256":"654d932e9408ca608fa1303ba81748b20021c49c52fa47bb5b66ed98255a86a7","sha512":"4fb6fec189cd35455c79749c203fe668bfeafd7c862a6879065120561cc1110f4aeb4b7d0ee02fdb4dfb32209d0966a5fe6ff4a23e9f39c2d8813569f07211ff","ssdeep":"","tlshash":"9ee078168e58ccadf0114d24f7153631455f1c7331556090d47d0570502a5dcb527cc4","first_seen":"2025-07-14T00:26:18.767348Z","last_seen":"2026-07-07T02:57:15.744605Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1056,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1056,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/__click","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:18.338Z","timestamp":1783392978338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 88\r\nOrigin: https://etisalcmrex.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"kind\":\"ping\",\"path\":\"/ecare/c/quick-pay\",\"vid\":\"99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:56:18 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A2lqBp3i6GDSRXW1Q49yRR2Xs53BkyGw0fw%2FsiBeiN%2Fr6SXTkrs%2BwgqJgrJyJiVCSqKaYY%2F1n6HgjEf4Tq1QMXE%2B0%2BSk%2FUW6JctfLqTajkdQSu5PT4O9gz080mE5DExRwCy%2BTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1739342af4a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1672,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/735.cc1bcd4cf7aa7ccb.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.907Z","timestamp":1783392958907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/735.cc1bcd4cf7aa7ccb.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZzSPIhKQSQgpSSZf3kJnxNMzfBx5CY4ox9jGvylbvejZ5WqIcL49b4owxZP6%2F146P67%2BJuf35FTiSkWVrdZV%2F%2BdjU0%2Fw%2BRLD8bRF0nRpV7vWneyvjE4WO9ih8e2NDs%2FrbKf%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c9284f4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9784\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:54 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383174893\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27888,"size_decoded":5363,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27888), with no line terminators","md5":"a3758711c432d726fc43280b1604c109","sha1":"605acc4c37f6bc3e645a943fb4674a3539f44c82","sha256":"dc078c31c761e0dc034952b6ef0048406989c786f37b121d1dc975944f1de664","sha512":"d1c112ab50dd5763af8c19eba9b8871f16a160fb040c281dd31de0df303f404e52eaa739d0b84014c443ed3f92c8a949b8add02890b91fd506e59dbd3b1279c8","ssdeep":"768:xK8KILrn4srZZJcgoCKfK3eFK3eVDovY24Ga9/nufvzxXI:xfDHn4s9ZegoCoK3eFK3eVDovY24Ga9N","tlshash":"f2c2405f7691b86516c983bc187b1e08e335998e1f2c000db2189ed6dfa5c466aaf738","first_seen":"2026-06-16T14:05:19.98475Z","last_seen":"2026-07-07T02:57:15.729557Z","times_seen":26,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/assets/icons/search-icon.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.897Z","timestamp":1783392959897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/assets/icons/search-icon.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392804726\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xELc8QCRIApedf0SJjFMsqI5dUsLjeIoqEmSSLHlNapIKfRd300hFNpNbMDHX%2BNGdlrMokhodfDfELfOUxriGxZZGBg6f1XGWX0g7Mc27%2BCcHXGXAGxsKGmaE%2FEu27nf5SXw7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf58ba4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":902,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"453082f2e075418c32a9f22a93d87f51","sha1":"7e4ef45885d1f2ea29b2e010a56dbd82eed6a13c","sha256":"8bb464072d205cbd271e3e0c2e0abcd5c72e970f06a5d880bf137f0555387249","sha512":"1765592ed1fd458786fefd1953669146d64d57aaf07a05efe08ebb3103df62b43cc75ca23f370ce5187bbdbed7920b1481626f248393b7e285db2d19007bbac2","ssdeep":"","tlshash":"b5e08c195f48482cb3238919d33835b0865aa163aec40ea8887a0136324599ce62f1f8","first_seen":"2025-07-14T00:26:18.761038Z","last_seen":"2026-07-07T02:57:15.727525Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1064,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/apple-pay-dualtone-v2.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.259Z","timestamp":1783392961259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/apple-pay-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961411\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xiQjui8unlYkd7vLTkx9OL1H%2BzzdEcVM%2FxF4XXdALczEUcFZTpFUdLKMxD687ij1MzThDfqGFFF%2BP47%2BcRLp0z3ZsyPzg8ZTSv9ZNskNtbQWkGyuX7ZJj9LG7wCXicxMZdwAqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7e9734c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2725,"size_decoded":1945,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"320b8c2e9e1e0c68c2b6a5df2e86d3b5","sha1":"8462517f5c9ae2413b2e79952a1bf8883047c0da","sha256":"532be1dc63bd58a029d426c4ef1e3d121cffb99c1159a71084fb92688a4b2059","sha512":"ec467fefba1be1091c67f6a3a051adb9dc0f308d703a7c55afc611c37e27f478ec0a60c5b79e0f0728c760c105af35c6ec43047b0b4df09535c4a913ab83d73f","ssdeep":"","tlshash":"215142dab3d2a3e0d915d3f09b5990342f2724fa2e21d7684f62bdf0ba1315d54c8989","first_seen":"2024-08-19T13:38:40.809031Z","last_seen":"2026-07-07T02:57:15.751379Z","times_seen":48,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/samsung-pay-dualtone-v2.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.261Z","timestamp":1783392961261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/samsung-pay-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961422\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHbeRLTAgYawzyeucfHJyntD1YaEknYikqHj9tJAYdT67MeUvysjr%2FhjI2%2F5KnwL26uWzUJgQWxFoGd4LpqJ25LzSujSYVNwtxyb0rESUqs10L%2BeY%2BsTWw91zXfMw4RKw3LKdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7e9744c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5173,"size_decoded":2890,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b11d88efc9c171b151507c7ae1ac0ddc","sha1":"c2b8df63a56f136ddec6edc52692f2277c3eb749","sha256":"643a9793d3684183495edbe37e9f86c4c11df9263a84c9c3ecf8fe576360f710","sha512":"6f7443d28c8fefa710fbb48873af5aa54d07f319122d0639344fed5ea45dc7475727f50186b80710ecd38c264501cd6090ef32cf80251ea99d7a32f23586b7c3","ssdeep":"96:if/lUsa2Q2zFxFeSCd3bQlT4B7PIECgBzPsI383OreazxHK:if/lUsXH8SClqqHDNnzQ","tlshash":"60b17379b3c4b2d4b441eb908627a435a37b38f9b73bce0e07583b46694606d4c9ecc5","first_seen":"2024-08-19T13:38:40.809748Z","last_seen":"2026-07-07T02:57:15.716755Z","times_seen":51,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/b2c/getUserInfo.service?authGuard=true","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.825Z","timestamp":1783392959825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"POST /b2c/getUserInfo.service?authGuard=true HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 47\r\nOrigin: https://etisalcmrex.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"headers\":{\"Content-Type\":\"application/json\"}}"}},"response":{"raw":"HTTP/3 404 \r\ndate: Tue, 07 Jul 2026 02:55:59 GMT\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: TSe663c25c027=084df50742ab20009806c92515d4c559c253ec4627c528a38f51b0901ae6371715e1fb23aa719e2108bb562371113000a3707b1979a491cf350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152; Path=/\r\nx-cached-at: 1783392959986\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1bFFDeEl9zEMePtAot5ueip%2F8FEq0vi7q4NOWamljLRqpqtDcHZE0VA1lg0eshAzunpmJu2lKJi4dcj14YOwBrraDrOilrD9IgYbZg74sMz%2FtMWZX8l3rLb67P4lDEjMoPa1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cee89a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53334,"size_decoded":19946,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51242)","md5":"3e61fb481175974bd4404a47f0285bc9","sha1":"b672e85dea86734164a84e35e8ba8d927f080337","sha256":"9d3fe9b1ecbd0d73ecd8fbf8a5e355be11d9c8e013acc6d22b5ce3b82df8b307","sha512":"0ef938028b3874bf209207278242d111166a2b2daa6a39968b3e2039904b855400d4868f64827d68f3cd6b2fa2fa7338f51ab7c23dec0400b85aa343ba9fa8ca","ssdeep":"768:HwX1pGzPitm9nLSPxrJvgUAgmTJQJuvLqqEiZf0YPzZd9nQGjiZhiVW:HepOqMSBJvgUAFTDuqEiZf7PNMx","tlshash":"64331ab67397317113f7183960beab48b175cb825d068190d86bec986cbce464636efc","first_seen":"2026-07-07T00:23:39.05524Z","last_seen":"2026-07-07T02:56:28.68635Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/master-card-dualtone.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.914Z","timestamp":1783392959914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/master-card-dualtone.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960063\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6IzCizCppPBBVIfWpAbNaXyvb99D6Ek2k12LJK9sqjyWs%2Fu7LTjAuOzbNm0sZ7PtnHR380fgXTsPzKOKS2dqbYU2mydMghrAXIQnZWpA%2F4K5o2M4lvjFV0Fx72WA7miYeOfPyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf78c74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1976,"size_decoded":1319,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"383d03288df6951e039f2d64cb85b250","sha1":"680caaa8ae91ff29b8a2f7931fdffa3705fd3dff","sha256":"e75fcefabe57425a97c4b3965d504a5b2285484d3de8a3f58a49eac256770d7e","sha512":"6c87784d297fac8a493c60935cb6861112d8f10e80f674eb51f41e6ab8cda23098b4c3aefb059d8ba16b3cc8c206fce8ff933c71aa189673bb2ac0aae6ddfedd","ssdeep":"","tlshash":"3a412ad61318491ff4018fbcea5e55b9ed0f21abb38765c9c52a6a9c1903404db06afe","first_seen":"2026-06-12T06:47:47.874436Z","last_seen":"2026-07-07T02:57:15.720677Z","times_seen":27,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/follow-us/linkedin.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.245Z","timestamp":1783392961245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/linkedin.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961589\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bLnCga%2BBq8gWUt%2BZP%2BTILHhSwNOqrM3RoyxjcJcB%2FaDAzkoCOtebvhJd2fs6NxcS1MKtOSSu%2BFa1qWwKD%2FRxTMq8L0W8WMcAvjpafIawFX%2B00bs2NB9RqNTT7b3b7w8xvN8m8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7c96a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4677,"size_decoded":2241,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec195155cd241102c8098dbd0ca92059","sha1":"b9f6063ad2c9f5d7d3e52f0fbf2e18b380d06c9e","sha256":"cdf1cbaad575f958a9f35d9d135ac718110dcb7acdc6843c3c8624dcd4b2e4ba","sha512":"4c20945fa17f4352c6bc14b3af8f70c6f5446c9fff3c78244d88f2ebb543d4d7a912d19206efae31bbc06024fdb90dff47c17c2780c28e649721c584732ee537","ssdeep":"96:XjyqzYqOhmNWCEBMN3rhG82s/v+FZdthuAVHE:6Kt31G8/+Pk","tlshash":"66a19ae6f1a12ed85ed35fc0b809c675f03925b93b899218a26b57c7e1e77ccc0ac944","first_seen":"2024-12-30T21:22:19.834359Z","last_seen":"2026-07-07T02:57:15.728005Z","times_seen":50,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/visa-dualtone-v2.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.257Z","timestamp":1783392961257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/visa-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961409\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qL1mBOXIhEOy%2Bh622UJIYQ4RSXcMCiQGztuaBAbZow82D6YwSDkwWqTA4CaL39PFr693KsnFPsN1pnrbUlOYG2qTOYkymRP4mZiGvot5609m9AYWuvCH6eVqFEpnpRzY3M5YQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7d9724c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1537,"size_decoded":1465,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d96d24f8f1123c174c7063d6cf7d066","sha1":"fea70e131377f40005e29b077bf2ec12451cb5d7","sha256":"08b3b8b007ab96b3344b64e65fa047af91af9ed20f02e872158776c93b350d54","sha512":"cbc9774a61bcf12619cd227b12522b0771bf06cd256751de578a49ac85ee4b1fa500cafb50e07aadd362b284e8ea6568d6e15b98ad6f98a73ed207a4b6a8cabd","ssdeep":"","tlshash":"ea31d0b9739963e1d105d7b04915e530357b48fb3f27ea79c7e81891b82668c4855c84","first_seen":"2024-08-19T13:38:40.808043Z","last_seen":"2026-07-07T02:57:15.750906Z","times_seen":48,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=true;includefooterbottomsection=false","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.828Z","timestamp":1783392959828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=true;includefooterbottomsection=false HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=120\r\nset-cookie: CMS-cookie=2309769576.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; Path=/\nTSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d; Path=/\r\nx-cached-at: 1783392961187\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrumVN90ObrzTAKLJnifI5k0VlvH0Ays8G4Vq6V4G3fZ6vnwTVQdfFRPpqHahEQDQRs6FmjkjG0c%2FLkj9UTAEHErTAjNKiBVEixhl1qEYHjHYMo5uwDtVtPoN5PJ5tvVJgobOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cee89d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13321,"size_decoded":3260,"mime_type":"application/json","magic":"JSON text data","md5":"bfe47170179ebc68f3456ffa5d5152ff","sha1":"a081bdf3c993fa11ce45f6f2d03c3d37d8ca35a4","sha256":"56a2fb7efd247404530231b88c5cc85805199d3587a6d14e6a90665aa6dda28f","sha512":"e2fbd35a1b503335c5481e7488afac6221c358a43c7f25f54e6390c4c89eb0e59782ce76109399b5ddac42bd78fdd1f3c992376a14078ef3da14cfc4eda916a5","ssdeep":"384:Vzbx/vS4TuS/8rCwYx3p/bVsKFp9YdyKDG:VnxfjmG","tlshash":"b2525d7437762d63b71baeb1b8d33e14d8bc480245734d25ade0abf549e63e490a07e8","first_seen":"2026-06-12T06:47:47.882821Z","last_seen":"2026-07-07T02:57:15.751956Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/graphql/execute.json/etisalat/nwt-consumer-popup;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/popup/offer-detail-popup-main-sec;variation=master","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.835Z","timestamp":1783392959835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-popup;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/popup/offer-detail-popup-main-sec;variation=master HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=120\r\nset-cookie: CMS-cookie=2309769576.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; Path=/\nTSe663c25c027=084df50742ab20000e442acd066911fcf7cf19a7fe265883d3ba539ed8613083a9725985f90574e408d24599f7113000a646fd6485901c522e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d; Path=/\r\nx-cached-at: 1783392961153\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04FjLcvhmp8JU6Rr0RBzjlpUYe1IaY3z3%2BQNKbLzZvy%2BW%2FlSNt6%2BXPRsWp%2FdqCCDoV32p4j46M8z0zHVZ43qWeP13ADctCaGpJ2Na9ZfUn%2ByG%2FRQBHJaAoxetznxxtza7HLvTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cef8a14c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":830,"size_decoded":1523,"mime_type":"application/json","magic":"JSON text data","md5":"c5aaf7a03640018c01874dab2002a327","sha1":"980b9221bf12384b43e249538ec9ae1bd4e0ef50","sha256":"d6917e1722d9541cf7a1191af608d015df8629613cf45385a5aa8b03e0c390d4","sha512":"0478b4b5304e263d5eec1dfa2e280115d2130aa39b148f45b05df5f120b19f76deeb52ed8ee31688b41add5bde273153878ca9d999407cf72bdb513bb4bbd14f","ssdeep":"","tlshash":"eb01af32b6595e53a38d8a413e6739d1e0381642e2504d2098d4abe46ea57e96071ab8","first_seen":"2026-06-16T14:05:20.016109Z","last_seen":"2026-07-07T02:57:15.737516Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/__click","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.871Z","timestamp":1783392959871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 106\r\nOrigin: https://etisalcmrex.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"{\"kind\":\"render\",\"ok\":1,\"why\":\"\",\"path\":\"/ecare/c/quick-pay\",\"vid\":\"99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:55:59 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SedKb8A5ZCg6SMjFI2LFtbVBj4eupxlGgzjGCZ%2F1x0r2qcF6mMOGTng9ClCNHRdp30%2BzMPrGLpjypSM9Mdr%2BsiFRBp4%2BROo3wS0DQPpFXfRT4Cd8e8OxVMZfqx1O%2BjUi4RNcOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17392cf38a94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1685,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/839.8532b49a16632ca4.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.911Z","timestamp":1783392958911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/839.8532b49a16632ca4.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n7gk5%2BZZLsp2ZGOFTk13MJuhw99icY%2B1INSU9XGoYGdsX8dqB62JgjTlgpJXaxlZ8VfFl79NbSGC72itxOhVh90yAvf3oF8Eu%2FF0xWFR5YJD7ok6EzBY1zvI%2BPhgBN1aGBHI%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c938514c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9784\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:54 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383174861\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50894,"size_decoded":13765,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50894), with no line terminators","md5":"d8c4ed980801a7211ef6383402be7d44","sha1":"bcd3405f248628fd63a112c3a46419b3b5b184d9","sha256":"5dabd08bdf275f531b16a5f4c2937763673349001908efd54544950ec818ecf6","sha512":"2be999c9cae38fbbd4de7b10f6c1aa33555441be1db897b4dde6d513dec9ce10f1483bea6ab9f85ec0bcf7feaf4d76316d9c47606e624f909c3abee7793a385a","ssdeep":"1536:xfjtGx0dTLxSmUc7vuTZK5uWQYm2n712Nq3GwTWYCHFcjCAnmsYbgFLgcMxkNfR1:1tGx0dTLxSmUc7vuTZK5uWQYm2n712NY","tlshash":"bb33fa21be705079d27960666bea4a4b073cd4a15a024a9cf2dc4fec37c8dd9671b3bc","first_seen":"2026-06-16T14:05:20.060401Z","last_seen":"2026-07-07T02:57:15.745621Z","times_seen":26,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/assets/fonts/en/suisseintl-semibold-webfont.woff2","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.846Z","timestamp":1783392959846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-semibold-webfont.woff2 HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392786765\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1n7Y39UXqIgsRaBPPUXCGcN%2FBKBIrYDB1C%2BIZLMy2btbohgA%2FIdtJ8V5gAgBCAGutrWn8gGy3GTZmQG1w8TRxJ945aQEOT1iDkRsBuKwMUcsRRvI15%2FDFOdasuiLXL4r105agg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17392cf08a64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21576,"size_decoded":22266,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21576, version 1.0","md5":"82a8405f66fe5f1405045c413a3f337d","sha1":"50789987d8a3856030ca4b9679902a7e7ea50a26","sha256":"51874258722edfbe9f4db2dc560c8b8f9ffc3fc638f62d96bda7dab476ffb762","sha512":"4976b96409aaabd347c0e6e3f0b82efb66e16e6945e4cc1c47482a1859fb6f73fb98789c0773d6cf93fa0dcf439aec23f8904edb1073f4fb39be4f7e762ef0d4","ssdeep":"384:9xSaeCvSL3iNnoEsqeJol0ME6n9aU5A8x6wvJsiveO9XVGMSy4bYkVxYjskLQH+I:O9MSLADsqTjE69ZxdJY51y4bY4kLTaO0","tlshash":"dda2e1ff96f18339fdf88c248992714b0543b3052d59627d238b42ee0a19e7cd5807e6","first_seen":"2024-12-30T21:22:19.809732Z","last_seen":"2026-07-07T02:57:15.722598Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/youtube-dualtone.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.912Z","timestamp":1783392959912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/youtube-dualtone.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960072\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pw%2FHqjAwbe6WLjf%2BgW9OccFvJhUclOImMKo0jkQPbnbyiu4JtJ8XogJWMONpvs%2B%2FD3jVWEkl5KEAPPczAYLPzhsS7tfe9J2RgbhKOz%2BMP8JB05bYjva57aNEN7gxslQsbD44fA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf78c54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678,"size_decoded":1085,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"640609e9602d03333d5914fd4e9e938d","sha1":"e445ab1f26211e76c9cacb3de956f6fa6e0b32b1","sha256":"b324f977ff2694decdf7a3bc73fbd74ce83de0ae413fd8b8a4008d406b37221f","sha512":"17ad8a91ba50a6cdbd5d492569bab60bdd7e8541fe08661a623bf45b578e101f079c7470745cca2df1936bf8db040ab3e66317236e0815a6898b8dd56222fc71","ssdeep":"","tlshash":"3b019eda13b8ac1cb6935e6aef4d7671152614b7292a41d8d97540312243f4c781f680","first_seen":"2026-06-12T06:47:47.854323Z","last_seen":"2026-07-07T02:57:15.73166Z","times_seen":27,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/follow-us/facebook.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.239Z","timestamp":1783392961239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/facebook.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961392\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wGfZww1G0LgQsls802c7erlU7qGbJXvgdU8W5mF1NEPLPdp3ZGbRs7mtTAo7HhCT2F7FUusfnYsWTQxdqdXA5v26NW019j2M4Oirn%2B4fMDkgV5JaPK4sFgVBFtNy9hGNtQfvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7c9684c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1370,"size_decoded":1341,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07fb11e7af7ac9d680871eb9a87fe974","sha1":"08675f17ef0cb9c4aa070d89e74bed9957fbfd2b","sha256":"edb38bba1106d7ead042e6526fec407061b4ff4b1b1c73cc4c062ac54871cedd","sha512":"f2d2bb5afe3f59062b8ceb9d2026fe03ad0031839f034d1b2eb9531a790441d457aa84561f4f678e7f65a2a09ef977e6e50838d4e390a458031df3fb8f9c5d9b","ssdeep":"","tlshash":"9921f0f5e394b2e0910adb30d0399425b69a38b9bb1a0710d3084f8563b32ade1cdcac","first_seen":"2024-12-30T21:22:19.829498Z","last_seen":"2026-07-07T02:57:15.732148Z","times_seen":47,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/follow-us/youtube.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.249Z","timestamp":1783392961249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/youtube.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961430\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1F46N0UD8Lnr1TMdyvHtdR4D0KFTsYTTu67kyuDOggdDCn5%2BSyE%2FAtOF%2B1KLkt8%2BlndfufvQe4ZiKaoBmBe0Qh3EBnnBTYPMVssejgmmc2OwBuD9mpM5Qu%2FdkD%2FT4TpBjRRwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7d96c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":998,"size_decoded":1248,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a74c9bffbfd0db7dc08bd66d7273625a","sha1":"ec61c6074907b260c7038abe9942fe8e5351a34b","sha256":"9b659af296dcd52d828e1f7e3d012821854abe43f989463fd1533c6d0cea62a5","sha512":"a5c8de59a5d71e92ed205b9d9bb2712db6920006a9011f81595650954684790c7e6d9c93795acea38ad62c3dbdfc0d00d0943d0c6de00ee64f6927305f3ee86b","ssdeep":"","tlshash":"131121f0c2c471f05c03db95b5155835392d38fa668bc3ac41a09e38b26605a89dcc58","first_seen":"2024-12-30T21:22:19.835909Z","last_seen":"2026-07-07T02:57:15.728494Z","times_seen":47,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/882.ad8e672ab8498e43.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.910Z","timestamp":1783392958910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/882.ad8e672ab8498e43.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQ%2FnAZraaWud8%2FRtZ9QHU3DCMg7yRXmrw2OM0asZF7iSHi418qx3w4Re7xpONPcBpnxmKiCixXvP5Yb75ARjhH85YBdhdVIVzRxbF3QJIFNMy1x%2F5D%2BURcUQI5MQ%2BqmfPqEOmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c938504c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9784\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:54 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783379516547\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19490,"size_decoded":5398,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19490), with no line terminators","md5":"c067b2553ff672573226a52489bcc5e0","sha1":"e34d42e92c9eac322970fc161f309a4eb7c43173","sha256":"e081a22394962cc6d9714a97237e8b32cf815327b3fa711038f29c10fb03795d","sha512":"8859c0ac6e6aa701a41c3e196d05ecd3d31a4b41977f35d70a924c38dbb22acd0173c65c0da52827cb4869cbae12e06d27736275ef1c031b808b478c753bb639","ssdeep":"384:xK8KrQzpAXA54fs/+bBmU6XOeKVSiHltLVmwm8TRmz3fuF7HeDLygGHA3f3oCwKu:xK8KrYpAQ54fs/+b9VSMtIntR7pR/Zpq","tlshash":"c19231cbf2865dfe74c8073a910985c42b2cb8d37c19457cb7461eb3a1045a8bd5aafe","first_seen":"2026-06-16T14:05:20.049256Z","last_seen":"2026-07-07T02:57:15.746723Z","times_seen":26,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/b2c/ecareEnvironmentConfigurations.service","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.967Z","timestamp":1783392958967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /b2c/ecareEnvironmentConfigurations.service HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:55:59 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392900523\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H9C7i4KzjLCUy9G%2BcZXqnojfljB7vvupK3lHPSs%2FH4ZlY3gCjfMcthI5mwodl7m7lQPp6mIDRWSo3MZp06x%2BW%2FNzTQFYE1z4Hu%2FRhaW4xyom9tb8BZUty2SPkUaEKt1%2BgZvrug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392c998554c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4189,"size_decoded":1916,"mime_type":"application/json","magic":"JSON text data","md5":"5a17907c2965c31106cd0d04c1e4d34d","sha1":"acfc4802c2e015c6cbd0b0177ebae5bbdaf81e22","sha256":"0dcbc26ab72621992aecbe2d6a452e07121ec7d4bc910544c952f6aaefba7477","sha512":"c94853073b446805e3101489f4350bb46dbc5efa11b0f4b4e5672a757aab3e99be98663201255ed84fcf5dbc4d475f138621b75e34207911a345df5f0b6ee6c2","ssdeep":"96:lmjKrjOmgHWtmjKrjOmgHWENO5iMtm/rjOmgHWRHCjn+3:EWrj3jcWrj3ja7rj3je+3","tlshash":"e281529a0b40bcfbcbf8b154b01d31ab096e771796cc97eaa4cd1c2c3be98541146d2b","first_seen":"2026-06-12T06:47:47.869747Z","last_seen":"2026-07-07T02:57:15.733539Z","times_seen":27,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/graphql/execute.json/etisalat/nwt-consumer-content-main;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/buyget-hero-quickypay/quickpay-main-sec;variation=master","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.833Z","timestamp":1783392959833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-content-main;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/buyget-hero-quickypay/quickpay-main-sec;variation=master HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=120\r\nset-cookie: CMS-cookie=2460764520.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; Path=/\nTSe663c25c027=084df50742ab2000a0c2c1aa9220aa146a4dada2971c700b8650146af2db8a3305b01ce717de0ce408a04619ac113000ea00cbaa216886b89b36ab87ad7d364d24a82045540fa2860ed49b7e40a55b541990ad92d0c37a427ff7b896afe9c9fd; Path=/\r\nx-cached-at: 1783392960771\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yStaBMHY0JsMUog9l%2FHhoRcQ%2FDbJ9%2Fl31xLG%2FprK0vLMIQ5CrImp%2F9P5PfHx5nVcFo9JpeKYaW49jXBrQqigZo0AahpcVcCOsA8rm1QzDh7dnkL7dYuuDycqB55%2Fuo3pgkB1AA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cef8a04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1324,"size_decoded":1605,"mime_type":"application/json","magic":"JSON text data","md5":"0116ebaf55deeb08111491a4c661b86f","sha1":"5a1329dd8637f92bc2960366922ed784fb54f5f7","sha256":"c68d62079e5a8b5578bade55442f4b5720b0918395bac880c63d85c7c524f218","sha512":"4f2181269eb735b27868ff06769665f4fb94f0ee1c84b6b817a1c16ccb9c2070bb6ec136ff1f3c94462d13741ea261dd125e4572e0e7710117a1b1088cc7a7fb","ssdeep":"","tlshash":"a9217c31b510df31b28e97a25cba3d7290bc1703e1c11c109da6eae459e5ef850a35aa","first_seen":"2026-06-16T14:05:19.986222Z","last_seen":"2026-07-07T02:57:15.744145Z","times_seen":26,"resource_available":false,"data":null}},"time_used":942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":942,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/assets/icons/cart-icon.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.898Z","timestamp":1783392959898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/assets/icons/cart-icon.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392820680\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3Z9Z13XENmrRkIzvoJKjqsDO4ahB5SsEbtVi%2F%2FiS%2BsJfnRs3nc2KIjKAMDgMq66vWihLLOp6%2FiwTgdLvPZtooIZ7STiKY8TBpC%2Foxb4rMHfHiq4inco4iJ2kd%2BmkFKNbAY0Aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf58bb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659,"size_decoded":998,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a6e184fb8d41fd438b1f069bf9490adc","sha1":"8d54526feadad735f6dbddb84b302f7d7075d248","sha256":"462e7d2b1851b756c62d0faa759006bddc944b81c2ce7c25691c89f487f43bc8","sha512":"f1999384f07a94f37d70d09350486285088d98454cae49f76b24390d5c40140410bbdbe58ef3cf379a6a181658ec4fb7a790a19c186c59f4521e07571ec90fc9","ssdeep":"","tlshash":"7b01f9bd130c4cbcb823ca6ce32a3332a22f817325a563d0843e45701a9214cf93fad4","first_seen":"2025-07-14T00:26:18.7664Z","last_seen":"2026-07-07T02:57:15.738008Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/actions-open-link.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.902Z","timestamp":1783392959902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/actions-open-link.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960050\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btxLyXXwdkn4LS8hMqU2oh6cyocG8eEdZ97f4s3B5cd8oM3XKwG0uIPPJ8BCQ9S3k50TFiln44SJmAVL6OgU0M5GPPugHUKsjNJuh75nrGgkGHM2A38a%2FzR70pynlziWK3Psfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf68bd4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440,"size_decoded":917,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e63f2ced9c5a0b9654e96d539ecd9229","sha1":"3964262c8818ae760320f512a49c9dc3e8aa7b91","sha256":"7e62f9d8cf2b282f07dd200c3b1449b6f1a1346388dc25f143157feef1ae1c42","sha512":"1bf3f68aa53a303e398750144ed9f90b4e63af23a523d80bb766a247ad1607f2482053688581509477a2c2b82f68f64f811177d3de75be736210c70c85a17854","ssdeep":"","tlshash":"a5f0e57d434c5d2cf952c634e76c3231b12a129321486188d87a85b062416acfc3fad4","first_seen":"2025-06-22T04:03:22.719513Z","last_seen":"2026-07-07T02:57:15.720165Z","times_seen":47,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/hide.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.888Z","timestamp":1783392959888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/hide.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960040\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akObii7Yr%2Fay0Ff2krL6vp6pgvDWVeSot9RRUWwQsNpSaapuCrXC%2FfBKOSe5YDrbzlJWkkWwe1U3Zk0JE0qLz%2Bhm4ZKk5%2FKzqMwFPiymyCW%2F%2BMTrVI0xq80R%2F%2FzPjUjAV0ZUKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf48ad4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":997,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"016367b5038f54c9246790fec5454e86","sha1":"d88e0d751c3b4ad910b33ad72e31db5b4ba8b33f","sha256":"5ed5313b0d89e9dc109b84afc69f4aa356b5df3e4bb98b7736fa404aa69401a4","sha512":"0972c0f4c12475ab1595d583eb5b258afd8ccb1882c855f2d73be21e6c55888e102d26bb53162b96e29844ff281c7fec1c5a15118388e7b89697931d6cf82f3f","ssdeep":"","tlshash":"0cf022b70b08ac2cb6234e38e33ab271712905ab2708a284d87a0570554554dea3fec8","first_seen":"2025-05-03T16:54:18.330243Z","last_seen":"2026-07-07T02:57:15.749711Z","times_seen":54,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/google_play_app_store.png","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.904Z","timestamp":1783392959904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/google_play_app_store.png HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960077\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UsWvEyTXJtiLN10IWmqPB%2BVwdp8V5r0t61H5XKnQLyjua7kqkCaGoiCJYNpV%2FV%2FtvZOslnpOGw7G2gUj99RaeWLHv8as%2F58Pdbt7kU4sAIZQvA9FkvLOP9od4%2BesD5b067%2FriA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17392cf68bf4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10141\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10141,"size_decoded":10823,"mime_type":"image/png","magic":"PNG image data, 500 x 150, 8-bit colormap, non-interlaced","md5":"7da62b6b96523a24b0b699ea8bad86fc","sha1":"64dbbb2bb150a953047a98d456a29edc55c8fab7","sha256":"570b654f96c702326965944bb9b0945e9e2c9238562a6e01ab110e1733e213bb","sha512":"8ac185e3474e8dfc7172930910153fa92919b50e9ce5a5714820fae59e9c0e39f4b9e9bf3d17058f529cf3145e871ae99266c3f3a50c67722c51bfb7cfa3f1ae","ssdeep":"192:qU/Mr/XkO9kyM13OYUj8muw/X/CNdZ/HaeSwakwnvlbjFHM19LqA3VBS:1Of9kyM13O7jvuwX/SdZOsevx5EqAlBS","tlshash":"e422afc50d93ec492e7b68de4b014487eb2b11c2c790b21d0d702a9e66e5a5143df7fb","first_seen":"2024-12-30T21:22:19.863072Z","last_seen":"2026-07-07T02:57:15.723183Z","times_seen":48,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/master-card-dualtone-v2.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.256Z","timestamp":1783392961256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/master-card-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961407\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nuvtn%2B6PrcFk%2FHw%2FzQ%2BVm8lvmV%2F2ll0m1SM7a%2F2S4UTASgxGke2MUzU8gc0%2FmtDyvsX0mpzGQOqIXQDTZiUyCLLS1iV%2Fj5fXu4zFV1Q%2FweqGs02iA5tlAtsoXVLe%2FeFviA3eZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7d9714c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1475,"size_decoded":1220,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30bc5d791e2199ea57b51c4b2beb07ea","sha1":"5a1382e824d8f662737f5221ade99b7bf126f94c","sha256":"9d03aa2e3af21cda81061f9e079cbcfc79a4db87c00a87f8cc6d6e1f9ee5c07b","sha512":"2721f67002b25c8ba2730ac6999f7f04574dd3571ba74284f173678e46cfd3d19a497ce5c3270cc2c1a638a5c93252c18105a18bf589784f2359e2982dc2d417","ssdeep":"","tlshash":"2831c050a2fd93d0f24cd37d490c68be366650e53914e895c7b07979f864bafec8a0c5","first_seen":"2024-08-19T13:38:40.806792Z","last_seen":"2026-07-07T02:57:15.729046Z","times_seen":48,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/runtime.691f5f7227d03402.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.327Z","timestamp":1783392958327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/runtime.691f5f7227d03402.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0%2BaL2bYOIvcBc8SUpcUZYoIPgNcYHEJ2K6oOIbaaYrja8doJWNk18tnlgAYtNNzcIhuQErjROadhwwDKVjghAXlNeMrrrphB5bVAaw7y4AHkdGHLaTVvi6gMIoOZG%2BMQMHRLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c588094c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 9785\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:53 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383143366\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4088,"size_decoded":3092,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4088), with no line terminators","md5":"d4eff532dfcd3ad63fae90fbfd96f041","sha1":"4817ce6969e36510c4e6f8b1f2d49e572816dde6","sha256":"7d6e32c45eabbec8170a82a19b658a570a730c7bdc2290100beebbce6ac72941","sha512":"11915b78c106bee6350b2133ab1981023cea6f5f6d7b397af0348d785863a67c617ee86dce05f9a177d9661830d64bb5ed65a5fd1375a80386fd0484248d35fd","ssdeep":"","tlshash":"4c810bb63674fdb72a7554d0583dc842f6297036141bf8f1ab5bcea95064ec60c22ef1","first_seen":"2026-07-07T00:13:37.698307Z","last_seen":"2026-07-07T02:57:15.722092Z","times_seen":17,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/follow-us/x.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.247Z","timestamp":1783392961247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/x.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961391\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtJMnqlaJliCkiK90kl8Uob07Z1U49iIhXUC0vT5ELT8R1YweD2NAgEG0D44jRhHFs6h61TDqeEd3IMsjEYTxwRU7uhnc2cocLvuarR5SbvsRwYbZMqf%2Bj9Keq86XDQoKzjVFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7c96b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366,"size_decoded":934,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23f463fb671c7de13c31aed4b6803c1f","sha1":"79a589f5941f20ac3a48b9f94d7ab474a565d216","sha256":"1d1d4361fe5e424a02218ac1dadf0e8f404728f4c7dc9a77ca9c4f5d76136965","sha512":"0c667d3b0863c0ca22fe01d11cb5caf6d8b7450738120a0a5c511ac724e32f7a89e62b3793d9a2b7133157c41c06dfc3e515ae599d555fb6e8d8098739bacaa9","ssdeep":"","tlshash":"97e0c0e992d45000d2018f10a537222e65bf21fcbebc0bace5523330f0d5946290e5d8","first_seen":"2024-12-30T21:22:19.832589Z","last_seen":"2026-07-07T02:57:15.745131Z","times_seen":47,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/scripts.d9574d0e6cd3bf5c.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.335Z","timestamp":1783392958335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/scripts.d9574d0e6cd3bf5c.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X47r%2FbPm9TJKn3n0gt9TYrCTwCtfD298zWIA01XnCvHb9vAcsxfYdsJnmV4Y3G9irtDZJwGfTq4GQQ7guasPXDRq4r%2F6imWHJSfMPUe4Sk4qEYM1pljE7uAtmIVI2n4fQ3grEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c5980c4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 9785\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:53 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383143395\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79889,"size_decoded":26440,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"c133ecc32ea46e7bfb19fe41727baead","sha1":"f14a9582c633ab6a27882f98b483ee3733bc809b","sha256":"28968ccce7405788636552434a1a47527722b8d7078720f23c9fcd81e95ab630","sha512":"c383113f7c1295499d445b4b41f07e666eae3e69489db277617fe2f78cf6d15b25d508eb08a2f3310838d0e8c3774be1765e8150ec1cc4b4ef63f9b13d2b7085","ssdeep":"1536:o8/9b4Q+R1P2ilvoXkilrW8rVnvidWw+qmZYCFdT/FQyDid:JrVtqWwwTf/FQyw","tlshash":"ea73d75a3244b47309df85b78037420bf2265da8b14a812cb56cadde2a7dc863277f7d","first_seen":"2026-06-12T06:47:47.889237Z","last_seen":"2026-07-07T02:57:15.733081Z","times_seen":27,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/main.6eb70d2f69f85627.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.339Z","timestamp":1783392958339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/main.6eb70d2f69f85627.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcy%2BYZihEYMSLV7IsDFCoPHgD%2FAynZ5Iss0r691XrokabeX5kdTnhxnCh18%2FagQcQ3hiPs37iGfuZZJEH3WToe%2F8E6NaZPZnlGfFhHT9R4NppzNb7BrEDPv2jqcQ53KGGvKOoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c5a80f4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 9784\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:53 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383143407\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2729799,"size_decoded":284699,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"53b005fac1ad340d4c2a427d9d0c55f2","sha1":"47117c2c495378c8b971d14d87da449b3585e75a","sha256":"cc143016c27ce5e0ebc1f4d08041c8d5cdc74d31dff7a73a9276564062ef7dbf","sha512":"473534a6c377a4090df69b84fdf84341f6ba124d63e5f0ea06f75f5921b6a4b4f79854eb6afa29d5da6948726344a873abfd5ccbd2e05d7743c9a4f3d811bdae","ssdeep":"6144:BtK90fgyvZC8hWXNWPRf2TTnmtK90fgyvZC8hWXNWPRfYTnJy+VzgYu0:zH2zgc","tlshash":"7b255292f180302d6c9b86999465ffbeab3ea482d3054fb5f10367a4538d1c72d71ace","first_seen":"2026-07-07T00:13:37.722775Z","last_seen":"2026-07-07T02:57:15.748708Z","times_seen":17,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/assets/i18n/en.json","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.813Z","timestamp":1783392958813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/assets/i18n/en.json HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8t%2FilaAOoLsfaHuDSXnJjCqtTHGjhEhu7BLKGXz4UizMsRI9Lc4yXKIg2V5twEx%2FQKoeJyTaD4MsKZtrsIyfgX%2BKfx6aP0eJFbE6BJxcaVn%2BAjeixMoUm%2FhtG4NyjZQc%2BtjdVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c898434c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9784\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nlast-modified: Tue, 07 Jul 2026 00:12:54 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383161145\r\nx-proxy-source: r2\r\nx-proxy-cache: STALE\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84562,"size_decoded":19809,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b50c6177e88337ec73c512e9263d1c64","sha1":"0f7d6c63ade4e73f01138395d0f129d3ee61cbd0","sha256":"8f2e28761e1f18f5e9c7c3d24254c9f7fb6da65f193f9615058ddda4f5d4a6d0","sha512":"5183f432ff94300790963197878fb2937dfe19649fccad2fb4c8b7308b1fe85fe4f32d4f0494c79944918419d8db98224ba257e0765d63d1a61561e7daf9c33b","ssdeep":"1536:gsoMGc8AVLOtfxz9suWeyV4Opm9l5ji9j7tNGk:mc8AaxzLyV4Opmz5jiltNGk","tlshash":"2983c70ef68411b70ad10b5dbc4faad3ba1d50b903112569a89d402cd3faf7a277f68d","first_seen":"2026-06-12T06:47:47.879729Z","last_seen":"2026-07-07T02:57:15.719076Z","times_seen":27,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/__click","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.538Z","timestamp":1783392959538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 88\r\nOrigin: https://etisalcmrex.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"kind\":\"page\",\"path\":\"/ecare/c/quick-pay\",\"vid\":\"99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:55:59 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDLGLKx9tnNaAvPzAJIT8DbK98kgVKcga0gVXvXbHteZ1w1fBcYr%2FRaEmFrHrVLwaQ2HdNXu3Jakc6S%2BSVTQqRM3Rn6mlh%2FWclipbRIBBHrvAEV%2BgkcmtF4%2FYkeSkERFRqDKlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17392cd28804c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=false;includemegamenu=true","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.827Z","timestamp":1783392959827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=false;includemegamenu=true HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=120\r\nset-cookie: CMS-cookie=2460764520.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; Path=/\nTSe663c25c027=084df50742ab2000516c9a70010961fcbc5ea9f0b43324f591047871d0fcbf8bba5dfb8d6dc551d4089045f02a113000e0ce1602d40dfe372e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d; Path=/\r\nx-cached-at: 1783392961084\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BdmEsfIucjkfHzPCYAOw9R31ukr7PDXrlQyWp4xTaF1i7yb26JRn7eqM9Ij%2FIBS%2BVqBj6rMSbsfZ8UmS5g9YQ%2FRGeEO%2BxpV7fn4%2BemiVXErMym6mfe77NjVq5bHOPJPG%2BmA3WA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cee89c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48623,"size_decoded":6397,"mime_type":"application/json","magic":"JSON text data","md5":"1e45ea9ecbdd6ab85408f4668c2a5a7d","sha1":"4c68af3ce5469bd68048c1390b7e5429a2b6e8ba","sha256":"344d082bbc49e5ef7c8cd5fce03d40eef84f9609f81faa8810eb59442c5abec6","sha512":"60281e280224924354e464abd6d14451090ae048e1c741bb7c6d7edf86707b7ebf1afaa914d502c386ef6ac342d83ee9a42f789e99a2045a50187510a05bdded","ssdeep":"384:Jzd6nlllldk/NMEExRzoPJcw48USrg+RRhz/JLq8JgBBnY5EEifjn1:5dellllbEExR0RRhzhyrV","tlshash":"6e238a64366a28a3a30f6a71bd973f51997e51434290df34acf1eb6d8df23e041e2264","first_seen":"2026-07-07T00:13:37.703615Z","last_seen":"2026-07-07T02:57:15.717905Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/linkedin-dualtone.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.910Z","timestamp":1783392959910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/linkedin-dualtone.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960057\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lu8JVKbbWMh%2BjdBJw5KHkSD480dD3FVkRg5YQeiWnz9nHxV6aFnDmlscMLo4cuFhv67vYDMhHVogoe6ELvyyqZuYWeHYRu4d1Qivb%2FnEqLC3ZkA7%2Fm73Kq4E%2BDK1XBn1L%2BSJhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf78c34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1314,"size_decoded":1338,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e9e28559ad7043cca8bcb1631eb9863","sha1":"7b05fb47e76da6252fa19a33a220d8e06e318966","sha256":"d6024a6503b56d8820117dcc0e45f0e8b962c2bfc71fcb0e4af84f335373fd73","sha512":"7d56ac2c76cadf7d76542b3399d244bfa1e974a4f2fc506ddd1b6129a831ca9ef76d7c1df6f0e36fd6b7e2f0db77ea133ec98b6d76eac55a9cf64b90f1ce7c56","ssdeep":"","tlshash":"3d21adbd072c279cb956ba31ff3d3e6ca30c204d399ae58091ae97306563195f88ac50","first_seen":"2026-06-12T06:47:47.89356Z","last_seen":"2026-07-07T02:57:15.738992Z","times_seen":27,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/follow-us/instagram.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.242Z","timestamp":1783392961242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/instagram.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961399\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ZZE1aUYef5OAugX7UUs3WLoCjEdVmoGpjBQ4g8AExPC%2FWndL%2F8232%2FXjPZvYlBD9WaB8jqpFPMrxf3STfAvH6NRzUPWcgPKOK8O%2FpTLwuOlXqQwuY6wwJDlzb3G8FohaA%2FZ3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7c9694c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":542,"size_decoded":995,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e870402cb8b926c0bc289262463bd97b","sha1":"84c0bbcc6a04c315d44209da7cb9855bab4bc5f3","sha256":"b444a00cb3b39735c73fca85e61935225d393721c25480a81435dcac97917064","sha512":"6614fe49183e4f435e918b7bb3a7006ed4b6ea7a1564f16ffd523e4c24f83a73f74609db3036143ecbbe9c2cf852487d67fc28943a668242523737f4d4d8cf0e","ssdeep":"","tlshash":"3ff02b587318583ca3568f08e32932bb317315399d4915d8c131e4b8616258f6e7fbec","first_seen":"2024-12-30T21:22:19.83102Z","last_seen":"2026-07-07T02:57:15.732594Z","times_seen":47,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/etisalat_eand_English_Primary_logo_RGB_Black.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.841Z","timestamp":1783392959841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/etisalat_eand_English_Primary_logo_RGB_Black.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=4,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960000\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEox7EZzEGD39tQxQ9%2Fm9jX%2FXEvPrlRJm3rRpuNY5Dz0GDLyk%2BIwzQ0O9cdw%2FAbQAGSfIMNgQ4EB4BWwRQR0PC63fZjUjDuXJatqhCgdwkx00UalYu485AB7v%2BgyKoyB4bjF1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf08a34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3815,"size_decoded":2263,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b44acc4c325c0c20f7cfc856c18b8dd7","sha1":"78334e79dd07c13114a22294bda766cf778a2b53","sha256":"12da6c93ec90c11b612e5a2812c8b253586cb785427df11b14d8d44b84e3aee2","sha512":"8c7f07c960866d8d40bdd53d248e2bb7c2e56c24f373f8446566d5a15474fb5025c8d62059746d16c09caa6d878dc8c41d90e1382382cb04921d09418e0c87ec","ssdeep":"","tlshash":"fd7184d6671191cc10dbfc8ebf36688cb71fa8a93eeb96c444eeca596083c88d503c40","first_seen":"2024-08-19T15:09:04.786922Z","last_seen":"2026-07-12T03:59:00.311367Z","times_seen":61,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/follow-us/tiktok.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.251Z","timestamp":1783392961251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/tiktok.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961396\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EGrmQ4u4ST%2FFl6uiVzHyORtZYnI8%2BQHvFWCDpJrcKbZUPMMPIXvbE3gJ8Or73c3i%2BRw0PuXOiQckG1JBJjzYkSjeesQHK1ShRnM4deESkXXzWiKhDkdwiqGaT2DIi9%2F4XKWJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7d96f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":1226,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d657070cbc75fc777aad0110a9456403","sha1":"c7b1d594194581aa053b5b79bc9ef5529cb600fd","sha256":"0df803163da2bd77ed7852c06037e61708c20a517dbb0ad12032ffd183eab524","sha512":"098d87a20f2731bd1af5e5815c5c89ee228a3d748de2560f7e26ccbfa663e049aa3f5a33f86a24b70a6304aef060ab1cfd8ecc8016c20e2276660e4f1cb73660","ssdeep":"","tlshash":"5c1165e123c52699e3024b20e23538393ba6307e3fa8146081702b60e7517c59cffdec","first_seen":"2024-12-30T21:22:19.837572Z","last_seen":"2026-07-07T02:57:15.748191Z","times_seen":47,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/amex-dualtone-v2.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:01.253Z","timestamp":1783392961253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/amex-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000e87dbd511d6adbf49c1c36cbea3e17abebf1d6b1740910221a8ced1370ac9dde08c6af9208113000edf7a648000cd21a2e01e6dd26980017b823595b1c60fe0ab0afd05e5c789c60ed144962d5efc717f6b01afb1f6e940d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392961400\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPGNfr8ZW4ZVsV9amq1oWdl8DbJySzW4uB9puh0%2FYirzVkb0FsoHspvdtwj7Ri4ovL6H2tu75B0RLYJ%2F0iESi4E5XM0bjUnj%2F2UgzmCwZWcJvyqfbCaFyfF9rE6M4CpyWw728w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d7d9704c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1273,"size_decoded":1337,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b739632f5ddab94804ccafacc0f81773","sha1":"58a27eafe8a8defb359f4d4914f6f2eabfea16ba","sha256":"6b21646546e8fa7027e980ecec25ca4d3f89ded11f8eeda38519395936559ee5","sha512":"190059ef0c5bddf49ee41adb1b43b73a63381bae284601369c6e7944a074fd7d2efb1a518064f6a42a9e5b31f446d220d7d89c4a3498c21cd1163ae36c363a54","ssdeep":"","tlshash":"f42132766bdd6980ba09c7f015a21485326734e9de78de828bce3d13da261ad086c811","first_seen":"2024-08-19T13:38:40.80622Z","last_seen":"2026-07-07T02:57:15.739488Z","times_seen":48,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/polyfills.197dcadece2ff59a.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.329Z","timestamp":1783392958329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/polyfills.197dcadece2ff59a.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kg1qOpbQuuTe7DtYmZrMj7eScEMEIhLY7uxyl1TwfzNwhQxb7auuqTcrGjjwBg3akTl%2F3UExWF5%2FKIRLFmJbZbgZhjBTJM5tWE6LvqjS7W7AFI46nd8MuFnWaZ04lVymyYSkkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c5980a4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 9785\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:53 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383143386\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37050,"size_decoded":13835,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10103)","md5":"d6ffde237c23a6a83796f6821f023889","sha1":"e6d52ee446baecacb12122e47fbcc6558abb79ac","sha256":"f513cae12324ef89d977f502573958d9043c011711590747b62c431e61c45fce","sha512":"c8df86d4a2e87e67089619e1feb97d71aac0cadf19cc79b3afbdb69be2bac2edd136964e06aed5ec518ff7c412bfb92e3f6b6c76051b7b38f47d9ff8a864840c","ssdeep":"768:xK8K6x159hBF4q7rhvM893a1UNlJ1T+xuQP/WOB9toPHQxCKArbvlkCdjGLzw7mv:xfrbHzeVtKTir","tlshash":"a8f2e7da73d1b07687f209b1853b804bf62b2565784c88d8f51c86fa3f3715991a2f2e","first_seen":"2026-06-12T06:47:47.856251Z","last_seen":"2026-07-07T02:57:15.739944Z","times_seen":27,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/824.a9b798eca73a1c49.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.878Z","timestamp":1783392958878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/824.a9b798eca73a1c49.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JsBVfHG3y7WYXQ1e3z7RbU4GdMBZd1G26YDHpsWQQqy6X%2B5mzcExEWNROHsVgpg3c5EMwxr9ty80yqujf1p%2BrvaKsMPGRcabBc7Q6JHEYMBZMFInm%2FGb12MQkiYusKtyaMLgoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c8f84d4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9784\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:54 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783382722258\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2316,"size_decoded":1923,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2316), with no line terminators","md5":"7d0af501d7b539d6ee6e67763bbf50bc","sha1":"2880da0fe25139e3ac8f55dff394b12893ce8c4a","sha256":"c4e98d05a455399353714085817e1414b389792697a01706f597ffa55b6b6a6a","sha512":"3f213c07e5fb73984762f8a24b13708077561ddd7bff720d72582598fb421d50c2f55aa404049b1b36cef216a32e52fbca6aaddb537a362602ff3572bee1c0c3","ssdeep":"","tlshash":"2b41b818365bb5ed1f293e60cab5599c1f581c88a08e8ae8425edef44b4e40cf1d7778","first_seen":"2026-06-16T14:05:20.004588Z","last_seen":"2026-07-07T02:57:15.743644Z","times_seen":26,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/b2c/eshopConfigurations.service","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.969Z","timestamp":1783392958969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"POST /b2c/eshopConfigurations.service HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://etisalcmrex.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 404 \r\ndate: Tue, 07 Jul 2026 02:55:59 GMT\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; Expires=Thu, 09-Jul-26 02:55:59 GMT; Max-Age=172800; Path=/; Secure; HttpOnly\nCMS-cookie=1494428682.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; Path=/\nTSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152; Path=/\r\nx-cached-at: 1783392959118\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5lVDuBmUsQvhKTl4%2F0TTpoq2Fa%2FpAZ%2Blgf7NPkqajXUMXnO6kqgivkD9CCzQNlJ5NRoYXUkdJFBf87HvFyx9vZxvLgkvioxRZN%2FcV3t6VP%2FDE4qPSDCZDQDvZpOxgxo5xBF0ZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392c998574c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53334,"size_decoded":20288,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51242)","md5":"3e61fb481175974bd4404a47f0285bc9","sha1":"b672e85dea86734164a84e35e8ba8d927f080337","sha256":"9d3fe9b1ecbd0d73ecd8fbf8a5e355be11d9c8e013acc6d22b5ce3b82df8b307","sha512":"0ef938028b3874bf209207278242d111166a2b2daa6a39968b3e2039904b855400d4868f64827d68f3cd6b2fa2fa7338f51ab7c23dec0400b85aa343ba9fa8ca","ssdeep":"768:HwX1pGzPitm9nLSPxrJvgUAgmTJQJuvLqqEiZf0YPzZd9nQGjiZhiVW:HepOqMSBJvgUAFTDuqEiZf7PNMx","tlshash":"64331ab67397317113f7183960beab48b175cb825d068190d86bec986cbce464636efc","first_seen":"2026-07-07T00:23:39.05524Z","last_seen":"2026-07-07T02:56:28.68635Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=true;includemegamenu=false","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.831Z","timestamp":1783392959831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=true;includemegamenu=false HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=120\r\nset-cookie: CMS-cookie=2309769576.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; Path=/\nTSe663c25c027=084df50742ab20006736e3d1d9a66ef8916e7cdfdeb23e50c9bb620bd57619e407645d7e6bba6feb086c4943b01130001930c2bdb38775549b36ab87ad7d364d24a82045540fa2860ed49b7e40a55b541990ad92d0c37a427ff7b896afe9c9fd; Path=/\r\nx-cached-at: 1783392960840\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDaI29dnj8hBX7BSbRt1Imakeg3dWC7H7kN0ME8omPKMJNVnECOqJaBAuh2xpPh4I6FBkG62czbWZ9CQ0i5sOwVtRE5uYFWasJWgBw7AODCS%2BRmjjTWz1gTyC4LwmDRFsPvT0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cef89f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2127,"size_decoded":1656,"mime_type":"application/json","magic":"JSON text data","md5":"9060e384d6e5a9001688802591695336","sha1":"d9d8eb13b26d5d8eb79ca83f5ae280c1a64e86e5","sha256":"3cc86711a0dc72fda644f9e4609ed161a1315b7bca7c56c583e094d56e0164bb","sha512":"4884c0764d504afe01ec61036e700c8da9cae213501b8338b8bdf86e0f1a721ebd699214f627a5127826a49cb5dbed7bf5be54e28f0c6f19ecb3e3a32e9f2957","ssdeep":"","tlshash":"ae41907437763863f34faab2dc623d41b0b9404641726f60e9e0e7b90be63e490612e9","first_seen":"2026-06-12T06:47:47.887088Z","last_seen":"2026-07-07T02:57:15.737061Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1012,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/assets/fonts/ar/ge_ss_two_medium.ttf","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.849Z","timestamp":1783392959849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/assets/fonts/ar/ge_ss_two_medium.ttf HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392651650\r\nx-proxy-cache: R2-STALE\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGYzDxBKScwEV%2BwAM4GC6GMxIm8deLsP6L5UoGtQbLV4EvMi3tiFur02kG4w63NDlzfuV03x%2BO8M%2FurbfIyI92uNQ%2BgOiJ%2B0zVvw731k7yCvgnCxqF5g1SPvxGIxguxF6xtsNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf18a84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63888,"size_decoded":26169,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 17 names, Macintosh, type 1 string, GE SS Two MediumRegularGE SS Two Medium MediumVersion 1.200;PS 001.002;hotconv 1.0.38GESSTwoMedi","md5":"eae5755acee59644deada63a2c3ba677","sha1":"7a260875690459c8520ad2a71019bbc8aaceaf6c","sha256":"c438a2129c6a0a655f5775ee3ecff515a7cf7743c02705ef8920e5ae59c3bb4c","sha512":"44578a25a592e2d1ff0f0b1678c4e2c9accbf1c4f0b2a3a1ed2c668cf5dc5e4592e5e012bb5d8ff03027fcec5ca97ae6afdaf0d5aba0c63af3a2426a4f5b54b8","ssdeep":"1536:3v/3AYBGMLLim/UwimYrRKz1T4e8tIofaze/oKvQPNVlLg6xGeCkg:f/1HLHpim/zue8tIAaze/TaLg6xGeCkg","tlshash":"e453e8d7e9f70d13eaa98f78d9edd2bb0580f8029b627404bc508941d3772e17696e38","first_seen":"2025-11-17T21:22:01.782348Z","last_seen":"2026-07-07T02:57:15.719629Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1072,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/header/findus.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.887Z","timestamp":1783392959887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/header/findus.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960039\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JiCIhSx6xzi3fBYVxEnLObKbHy%2Fq3MulDjlcXaUd%2FdhEb0NnBq04RLy12gI0Fn8F6JkFy1LQ56zz5wqebc73WUU288LU3uiJ1Jsz88Re8N88PrDuOEoEDQztS9upza5fY6PtCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf48ab4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507,"size_decoded":967,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a332325ac63fa590b273ccb2a7410894","sha1":"7822e7c29b7e1977ecb4692e435d1b773cd25eec","sha256":"64621ee6f07224c6b9e9fcd6da60c39aa299321a2812ac173af9113193bb54e4","sha512":"37c237b0a5fdf8ccb983964c74dbaaf8eafe84c471881fcfa2acab8a8707a31944d9cdeb4e046cee12420e2bc18cadacf8f5f2454f75df0f2f3aa31c8b5e5940","ssdeep":"","tlshash":"06f0e2ba03485c2cb5274d28cb2e35f56b2d0ab3234c5398e87e5534515624df93fac4","first_seen":"2025-05-03T16:54:18.296477Z","last_seen":"2026-07-07T02:57:15.749198Z","times_seen":54,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/apple-app-store.png","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.903Z","timestamp":1783392959903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/apple-app-store.png HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960061\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qoC%2BJEbzPC%2BxVtW4n5o9KA3mkfBFmIVZiOJCMMGXvy79UjfU%2FUJdy9dserl5qLo%2FaQAADchYZ3RD0buaUlXi7Cz%2F1pmwjLgQBWmyo98zphxj0XdYkeYk82%2F57F2r1OAeCwafyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17392cf68be4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6292\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6292,"size_decoded":6973,"mime_type":"image/png","magic":"PNG image data, 142 x 50, 8-bit/color RGBA, non-interlaced","md5":"fe356bb3f31ed6920d6092c3952d96c2","sha1":"4123d161f5ad6bcabd4607bd110060b0c271292c","sha256":"14c6edf775bfbc8967d2ddc1212620d2e59f9eb1a73333aabd8a441caabb698e","sha512":"5f3bce97c65c9f124a481c29f4f7f2e78e7a9acb38584bcc9b3674f5c16432e4491d95f2c664f45a8a53cdc02160ff8ad98c5a7400bae901cf2f7efbf92e3f1d","ssdeep":"96:gj0a2h2hQDlB7nZ4rMKBbBwecITgO0ZktwF6ch2r1U0MsfyN66PzASrUr5j8BHui:gwa2h2qJB77egTZwch2r1yNVrejfkB93","tlshash":"a4d19fd9af5f9ca2bc7cb54770e00d18e68d00fd5ad54b2ee0e65be4255b8c74081477","first_seen":"2024-12-30T21:22:19.859727Z","last_seen":"2026-07-07T02:57:15.738499Z","times_seen":51,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/android_2_tcm313-205859.jpg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.906Z","timestamp":1783392959906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/android_2_tcm313-205859.jpg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960064\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YL8BLSMgxaJbPWuebxpjU%2BUPbdeQW8k4CFYn4RA1s8fvDBO%2FP7FaE8%2B1xp3UXHJKM%2FrxCXdkpmcNKlAFMYpiZ%2B1QsfwWU%2BMYiohmj2VfEmHu02OUYSKyh%2FdoqOc8XDpmBBbpkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17392cf68c04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22596,"size_decoded":23281,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 448x136, components 3","md5":"b7689345d58a33b43ca83f3592f0827b","sha1":"91897286c76246b33b88718451d72620a8612a51","sha256":"886bb1ba2381e43c92b8cb8afda0bb852fdc56cacc6381c993df4a5881429fb0","sha512":"7104d95fbe288d5a1d147c780280e670cc8f84c28762d0b1d4a78e3a5dfb59575591c84519ae4973f01e54a56b4390c28df440c67de71ec9d42342fd261e3ab1","ssdeep":"384:pP4OzBnAYXuEXBZloCeQxa8HcJK67ZKnx2KWlXIrCaVcYm/C12Rhq5AZEFenH:p4GVAY+EXBZlAMvHT67oQXCCQ2a1CqAF","tlshash":"66a2be5d6015b68edec8e9c9f0e3ca342b5c5430387ceb978f0e52db78e2a111948772","first_seen":"2023-05-22T10:23:22Z","last_seen":"2026-07-12T03:59:00.327948Z","times_seen":68,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/twitter-dualtone.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.911Z","timestamp":1783392959911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/twitter-dualtone.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960070\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHXvttm84yDe1c8Uvzs9pVWZvzG1qxCe55I1L9fb40dr4ciWNzhiVvpK65%2BAXAU%2BWBDzfxN1wFM2qXhgJ5HXrGkzcEXL1Dvt2GE1zCq%2BA98gorth2RmSGIXH%2F%2FUfYmKQ59qGLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf78c44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":686,"size_decoded":1074,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a93994614c7738ea1931832e81c3a8cb","sha1":"a0285196c8eb1b6b1d4fa65639d64a051d722515","sha256":"5f8c5453c0f4c0d1e3429ea43ba801d4a19b3262d6bdec3a6d29dbd98b49e391","sha512":"6d059b23f92a36e39ef9048e2de67546a1af39af5ac1ece7d0a48bca34917b17a9fa9b8ccf74d6064c4512ea487da4849d4ae767dd1ae3f0d64603c0c0d36890","ssdeep":"","tlshash":"150102f6c3881e28e52e9b84d306fc76b09a22f31f85c2c4c1a452249592e6e5c3fdc3","first_seen":"2026-06-12T06:47:47.853315Z","last_seen":"2026-07-07T02:57:15.74615Z","times_seen":27,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/card-dualtone.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.917Z","timestamp":1783392959917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/card-dualtone.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960074\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5RZx27C7Io0hOkodY2tAayVVhau3N6ljm%2Fkm9A7b6NsAxM3gsQ%2FFQV%2FJK1cUkS67CD0Lyp7BMoDhfH78HDt6msQ0e2mU6hq9%2BywiZbzEP9VB5TCHLeo%2FpXL3ZXYypIbMJ90PvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf78c94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":914,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e5e506bb14a57f7d811018693925919","sha1":"d52fcc5757c13cc50828a95bc668d6048d8b753c","sha256":"4a2b069397940679ab99f94c81bf8c6f321640a4eae150bf11ad8ffde21b7386","sha512":"e4976296f05233c5b1bd44ffe760397679678ab58f7f0ccfa89ddb6f558038ccad930249c2bb8e55f500d3b7ff50be08d3e3550875c9555af62a8d921e4e77ca","ssdeep":"","tlshash":"1ae0d83d538c8d2cbe038a30e3693233821f629336886329cc3b8130568605df42bed4","first_seen":"2026-06-12T06:47:47.862954Z","last_seen":"2026-07-07T02:57:15.735014Z","times_seen":27,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/eand.jpg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:00.613Z","timestamp":1783392960613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/eand.jpg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000764283a305b940243e14805f4328e25d90dbb76be350289e36dab267df33cde4086e3363871130007763340ea7d834929b36ab87ad7d364d24a82045540fa2860ed49b7e40a55b541990ad92d0c37a427ff7b896afe9c9fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960772\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vpEYxATcpey8js9J3mrog4IfDXqlSJ2PAYs55DmM67IegkDFoMZKPKTwDfoKO%2B8mPweyx7Wpq%2BbltbvjtfekbFdcEGGtO9rWRdqc9Guk9wguATAMxBYljulqonWtaYb8yM5bGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17392d3d92c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87326,"size_decoded":88001,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"b9eb903c810260396f5354ab8c8fe7ee","sha1":"f4cc76318d790a0ef3011cc04a11593d1fb1f311","sha256":"88279dd6bfbb917b7b96fc404e5744524d1c2f574076c047574349725d5fb2b0","sha512":"22ff0e1c5c60dd9d6404a2bbf4868a2a19d841dd0b9b16a2a3753f2418066aea35132de3990f60fdf6a1fdbde5e7fc0f3edb52e866bf0618f1317c403fb67701","ssdeep":"1536:/abrGdxUwfNoVB6NwZp+btf1u7VWKrV8kyTuC/d4v8A0aWURxU9V3eF9mx9mytyN:/erG4wFoOdbtf1u7dty6C1g8A01r3Hxo","tlshash":"d083f130adf2645df7a4857428f4fd82dd60a3a3662f1979bbbc7c414b814172baf0a1","first_seen":"2025-07-14T00:26:18.749947Z","last_seen":"2026-07-07T02:57:15.716237Z","times_seen":31,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T02:55:57.917Z","timestamp":1783392957917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 07 Jul 2026 02:55:57 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9gEHsRgpMa6iw6v8y6bYCAlkA9Z8ErlItrq6k83axdYA2zD%2BHmqdl2rTyulLiDt3axI3ckx9Et%2BTgtkUm5zQPIszNwcX3CU25vQEkJ4AtX8jXx6%2F%2FWvp%2Ba95IdgR9%2FHMJU00ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a17392c32fef4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/__ext?u=https%3A%2F%2Ffonts.googleapis.com%2Ficon%3Ffamily%3DMaterial%2BIcons","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.320Z","timestamp":1783392958320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /__ext?u=https%3A%2F%2Ffonts.googleapis.com%2Ficon%3Ffamily%3DMaterial%2BIcons HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=03BWit4Zeiwzwyb3i%2FGiMwRcCzqlUpRYp7WWOF5c2ghcBeNCGeFLW8xFjSObj0yc%2BY06ysk98YhhTpE8g3sv5jf1%2FDsUcADMmRqyaBqlPMtjMeK%2FbAi%2BciPhQ4zlWDWW6gFMlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c588074c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i=?0\r\nage: 9785\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:52 GMT\r\nserver: cloudflare\r\nx-cached-at: 1781735277720\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":1137,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e9315901ddc4241a17975e182b6a6afc","sha1":"509da39e077949d7eb9c2360292f70f91ff14396","sha256":"4fd41998f059c61c77938cf685be27f3c7dcf8a29c92b72cf020f65b67c5e1fc","sha512":"675fce706e63d2fd1c9faeb7fed9653d82735a4d05ca966a4ca912c479908f49793b933e4e060b8d72e9e2e02b38008fd21800eca8ca718a1e9125b43309c48f","ssdeep":"","tlshash":"dcf04c58b995594555520c02730f3f251e19402f780ac8fd4b521d5c8dfb97b439670f","first_seen":"2026-06-16T14:05:20.025218Z","last_seen":"2026-07-07T02:57:15.724309Z","times_seen":23,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/styles.ee8ec3dfb960805b.css","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.324Z","timestamp":1783392958324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/styles.ee8ec3dfb960805b.css HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2h%2B7LQdKoBsZpPTqb55koHr%2FM%2BUT1bO1A21SXsJRx5i4hMBH9KjnsWdpTVKeYnpccEnbsUeUbpEb1FJeaoFwl%2F3p2eHSmOFY21wsNkRzGbGuS4neyQ%2FMOa%2BD%2FyCXHNrfVcoPhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c588084c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i=?0\r\nage: 9785\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:53 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383098985\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124629,"size_decoded":19002,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7cb288fa830e03868070ef5e22d70ce","sha1":"f667d6cf8ea5040568e569c23da155ab41bd7700","sha256":"4bdad59b61b2ea0995e790494741f753e4608a2fe0d0a3ccdde158ca8d349caf","sha512":"5f1fa9aaaefeacabf9c9335e887a3d22b66a4183a781b057f68b8cfdd0796d60b5f3e1561052027a154ada2076a3ad0b0c413b0b641e19f4b5b744cc44567b88","ssdeep":"3072:jI44szL19a7ZL3WIN7ZL3WIH7zLL3WIu7zLL3WIu7zLL3WI944szL19kp2/8PTm:jI44szL19a7ZL3WIN7ZL3WIH7zLL3WIW","tlshash":"07c35295d2013016ba6788fb48e0ee248dc8e995df539ba5f1c06f3cc1dbcba625e711","first_seen":"2026-06-12T06:47:47.863876Z","last_seen":"2026-07-07T02:57:15.724809Z","times_seen":27,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/vendor.62ac21f3ea5ee07c.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.337Z","timestamp":1783392958337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/vendor.62ac21f3ea5ee07c.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nps%2FTO2APoaKhMyzLMstBvuBomk5%2BG%2FQs9QEbmhbU01c%2BW%2FQ7vjTSBL2aVuXQhE7l3CnfY85WU22xOOliutHyUz1%2B2etzkiyciWj1B1lIQcAVAyS0GrpdZOpXk7ZjSJ1JbozQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c5980e4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 9784\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:53 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383143404\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720897,"size_decoded":463461,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11022)","md5":"9ecc22e629a5c50bea615784372e534e","sha1":"a98787aaa0c091b7f4841bcf6460c0fb04e3dbbc","sha256":"8843ebb01e485539f9840a6b3342c959d605b494452723349bbcde2d75c4fb5b","sha512":"a25504a21a9a8f82ec8b93ee51a32b6fcaf2b776c9a33b1de7e0a6f0ff1cb88d6e23f8157b42aaf3e37e5a0aded4d506e8f44f6a77c3d7fea2ebb268f4f87b2a","ssdeep":"24576:ez9oPf1eooIl+XBslvebOB9SOQmS1XnlPdQDsSj4Nofm0JsHP:ezaPf1e6leBslvebOB9SOQmS1XnYsSjI","tlshash":"f8252a9632c1302242d240f65477054ff299648eb50a819df1eccded6faee4c62bab7d","first_seen":"2026-06-12T06:47:47.857214Z","last_seen":"2026-07-07T02:57:15.735599Z","times_seen":27,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/__click","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.385Z","timestamp":1783392958385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 97\r\nOrigin: https://etisalcmrex.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":97,"data":"{\"kind\":\"ping\",\"path\":\"/ecare/quick-pay/?locale=en\",\"vid\":\"99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2F4BFzrfmumityofGAbT79ywKPFZbOTBJlgYXFy07n7c212I41BR%2BkzlnSpEZyG21PSRpyO9RUju1Fy7olOUhtF%2F9teua0flEdVZjVjwCpb7Q9cAxDwgejNcopCM3sx292SDMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17392c5e8204c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/515.f63eeaa81966b9bf.js","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.913Z","timestamp":1783392958913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/515.f63eeaa81966b9bf.js HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ngv10v4Fw8ehQ4ITb91dtw5a4jE33EtIoyZeEHw2GLLHU9YQ8Tg9s54wUKoOziWZ%2BYZP62xaRS4qqEk9jg1qTwlQZKkhiq4lmCYKwqEvnRiNHJxK2%2BtllnDOZEJkv22IvEOI%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c938524c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9784\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:54 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383174901\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8648,"size_decoded":4362,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8648), with no line terminators","md5":"6f887620d659e5451f3c770d37d1d29c","sha1":"8c12da1be5fb4deccf33a0546ed8ea2b3ec0bcb7","sha256":"c50cd8cfb250df7c123fdbb12eec993c31e48cd02e32c6c816b38f1686190f0f","sha512":"0cabbe0cae13a741332d40651b565e9b7599bc05bf72826c49d3541abf77bda6b689c0a014fd61528df9d0b9bb895f773eb3924cfaba7cbc8268428cc84a70b3","ssdeep":"192:xK8KIVcpJPShcM59rAkFlwLGSTPCQJatDKr5ePVZe2LIzfRErWRTawlb:xK8KIYKrWaHnkduAPh","tlshash":"a602b9d73484203b4a6d61d1fd7205486231610d9aaa446cf1dc9e8a3b8dd593fcfafb","first_seen":"2026-06-16T14:05:19.99724Z","last_seen":"2026-07-07T02:57:15.740451Z","times_seen":26,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=false;includefooterbottomsection=true","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.829Z","timestamp":1783392959829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=false;includefooterbottomsection=true HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=120\r\nset-cookie: CMS-cookie=2309769576.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; Path=/\nTSe663c25c027=084df50742ab2000764283a305b940243e14805f4328e25d90dbb76be350289e36dab267df33cde4086e3363871130007763340ea7d834929b36ab87ad7d364d24a82045540fa2860ed49b7e40a55b541990ad92d0c37a427ff7b896afe9c9fd; Path=/\r\nx-cached-at: 1783392960593\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRP6lbrrclwVj3B4L6uQvBAu8cWYnmkmoKbx1HKRTxCgxLNZzaTPukd0kte9wdoDXSzB8ouwAMb1dFgNfnzov1CnmFtl9uxCO3zioHpNVFHb0cTjZOmQEfGCSo8HsD7uNgE8rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cef89e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1474,"size_decoded":1571,"mime_type":"application/json","magic":"JSON text data","md5":"ad53fd264f2640c7bb0c9c387f120d53","sha1":"c07ad2ecb51d2f8919d088b043c49f8a3a9d4766","sha256":"889dedee4e15d59fa5411517af2a4eee8f51bfb3234e1a122ed3136878a0a3a3","sha512":"2fbbbdbe631b611cd27adf38a62f352a7d3083bdb5793095bf34ed82220fd1e5fa1ba2419dbf470f56851a9641d0f46c19f47e2e72c19371d234795fd00cfd9d","ssdeep":"","tlshash":"91316f783b632d52731afbb3e9e37e24e8b8840244265c21b8f467b505d779884a06f9","first_seen":"2026-06-12T06:47:47.87788Z","last_seen":"2026-07-07T02:57:15.715628Z","times_seen":27,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/assets/icons/icon-arrow-small-mega-menu.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.839Z","timestamp":1783392959839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/assets/icons/icon-arrow-small-mega-menu.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392650670\r\nx-proxy-cache: R2-STALE\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDiVXn6xuSluoIbT7kHLC9aotb3xBlb2RJo7tI6VpJkPnFGI4u43mzfm7n%2BK7D4BOcFIzhDjIgACFn30yvppzFPzH6TYEDuVhFfsAtlJrbdEjceUnjv1IR71V%2B7WGCx8aOK85w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf08a24c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":872,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee01076d6f7e5552a2ee3553deb11146","sha1":"f11406996b96acef705b6ab25345f46396cc10fd","sha256":"0524958c325784c31b5b7a782939ec579210a3cabd90581681ab83a7b100ef40","sha512":"81031b86b54154f5862016897f06d91204b85db15c5ad714ae702d00a1b7d97226161fd21a136dc932bb2fd5c1aa48962340bdc7c6e48e8f020dd59571c76c24","ssdeep":"","tlshash":"b7d0972a86448d1cb82b0b02e6b8b638002a9082440e0008e83226b482121ce3a3b8fc","first_seen":"2025-07-14T00:26:18.74322Z","last_seen":"2026-07-07T02:57:15.741391Z","times_seen":31,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":965,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/assets/fonts/en/suisseintl-regular-webfont.woff2","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.843Z","timestamp":1783392959843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-regular-webfont.woff2 HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392787860\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZwAHQX%2FAuW48ujbDrbLxm1j8DtyDWt00PAUVxWpIai6h8v7jMu2dby1addK6UxkrgjABlLZkubeAROScre7G2diZqb%2FUXZQhUp3ZYMiCkqPl8yuxzbmQdty6k23%2Favv6X110Mw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17392cf08a44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22720,"size_decoded":23408,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22720, version 1.0","md5":"9aff0b960184a28444c0bfc63d6fb87c","sha1":"b055bd93476904d5c1f59614110d7a13af6a7d81","sha256":"765fcebc4454e93de798b9ff1ffcdd19616f553d7acf82059d24d76ca1cadd21","sha512":"656b2187c1fa2242f1bea8c05a3ea8eb042121995b1eed820b4113e08e37c8cbb499e5f6da83746833a705004a18a3e80adbb3461831ad5c2d15c67b3b63ce2a","ssdeep":"384:hdH7q3d/FrzTI6hWLWnZgiE/PBo5qSwxpK3bdDjktZAj1g5xHfNao1G5H+l9Y3+i:TSdpTI2WLWZlX5GILuXHltqAY365y","tlshash":"4ba2f12384218fd0f416192ae9afc17661651f7a22653cb9ab4a1852c078acfb91833f","first_seen":"2024-12-30T21:22:19.811296Z","last_seen":"2026-07-07T02:57:15.730131Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/assets/fonts/en/suisseintl-bold-webfont.woff2","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.847Z","timestamp":1783392959847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-bold-webfont.woff2 HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392788420\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mo3ybny804atilhYDQ3Lcu6GqOEcWue955u2gqEiJfR%2BmVe%2BzaKD2f0UMP%2F3nXDz22QKadgGuDdyNyH3pDwriF2u%2FUDyND5iV%2FVR%2F7AGJcBu9Ebz8pJyFzOnRZF1i%2BI%2BGedPXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17392cf08a74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23164,"size_decoded":23862,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23164, version 1.0","md5":"e4d01e1b3db34d7e9257eb4d6f9c2872","sha1":"49aeba6f0a449d55197cdf2f2d698cdb7ec13ab4","sha256":"ac1091fb1dfd0807834402eb090694a78474529b5a99f2bbd820f501fc86990e","sha512":"5f88f9dcc3783b8595b0640dc23a89aad55e9b45470b314ad890c2b2ec96b7b84553827b2a480dab114ec82dc66fa93813b9f51fd559bb0df9810acbf466fa78","ssdeep":"384:khL7S58TKclUEEaodUzvlUNBCvHnHyyPuuU0DlGF7BvAkMwDu0zxPwz4QloKzes:EqqTKclTMvNqHSyHUSc1JywPMTlTp","tlshash":"74a2e12bffa9283892476b335b5414fed0be01c774b5c8eff999e0884a1748bc16904a","first_seen":"2024-12-30T21:22:19.81481Z","last_seen":"2026-07-07T02:57:15.725927Z","times_seen":48,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/quickpay.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.894Z","timestamp":1783392959894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/quickpay.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960046\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bh5%2F2jkm9aZgyBwlMArFF8vu4nD%2BDZgOCJsxOSqtmwb5wwkp6aF2VEa%2FJ2TYn2HpJwz4xV6CVQGjkxL4airjEyNuShdvL1%2FJzjEZa9ZzIrbBvbtJscS1EmkFOIi7gWbhJ%2BmQgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf58b74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":983,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77c22a18cd8f832b176305af52714a3e","sha1":"64505a813fee8a5077903beb1ccdb242aaed4e1e","sha256":"b44edad7e92579d496d3147eef2322f778e899c386714d948ab3675e46e58bb9","sha512":"1f467c0c08a2dfa73476e80763cddb7bebf4069d0d02b372f2ed9165e665ee694ffc4046f9554ec6a7fec3de0aa6a780283e7a7ea2e8e21b61f92d758080c217","ssdeep":"","tlshash":"50e0ab669708cc3ca0166aa0ebb8713d0e6e2152239a94c8d0a84230b062899d83f9cc","first_seen":"2025-05-03T16:54:18.331651Z","last_seen":"2026-07-07T02:57:15.750198Z","times_seen":54,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/mega-menu/etisalat-logo/eand.jpg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.895Z","timestamp":1783392959895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/mega-menu/etisalat-logo/eand.jpg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960056\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ocODBvKIoPGGmJ3aUH1U%2BHz4DJImdB0kZ57g6HSryzczQO%2BfC09RuwFBvMyCxc5G0mdeX0JE2cEMDtgfrMk%2FpsgGDWKbYreoreAYrXG8m1KkTbEOFdMtbLQfbahOZevSPDmHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17392cf58b94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87326,"size_decoded":88003,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"b9eb903c810260396f5354ab8c8fe7ee","sha1":"f4cc76318d790a0ef3011cc04a11593d1fb1f311","sha256":"88279dd6bfbb917b7b96fc404e5744524d1c2f574076c047574349725d5fb2b0","sha512":"22ff0e1c5c60dd9d6404a2bbf4868a2a19d841dd0b9b16a2a3753f2418066aea35132de3990f60fdf6a1fdbde5e7fc0f3edb52e866bf0618f1317c403fb67701","ssdeep":"1536:/abrGdxUwfNoVB6NwZp+btf1u7VWKrV8kyTuC/d4v8A0aWURxU9V3eF9mx9mytyN:/erG4wFoOdbtf1u7dty6C1g8A01r3Hxo","tlshash":"d083f130adf2645df7a4857428f4fd82dd60a3a3662f1979bbbc7c414b814172baf0a1","first_seen":"2025-07-14T00:26:18.749947Z","last_seen":"2026-07-07T02:57:15.716237Z","times_seen":31,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/content/dam/etisalat/consumer/nwt/footer/facebook-dualtone.svg","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:59.908Z","timestamp":1783392959908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/facebook-dualtone.svg HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab2000ce720dc197f4739968d37bc3197a3440cc9eb8817eb796a32a85f38fc2fd2fa008ebfc04e81130000b5deedfd83ffc3a350ae317624c29bbaa1e9d17a0e05d0c9f4f26f4c1b6e67cd73cdb4350f6ef34f43d00792272f152\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:00 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nx-cached-at: 1783392960054\r\nx-proxy-cache: FAST\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocEq65ElykdrnmeKtcdz6mZLBd3kIYy9UsMy%2B%2B2sq5X5skDhhQxNjW6GpQOmOLAOuMYYQjiCib8QfBDlK1vx80qGCqENYM2I33y9pxK38f%2FXzpJ5pC2wAlHrornDv4js66A0Ew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392cf68c14c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":523,"size_decoded":979,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b396eecf399c7b3846e77591d3066e1","sha1":"db75d6d9b3ef433c1b234773a6523f88733f083b","sha256":"dea0e9b5bb3b4f86e625d3a9c55a3ddca36118b4ed128ca0c63253ab035aa338","sha512":"f010ca65772a301e03fe85c87166eaf376f7db95f60791514c9f3585ea1e2eca4e1a7cd1c59aba9105732ecec299fbbf8252b705a659721f319eb1d47ad4fe2a","ssdeep":"","tlshash":"d3f0e97993c88c2cbd174d10ea183536933f62727959a794cc3f417016c154df83fa94","first_seen":"2026-06-12T06:47:47.892686Z","last_seen":"2026-07-07T02:57:15.72647Z","times_seen":27,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/#?lang=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:00.852Z","timestamp":1783392960852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/ HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/c/quick-pay\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en; stickounet=1783392960.042.17459.164413|4fe03ee20755f06e315b25ff822079bb; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7e9c5a11d53af9acdae4453a8539128e7402c6f081a2a056bc14a3b5a7879db0c347924e9500cfbe9df15f8a98952aaa; TSe663c25c027=084df50742ab20006736e3d1d9a66ef8916e7cdfdeb23e50c9bb620bd57619e407645d7e6bba6feb086c4943b01130001930c2bdb38775549b36ab87ad7d364d24a82045540fa2860ed49b7e40a55b541990ad92d0c37a427ff7b896afe9c9fd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:01 GMT\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392654167\r\nx-proxy-cache: R2-STALE\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDyvETBkmrYShTYpNLurwVPOSTYiuwKW%2FGNzhuY1i5EsjwbLDsOS5v9FDN24iTOOCjbIzPdzcn0bEkyPE60Y38ZtPqmlu2MXTjZw1UlFwSwHtQo557IOI6YjheXFrD226fpjzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17392d559454c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55575,"size_decoded":20241,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51807)","md5":"03eb240ce58da76215c341ebada6bd56","sha1":"62885b2011dd3e83a9cddd020bce8cf8b8be7066","sha256":"822f9ad1997f27a8bf93c4a67e92db6a202906b58b8c6ec4317456498a892f8c","sha512":"61de423b2c08230f6079ee9aa9619ccbe3eade31b499fcef92c62ad413298480a607d72c6e110fa2bb2c3ee73dd71cc15dbf3413d4c58cd2032d03f1f8a48bcc","ssdeep":"768:FHwX1pGzPitm9nLSPxrJvgUAgmTJQJuvLqqEiZf0YPzZd9nQGjiZ4y5:FHepOqMSBJvgUAFTDuqEiZf7PNMj5","tlshash":"06432ab673d6247113f7583960beab08f1b5cb425d068490d46bec986cace864637efc","first_seen":"2026-07-07T00:13:37.70254Z","last_seen":"2026-07-07T02:57:15.718501Z","times_seen":15,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T02:55:57.969Z","timestamp":1783392957969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/quick-pay/?locale=en HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghsmRC%2BwkeDhOMgbFioHNMxVngNGEoMIPjju97yQJn6luViVZ9FbpEH8Kkm%2BLPy%2Bgn3v60a%2B4ySTeLHRUQk6Y5rObbcUjV2lrnQFTXBbUSrfxo4R7xqIoxTA3pNwU0BzxkGBag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17392c35ff14c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i\r\nage: 9785\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nlast-modified: Tue, 07 Jul 2026 00:12:52 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383160066\r\nx-proxy-source: r2\r\nx-proxy-cache: STALE\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55575,"size_decoded":20320,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51807)","md5":"03eb240ce58da76215c341ebada6bd56","sha1":"62885b2011dd3e83a9cddd020bce8cf8b8be7066","sha256":"822f9ad1997f27a8bf93c4a67e92db6a202906b58b8c6ec4317456498a892f8c","sha512":"61de423b2c08230f6079ee9aa9619ccbe3eade31b499fcef92c62ad413298480a607d72c6e110fa2bb2c3ee73dd71cc15dbf3413d4c58cd2032d03f1f8a48bcc","ssdeep":"768:FHwX1pGzPitm9nLSPxrJvgUAgmTJQJuvLqqEiZf0YPzZd9nQGjiZ4y5:FHepOqMSBJvgUAFTDuqEiZf7PNMj5","tlshash":"06432ab673d6247113f7583960beab08f1b5cb425d068490d46bec986cace864637efc","first_seen":"2026-07-07T00:13:37.70254Z","last_seen":"2026-07-07T02:57:15.718501Z","times_seen":15,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmrex.click/ecare/favicon.ico","fqdn":"etisalcmrex.click","domain":"etisalcmrex.click","tld":"click"},"ip":{"addr":"104.21.60.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcmrex.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:55:58.837Z","timestamp":1783392958837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmrex.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:24 GMT","end":"Sun, 27 Sep 2026 00:00:22 GMT"},"fingerprint":{"sha1":"5A:18:39:61:87:7A:0B:59:EA:AF:37:A7:3B:C1:B8:6E:05:AD:1B:36","sha256":"DE:52:35:8A:07:F2:E8:D1:E3:E4:77:3F:02:62:EE:40:8F:96:F3:7A:3E:02:00:FD:AE:A2:28:0F:E2:59:C3:53"}}},"request":{"raw":"GET /ecare/favicon.ico HTTP/1.1\r\nHost: etisalcmrex.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmrex.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=99f3faca-3dcb-4e2e-87b7-0ef5ae16fa54; myAppLocaleCookie=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxFFaYGsp%2FrupxnyZ63rSOPyjedh2mdJMaCRupJ5TDDBt7hdF9IR6POfcVxuBEPsXjdofK2D2MRYBxxqkApJ2cDuhpoxhuZE7ppF2U50kjtdPsyz6lCwm24Wpdr1VsCpyNmTVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:55:58 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: zstd\r\ncf-ray: a17392c8b8494c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nage: 9784\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:12:54 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383174712\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3814,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"592fd2ffcee8a3004fffca3c1ebed0e7","sha1":"392f72aaeabd0b9c7b5caa8048352353c51657bb","sha256":"7ba4d8507d71d10e6a2448217415334e1938a1d54f4e3a19a0d8d57743e9315e","sha512":"d0edac5dc83ad0a8934c25903e32a7714cd833f94aeb2bebf72c2e4a352f1d7c02f6478cfa5c4c6d483b19814bdb7d27c4453170419abcd772f86d6f8ceb960a","ssdeep":"192:zs+v/xPGJgsD8pBgggggggggggQTunRh:zsWp9+R","tlshash":"2b62d9c2998426a9f266bbf810a02d7f229b0d636d34d146bd20fa1bc3776cf0474e13","first_seen":"2024-04-30T16:39:53Z","last_seen":"2026-07-12T03:59:00.28523Z","times_seen":85,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmrex.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmrex.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}