{"report_id":"450fa198-159c-4072-9cd3-60989142e56e","version":0,"status":"done","tags":[],"date":"2026-07-07T02:57:09Z","url":{"schema":"http","addr":"etisalcmpez.click/","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"104.21.30.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/c/quick-pay","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"title":"Pay postpaid bill or recharge your prepaid plan online","dom":{"size":662919,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52318)","md5":"d77a54eb0efaca86b04ab0a5e4598004","sha1":"56951e7f747129e0811c4f21f8d3ed5072a2e534","sha256":"21391a799120b4c7bea5d5181bee5188ab1a0c915baccc6f27bb7583b58ace6b","sha512":"48b3c4f95b1652206a49919744fd52195f9a7d6bb4b6405560e7329d7614a6e1c30fe699d7f8d4e2f93297d599d1f9ea8ca35e9c1d706b524c2f2b0d1acdb27f","ssdeep":"3072:pHaRBJvBAFHPw9IctU90fqPw1AxX4D0OZC8hWXNWPRfC/TnGeJJ1S7qaS:p6LJZtU90fswDZC8hWXNWPRfETnBJCS","tlshash":"6ae4b5a2f281342e2d97c6949465ffbae73ee482d7050fa5f10367a807c92c319756ce","dom_hash":"domhash98ab2cbaa00c5f56166d2018eb6575dd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"etisalcmpez.click/","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"104.21.30.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T02:57:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zn5i17dlpdiofoxjq-etisalatvoc.siteintercept.qualtrics.com","ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-03-30","domain_rank":0,"first_seen":"2025-01-21T14:31:29.903984Z","last_seen":"2025-10-06T11:34:46.357546Z","alert_count":0,"request_count":1,"received_data":11501,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"etisalcmpez.click","ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-07T00:13:43.677436Z","last_seen":"2026-07-07T00:13:43.677436Z","alert_count":292,"request_count":73,"received_data":5598335,"sent_data":81087,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"siteintercept.qualtrics.com","ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-03-30","domain_rank":4574,"first_seen":"2012-05-22T04:24:46Z","last_seen":"2026-06-30T22:23:16.662291Z","alert_count":0,"request_count":3,"received_data":204598,"sent_data":1809,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/824.a9b798eca73a1c49.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0af501d7b539d6ee6e67763bbf50bc","sha1":"2880da0fe25139e3ac8f55dff394b12893ce8c4a","sha256":"c4e98d05a455399353714085817e1414b389792697a01706f597ffa55b6b6a6a","sha512":"3f213c07e5fb73984762f8a24b13708077561ddd7bff720d72582598fb421d50c2f55aa404049b1b36cef216a32e52fbca6aaddb537a362602ff3572bee1c0c3","ssdeep":"","tlshash":"2b41b818365bb5ed1f293e60cab5599c1f581c88a08e8ae8425edef44b4e40cf1d7778","size":2316,"data":"","first_seen":"2026-06-16T14:05:20.004588Z","last_seen":"2026-07-07T02:57:15.743644Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/c/quick-pay","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bacab872dbe3a0818505ae2abfdd0e7a","sha1":"446a0b9f0b53de3c549d9e62ebed1f2294d0c205","sha256":"2e7d7a729d7dfb365784cdcd418d7d7d08be441d164a3b62a3c4602c5a309683","sha512":"fe47805be459ebdad53a84891ad7364c75160f1c0aaa0d43138db9c07c6dd5b7da7b6f4050b4ce6f4556a1fa885d29826806bac77c214c7a12082a1c00261545","ssdeep":"","tlshash":"8341cc89f9b719309523506c0fff52817474110ba84ae98dbe4cd5c06f50d7626aaff9","size":1887,"data":"","first_seen":"2025-10-06T11:26:32.92681Z","last_seen":"2026-07-07T02:57:15.752461Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zn5i17dlpdiofoxjq-etisalatvoc.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_5i17DLpDiofOXJQ","fqdn":"zn5i17dlpdiofoxjq-etisalatvoc.siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8fedee713d5bf4d9514108d2e75f6eb","sha1":"08bbdf168684f3c1aecd52ca68e0cc7a5a4cce55","sha256":"f36110093149c7ad41513d8be5d490902bd2de1a3df4304a1ff1609ed82857b2","sha512":"1045eec11d9f14ff148245993ab51a9b57b12213a23885ac7e2d9aa556463049de96572f136661557a03f612009e678f1550030beb0c86e72a5687bcf20e055d","ssdeep":"192:pIU8NupNPxapeKOwrA0NZzDqTEFPsGli61CmSv0K1fG29bohLK/iZuFXupBy2dw6:/PJKDrAOzDqTEFPsGliiCmS8K1fG29bS","tlshash":"c822e8dfb684bc7e02d214e5c53f7145ba2e06bb290d94a2b60cd0a12a74bd68137fb4","size":10560,"data":"","first_seen":"2026-07-07T02:57:15.736053Z","last_seen":"2026-07-07T02:57:15.736053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/runtime.691f5f7227d03402.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4eff532dfcd3ad63fae90fbfd96f041","sha1":"4817ce6969e36510c4e6f8b1f2d49e572816dde6","sha256":"7d6e32c45eabbec8170a82a19b658a570a730c7bdc2290100beebbce6ac72941","sha512":"11915b78c106bee6350b2133ab1981023cea6f5f6d7b397af0348d785863a67c617ee86dce05f9a177d9661830d64bb5ed65a5fd1375a80386fd0484248d35fd","ssdeep":"","tlshash":"4c810bb63674fdb72a7554d0583dc842f6297036141bf8f1ab5bcea95064ec60c22ef1","size":4088,"data":"","first_seen":"2026-07-07T00:13:37.698307Z","last_seen":"2026-07-07T02:57:15.722092Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/polyfills.197dcadece2ff59a.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6ffde237c23a6a83796f6821f023889","sha1":"e6d52ee446baecacb12122e47fbcc6558abb79ac","sha256":"f513cae12324ef89d977f502573958d9043c011711590747b62c431e61c45fce","sha512":"c8df86d4a2e87e67089619e1feb97d71aac0cadf19cc79b3afbdb69be2bac2edd136964e06aed5ec518ff7c412bfb92e3f6b6c76051b7b38f47d9ff8a864840c","ssdeep":"768:xK8K6x159hBF4q7rhvM893a1UNlJ1T+xuQP/WOB9toPHQxCKArbvlkCdjGLzw7mv:xfrbHzeVtKTir","tlshash":"a8f2e7da73d1b07687f209b1853b804bf62b2565784c88d8f51c86fa3f3715991a2f2e","size":37050,"data":"","first_seen":"2026-06-12T06:47:47.856251Z","last_seen":"2026-07-07T02:57:15.739944Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/882.ad8e672ab8498e43.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c067b2553ff672573226a52489bcc5e0","sha1":"e34d42e92c9eac322970fc161f309a4eb7c43173","sha256":"e081a22394962cc6d9714a97237e8b32cf815327b3fa711038f29c10fb03795d","sha512":"8859c0ac6e6aa701a41c3e196d05ecd3d31a4b41977f35d70a924c38dbb22acd0173c65c0da52827cb4869cbae12e06d27736275ef1c031b808b478c753bb639","ssdeep":"384:xK8KrQzpAXA54fs/+bBmU6XOeKVSiHltLVmwm8TRmz3fuF7HeDLygGHA3f3oCwKu:xK8KrYpAQ54fs/+b9VSMtIntR7pR/Zpq","tlshash":"c19231cbf2865dfe74c8073a910985c42b2cb8d37c19457cb7461eb3a1045a8bd5aafe","size":19490,"data":"","first_seen":"2026-06-16T14:05:20.049256Z","last_seen":"2026-07-07T02:57:15.746723Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/668.e43d0cd77bf31d0f.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"941d6539f61fe9c68d53649f639b2fc6","sha1":"6b94c3a2ee766e0ad8b936e49f2c669105434396","sha256":"78a4df96773d7088b76879b0a859fe6a6f3c114b3c69802ed97e87fe1dfa56d0","sha512":"9c12acdfdd50ff5681a114029df5222e799a1d67685b6a758971f0a4a71a15c45a56a872285e65c6f15c840e07a3ef39ea82028d61a667e07a0475666be23dc6","ssdeep":"768:xK8KBN0fe1y64YuTkyEIyPC6EEdaqywnGpcag17wK+1POAA5uZHn+nVFHrZek:xf0XKN/wFX","tlshash":"4b23c600bad4503a56661075f7bb4e070a1ce961a815865df1cc9fe837add8e33abb3c","size":45974,"data":"","first_seen":"2026-06-16T14:05:20.063336Z","last_seen":"2026-07-07T02:57:15.747228Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/881.721410485d67c340a412.chunk.js?Q_CLIENTVERSION=2.52.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=etisalcmpez.click","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0602ebf29632a79221579b7d5388ad26","sha1":"d7a2461f8b15c9a6889bca2078ed1ffe1b14c2f0","sha256":"078373a48d312cd36db239bcf4dabb29f55160da52c179d545d7ff5a531d54fe","sha512":"93c3f0b81b560c71c638d0683bb388042011f7c0556267ff2680712d40b397aa87807218cc3c3422ea9fa68962b749ad51f60372280295a0496082c47831bc5d","ssdeep":"768:4TAsoLjBdP173M1FBYw0jYcC7zNjIHFUlIvwH7UuwxC96X5SeMRm6v7qECjNfroN:4JZUP0Gnjgk3eNLNbHB9Sw","tlshash":"603319a221e264a807e01cd480970fa6767815722c4a15bdf77c8dd63870adbf0bbe7d","size":53053,"data":"","first_seen":"2026-07-03T09:18:07.761374Z","last_seen":"2026-07-08T07:02:35.786293Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fded9d03c895a879eb40441b36ff022c","sha1":"3b1bdca201a2d619a5dfba5fa396760d1cd724ef","sha256":"b662bc644cf2d81f8f9eecc3302bf177bcfa719f980ef813185afc0044129e25","sha512":"8c4797d4e3deb02a1b10eaf8b42b7ef13ce4f091d0ab22a6e1a215b12e47e89b665ad21c929f790e441b1f7c96254adecb3154b40ba66e53ba57567ba42add81","ssdeep":"96:DqaRHuyYh3IlbF7WO+/73M6gJ0nvpkObShTz86hTBE98fNlsVSTaibY4:DqaROy03I3OYohEu6g8ldU4","tlshash":"a9c14437560fa4b2193c3cbfc2a97d8c1589f342599356c0f49e5c98d85fb3b1a0a2e9","size":6150,"data":"","first_seen":"2026-06-16T14:05:20.094755Z","last_seen":"2026-07-07T02:57:15.753002Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e02ac2e66c1f22baca52ec2ef7c9525","sha1":"3e57169d0b3659ca1f4e4da37053d1a83f93c1ad","sha256":"2dd392951a0311ab8b0c4f876761b8b4705e225176c6d3aff366e970bea5a377","sha512":"39bd7c918592dedf837ca658e8d251e17ab7e553d33e0ad327f9ee052cd5d240168b7134047980d913ad7616e04a9158155704612da467a0fb581ce4b6fbd63f","ssdeep":"","tlshash":"06e061b5b39db57602e19534455f3b0490772bc30d410945d63a5bc0fc74d06c8719d9","size":396,"data":"","first_seen":"2026-06-12T06:47:47.894672Z","last_seen":"2026-07-07T02:57:15.753502Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47356c220e3125762a2ad323ca3c63d7","sha1":"e21c1598c247375e14aa84438eaa63c3374224a6","sha256":"cc23e286ae2994fbce2fa7f1cf8d1910c86f0561ae8670f5fb67167869b2da1e","sha512":"444df29142fb602cae922483bc33ca7c1e84d56b0f0138d078aef024d75ae1110dc5a400e70ba4603019d9df5e4a218761478ac4a05b3b40c92f77b9b3c76b82","ssdeep":"","tlshash":"ad11dcbb7660b52a105a8962344d23004973c1963b10d0924d39af80ae188494a76baf","size":874,"data":"","first_seen":"2026-06-16T14:05:20.097969Z","last_seen":"2026-07-07T02:57:15.75401Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90ca2211fc52d7e4617faea35fae7f39","sha1":"84dd1662be2653661d88f2d3fca1b8fe1707a506","sha256":"74facf3a1eda221ec765a7276682475cbf54c4356fb894e396d7837c7cf699d1","sha512":"e890bedf717b4680fa98344da64d82ce5ed61e211d3f73aef1fd01f24bb056867438b2a4ace5c6f22d0d060c3fde2f20cd1671bf8d06ee305f1be797ca74c97c","ssdeep":"192:ioUPj0fFZP9p2tqvpTQjH6nS/9+whwH9ADtBxhJwBTflqzD3fdnrJtdvBq2pySnc:iom4FZPj2t2pm6nQ+whweDxhJwBTIzDE","tlshash":"b132d8ea73c339b113f22524286fae01b57e4ad26c4d8062d56be9812c7cd498577efc","size":11560,"data":"","first_seen":"2026-06-24T08:31:30.81879Z","last_seen":"2026-07-07T02:57:15.754533Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"332aac0d16f0e6d9041a702e498a0f7c","sha1":"32aef9aeb4d915fc3f75691e5eeb9a22047d7724","sha256":"1e49c4810c2ec1018f7bf3343b001bb874c1ced0085deacf6b50f8078d598a72","sha512":"d9f37847cc3b2b3791564662be1a73b5f7b2c9dbc6ca025efd01a4a2c9423c59ced5a6cafa0a315d9f32239d64b683fd9ee8611c7755b9930f074c1035e4790f","ssdeep":"","tlshash":"5f316576b27a601843e3553633fec60871ba9e841b0e1181487b98a19d7cc849936ff8","size":1563,"data":"","first_seen":"2026-06-12T06:47:47.896525Z","last_seen":"2026-07-07T02:57:15.755046Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b713cf110179fcaac7000366d30e760b","sha1":"9624326824de27602b583b695675ac918871ba98","sha256":"470417350a6df9365880a05803482ab050e19a9673e528b65cacf203f0ae3a5e","sha512":"1ae2bc8966c5db277e52efd41bec9931cf02df79c5eb68874164cc13d6c2ae763797769c1ab30852e714c9f3586dca402a4dd5191c2c43959821b442417ef616","ssdeep":"384:s+/ObnJQ0wug4Pu7MqD+9l5nmXn2z3/Zc3iL91kY5da0zZrHMG9xVb:PmTJQJuvLqqEiZf0YPzZd9z","tlshash":"b8c209b073e62175a3eb883420bedb45f174ce059d058590c85bec68bcacd968677ebc","size":27074,"data":"","first_seen":"2026-06-24T08:31:30.821647Z","last_seen":"2026-07-07T02:57:15.755525Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a5a4cfa1bd64153449f813f71aebbef","sha1":"dc1340795710f9140d39debc06e9c49f9afa693a","sha256":"eef0b34706a4e0b12f75e81afa73bbbb9bb2b14fea49565d86e0c15653b8d79a","sha512":"6d92bfe56e388c6b30b3cc95ad976ae3628d6606edbda45aca000f6f6112063dcdc7717c3ebaa45909473f2b248918048192471f3e563728c305009aaf9adc6d","ssdeep":"","tlshash":"5d41a676b2e12e7401e70435b3af5f48f0f68a82c50b0951482dff6a1968c959e3dbe8","size":1921,"data":"","first_seen":"2026-06-24T08:31:30.82297Z","last_seen":"2026-07-07T02:57:15.756024Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cff65d9bb1cc18c67e91d5ef9d2bc1c","sha1":"832dd4610d31e536d1894e0566b58620ee55427e","sha256":"bbc77a536e02295a62b69f9d97f570f61f01b3898c6a7f174d26e4f56621af92","sha512":"53cd0fdb660a916411233d5ddc90ae4f628c2875a84509db5fe5cee9d8283cffda96942207710e54cab83d282e467fee29d069b481cdfb5e9a78029a545bf226","ssdeep":"","tlshash":"94e0683a7394093412d3ad76e07ddb8964fb2da29d43c092163d6c048659ed18936ee8","size":409,"data":"","first_seen":"2026-06-12T06:47:47.898358Z","last_seen":"2026-07-07T02:57:15.756501Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ea4c89e05550c9015ae4ea660bc6bac","sha1":"e6726e10c2c3cc76a932956bb4462e2e90d7779c","sha256":"5a89045cc6fe067289b04f30e18e659494ddbc7d2a6d77a39af7a564bb6c1ddf","sha512":"2e8c36f77fcca90713704872f2581a3de3142d0a02b64df3f7008b02c48900fda02bae20f1d53bda4a0c4c86b7fe99ad2038833a4ad6bfdae83040ca98695fa5","ssdeep":"","tlshash":"8601bd5532d3f33d879a8c2d607e9684f1b62ea17d0d80d0952ad6443968e15c339fee","size":799,"data":"","first_seen":"2026-06-12T06:47:47.899171Z","last_seen":"2026-07-07T02:57:15.756989Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c34c6d8df1e0e1a6a4a218ac6b40575","sha1":"4daa004576812c52db3edd10fcd38ac8d7708cb1","sha256":"47bc5f2ebd255dd5c1e048d6ddf3cd099495e2c57b92b1ca77a48ab1af037415","sha512":"5fca61e816dab37b5392f14c0e2f1021944ae14d2df713e8cd67f75534cd075f6cf3eb810778ecb9cd3418b47ebe4ff0dcfb4b8e079531c4d614a1d697be0e3e","ssdeep":"","tlshash":"71a002ea03030c0800e0770c1f8efe44b102122190f0d0313e8a712efb30c0bba08186","size":74,"data":"","first_seen":"2026-06-12T06:47:47.899986Z","last_seen":"2026-07-07T02:57:15.757486Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a03d97b1fb135e029cb6218ae4f95663","sha1":"04ce4d322ae40f099c3db0c0c853e56df8c2e01a","sha256":"ed566bbeaade8bdf0e86e5cdb7a17dd51f3633a97b5f93f90cdd8d56d2db9f68","sha512":"999c45d7e7528c3e8a84db151ab6aa0f196872b3ce70f460be4f21b585e498cd60f0d29cfccff995b9067274a91ba25b19dd4e9ddee828063333a6303d84b104","ssdeep":"12288:zH2zge+8xVXgRizvohR/Rkm55Ny+wVezR8CaO:0gOvgR8voym55Ny+wVFCaO","tlshash":"c3c5b5d1f361351d2a0bc701987bfeec452dbcc2c55b8975bb2a17d443882853daa3ab","size":2729799,"data":"","first_seen":"2026-07-07T00:13:37.740229Z","last_seen":"2026-07-07T02:57:15.758373Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/515.f63eeaa81966b9bf.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f887620d659e5451f3c770d37d1d29c","sha1":"8c12da1be5fb4deccf33a0546ed8ea2b3ec0bcb7","sha256":"c50cd8cfb250df7c123fdbb12eec993c31e48cd02e32c6c816b38f1686190f0f","sha512":"0cabbe0cae13a741332d40651b565e9b7599bc05bf72826c49d3541abf77bda6b689c0a014fd61528df9d0b9bb895f773eb3924cfaba7cbc8268428cc84a70b3","ssdeep":"192:xK8KIVcpJPShcM59rAkFlwLGSTPCQJatDKr5ePVZe2LIzfRErWRTawlb:xK8KIYKrWaHnkduAPh","tlshash":"a602b9d73484203b4a6d61d1fd7205486231610d9aaa446cf1dc9e8a3b8dd593fcfafb","size":8648,"data":"","first_seen":"2026-06-16T14:05:19.99724Z","last_seen":"2026-07-07T02:57:15.740451Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/smart-banner/new-smart-app-banner.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0ec3630e473d46ca2e3b26cf4751eaa","sha1":"ddd543d3cc6b7daee04126eef170bf131f37b3d0","sha256":"5560d4d2a6f3038fbae6041b6271a611718a772b55665141c6a69f3ac8421c95","sha512":"f4d0a04e62a5a5eef946dbd90594fdaa90ab9fc0e72197ccec184f6e45b45e5f7e54967286701f0487a495b7a3f83c85e8e6524f403a52e2e9a2ecddc0909e67","ssdeep":"96:RxMPNH4Hpy4+KXSPNj6UtdF9rmcbh/qA+yui0Pay0iNtR4SD4zLwzK:RK1kpy9KiNjfacbh6i0PapiNbLD8LEK","tlshash":"74022e496e511231457357aeafa36a1cf7a26d63e202c1263bec63505fb6805c2b2fcd","size":9014,"data":"","first_seen":"2025-11-17T21:22:01.731386Z","last_seen":"2026-07-07T02:57:15.747649Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/941.26756aa0d9c4208a080a.chunk.js?Q_CLIENTVERSION=2.52.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=etisalcmpez.click","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a1f3d3e89851c205c272269dbc95c26","sha1":"ec394a7e8f1ecb680ba48759f3166639a7a0e807","sha256":"a87c6295091e592fa348b466a1b167362458bf22a3b0fa8b211a350a7a8ac86d","sha512":"ba485dcea8a39bff4190d75e1b8bebf39a092d1168d4b5a48a39bfeed7c045863a7330dd70e382b7aed8fa6da6538d6e68d05fea10e73a36c2f38a45a171e914","ssdeep":"1536:4E/FNANA5AqfCO/cacXKq+ze1aGdhtxGJmnr0BP24D3cMg42nhvbmxt4:4E/hfCO0vXKlzegGbtxGJDDkC4","tlshash":"b9e309ceb2c6f02943a36575d13f6206f2372668384d40a4e50ad1d5b8ba85fd327bf9","size":145441,"data":"","first_seen":"2026-07-03T09:18:07.765859Z","last_seen":"2026-07-08T07:02:35.849726Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/scripts.d9574d0e6cd3bf5c.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c133ecc32ea46e7bfb19fe41727baead","sha1":"f14a9582c633ab6a27882f98b483ee3733bc809b","sha256":"28968ccce7405788636552434a1a47527722b8d7078720f23c9fcd81e95ab630","sha512":"c383113f7c1295499d445b4b41f07e666eae3e69489db277617fe2f78cf6d15b25d508eb08a2f3310838d0e8c3774be1765e8150ec1cc4b4ef63f9b13d2b7085","ssdeep":"1536:o8/9b4Q+R1P2ilvoXkilrW8rVnvidWw+qmZYCFdT/FQyDid:JrVtqWwwTf/FQyw","tlshash":"ea73d75a3244b47309df85b78037420bf2265da8b14a812cb56cadde2a7dc863277f7d","size":79889,"data":"","first_seen":"2026-06-12T06:47:47.889237Z","last_seen":"2026-07-07T02:57:15.733081Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/vendor.62ac21f3ea5ee07c.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a275ce00ef34d4a917e63b76e9515a6","sha1":"c8851e4ba0666dd3c85e7e9acb84243f8d8a77e7","sha256":"a69f24d1cc2bb0ff7a07043a2c24f556ca0e34745529adc1416b1e0e75f6efa6","sha512":"c42a22ea8b14124ffceb31329f3b17bb53c364b1859ff6c1d5c83df5b2c128d3752f5aa20ffcb2b56cca7a2ff9e9feeb9a4d192bb7a565c4da8c00017b511f82","ssdeep":"49152:ezaPf1e6leBslvebOB9SOQmS1XnYsSj4Nofm0JsHTrxO7wq4dHX3DjTXWoq2ksqv:OulKRqv","tlshash":"40853bd532c2702243e240f69077054bf2696849750a819cf5accdee6faed4d62bbb7c","size":1720897,"data":"","first_seen":"2026-06-12T06:47:47.902644Z","last_seen":"2026-07-07T02:57:15.759069Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/735.cc1bcd4cf7aa7ccb.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3758711c432d726fc43280b1604c109","sha1":"605acc4c37f6bc3e645a943fb4674a3539f44c82","sha256":"dc078c31c761e0dc034952b6ef0048406989c786f37b121d1dc975944f1de664","sha512":"d1c112ab50dd5763af8c19eba9b8871f16a160fb040c281dd31de0df303f404e52eaa739d0b84014c443ed3f92c8a949b8add02890b91fd506e59dbd3b1279c8","ssdeep":"768:xK8KILrn4srZZJcgoCKfK3eFK3eVDovY24Ga9/nufvzxXI:xfDHn4s9ZegoCoK3eFK3eVDovY24Ga9N","tlshash":"f2c2405f7691b86516c983bc187b1e08e335998e1f2c000db2189ed6dfa5c466aaf738","size":27888,"data":"","first_seen":"2026-06-16T14:05:19.98475Z","last_seen":"2026-07-07T02:57:15.729557Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/839.8532b49a16632ca4.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8c4ed980801a7211ef6383402be7d44","sha1":"bcd3405f248628fd63a112c3a46419b3b5b184d9","sha256":"5dabd08bdf275f531b16a5f4c2937763673349001908efd54544950ec818ecf6","sha512":"2be999c9cae38fbbd4de7b10f6c1aa33555441be1db897b4dde6d513dec9ce10f1483bea6ab9f85ec0bcf7feaf4d76316d9c47606e624f909c3abee7793a385a","ssdeep":"1536:xfjtGx0dTLxSmUc7vuTZK5uWQYm2n712Nq3GwTWYCHFcjCAnmsYbgFLgcMxkNfR1:1tGx0dTLxSmUc7vuTZK5uWQYm2n712NY","tlshash":"bb33fa21be705079d27960666bea4a4b073cd4a15a024a9cf2dc4fec37c8dd9671b3bc","size":50894,"data":"","first_seen":"2026-06-16T14:05:20.060401Z","last_seen":"2026-07-07T02:57:15.745621Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-17T14:38:23.474862Z","times_seen":334537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"STOP","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":1121872},{"level":"log","text":"This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a feature or \"hack\" someone's account, it is a scam and will give them access to your e\u0026 account., if you are interested to join us; please visit https://careers.etisalat.ae/","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":1121923},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: GTM Reverting to the default value: GTM-T57KNFL","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MAP_KEY Reverting to the default value: AIzaSyDGHGq1W76Xca8Q2YbMmlAu6LDpD3-UOL8","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: CMS_HOST Reverting to the default value: ","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: ADOBE_SCRIPT Reverting to the default value: https://assets.adobedtm.com/0d04dd99f59e/07c17e71a414/launch-a7928db5324a.min.js","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_quickPayDisable Reverting to the default value: false","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isMleEnabled Reverting to the default value: false","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isResponsiveDesktopEnabled Reverting to the default value: true","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isApplePaySupported Reverting to the default value: true","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isSearchEnabled Reverting to the default value: false","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isAdobeAnalyticsEnabled Reverting to the default value: false","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isGoogleAnalyticsEnabled Reverting to the default value: false","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isAiChatWidgetEnabled Reverting to the default value: false","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isNeedHelpChatWidgetEnabled Reverting to the default value: false","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isAutopayDeltasEnabled Reverting to the default value: false","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isSystemFeedbackEnabled Reverting to the default value: true","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_ESHOP_isMFECartCheckoutEnabled Reverting to the default value: true","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: EFR_TOKEN Reverting to the default value: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJldGlzYWxhdC5zdGdAc3Ntcy5hZSIsImp0aSI6Ijg5MzEwMmY1LTZlMWQtNDNlZC1hNTAwLTY4ZjA5N2E3MDljZiIsImlzcyI6InJoc2F1dGhzZXJ2ZXIiLCJhdWQiOiJyaHMiLCJpZCI6IjQwMGM2NTRlLTZmZjUtNDVmYS1hMzk0LTE2ZDYzMGQ3YmViZiIsImN1c3RvbWVySWQiOiI1MDEiLCJjdXN0b21lck5hbWUiOiJFVElTQUxBVF9TU01TX1NURyIsIm5iZiI6MTY4Mzc5MjIyNCwiZXhwIjoxNjgzODc4NjIzLCJpYXQiOjE2ODM3OTIyMjR9.vFr2EvAoFmyyHhlQ3VaPAbtNpPvIgr5YnSxD7o6NPyE","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MAGENTO_STOREFRONT_CONFIGURATIONS Reverting to the default value: map[actor:server1.conn0.watcher16.process8//obj43 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[environment:map[configurable:true enumerable:true value:staging writable:true] environmentId:map[configurable:true enumerable:true value:0395851a-203a-4580-b349-937b7d767b57 writable:true] instanceId:map[configurable:true enumerable:true value:bbbbbb writable:true] storeCode:map[configurable:true enumerable:true value:base_store writable:true] storeId:map[configurable:true enumerable:true value:111111 writable:true] storeUrl:map[configurable:true enumerable:true value: writable:true] storeViewCode:map[configurable:true enumerable:true value:en writable:true] storeViewId:map[configurable:true enumerable:true value:222222 writable:true] websiteCode:map[configurable:true enumerable:true value:base writable:true] websiteId:map[configurable:true enumerable:true value:333333 writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293}]},"http":[{"url":{"schema":"https","addr":"etisalcmpez.click/graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=false;includefooterbottomsection=true","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.977Z","timestamp":1783393003977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=false;includefooterbottomsection=true HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2309769576.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; Path=/\nTSe663c25c027=084df50742ab20008898d5fe05ed3bae5c429085672b48c9edaf05376e7d1029e45ec5ca267286570830ddfcb7113000801293c1a2325253bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; Path=/\r\nx-cached-at: 1783393004123\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2wdOPGptZylIqN%2Bh1P1AEz0Q9LHNN6MXlcaSTKSKj%2B1%2FNEhGfFVtXjikLQXoLfNDtPau%2FO4VK%2F7n323G1LofKm%2FCfS8WJBdoOuE14PK0c%2BnRNqZCTpVumUCjLEaVI8a%2FloEgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e2dbcab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1474,"size_decoded":1576,"mime_type":"application/json","magic":"JSON text data","md5":"ad53fd264f2640c7bb0c9c387f120d53","sha1":"c07ad2ecb51d2f8919d088b043c49f8a3a9d4766","sha256":"889dedee4e15d59fa5411517af2a4eee8f51bfb3234e1a122ed3136878a0a3a3","sha512":"2fbbbdbe631b611cd27adf38a62f352a7d3083bdb5793095bf34ed82220fd1e5fa1ba2419dbf470f56851a9641d0f46c19f47e2e72c19371d234795fd00cfd9d","ssdeep":"","tlshash":"91316f783b632d52731afbb3e9e37e24e8b8840244265c21b8f467b505d779884a06f9","first_seen":"2026-06-12T06:47:47.87788Z","last_seen":"2026-07-07T02:57:15.715628Z","times_seen":27,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/eand.jpg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.338Z","timestamp":1783393004338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/eand.jpg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004500\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0bcZEuoxpdWG4SWvgNALxyPGLh7aM8Z8vRK4%2BI1AE8aiSgsZe0ZROTNP%2FvlePZKyKLVxLiOyOLgBdbGHmlBbmVB0hhR15LLPBNLLeQSxwtCONVWD0TBVQtDib1wJTc4HcRaZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17393e52c04b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87326,"size_decoded":87974,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"b9eb903c810260396f5354ab8c8fe7ee","sha1":"f4cc76318d790a0ef3011cc04a11593d1fb1f311","sha256":"88279dd6bfbb917b7b96fc404e5744524d1c2f574076c047574349725d5fb2b0","sha512":"22ff0e1c5c60dd9d6404a2bbf4868a2a19d841dd0b9b16a2a3753f2418066aea35132de3990f60fdf6a1fdbde5e7fc0f3edb52e866bf0618f1317c403fb67701","ssdeep":"1536:/abrGdxUwfNoVB6NwZp+btf1u7VWKrV8kyTuC/d4v8A0aWURxU9V3eF9mx9mytyN:/erG4wFoOdbtf1u7dty6C1g8A01r3Hxo","tlshash":"d083f130adf2645df7a4857428f4fd82dd60a3a3662f1979bbbc7c414b814172baf0a1","first_seen":"2025-07-14T00:26:18.749947Z","last_seen":"2026-07-07T02:57:15.716237Z","times_seen":31,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/samsung-pay-dualtone-v2.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.378Z","timestamp":1783393004378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/samsung-pay-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004539\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=47OBhjShmySBycWDZNtt7o2f9nY7ymzs4e970sc4q6ojOqi0cFI5myhFhiF%2FAxLfrzT%2Bi9jHm6zSxwlj3hPiJQHTy7s7Az4uW0nOC6ACm4QkiDKc3Cvy4yneXDx1DZz3CAUNug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e56c10b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5173,"size_decoded":2859,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b11d88efc9c171b151507c7ae1ac0ddc","sha1":"c2b8df63a56f136ddec6edc52692f2277c3eb749","sha256":"643a9793d3684183495edbe37e9f86c4c11df9263a84c9c3ecf8fe576360f710","sha512":"6f7443d28c8fefa710fbb48873af5aa54d07f319122d0639344fed5ea45dc7475727f50186b80710ecd38c264501cd6090ef32cf80251ea99d7a32f23586b7c3","ssdeep":"96:if/lUsa2Q2zFxFeSCd3bQlT4B7PIECgBzPsI383OreazxHK:if/lUsXH8SClqqHDNnzQ","tlshash":"60b17379b3c4b2d4b441eb908627a435a37b38f9b73bce0e07583b46694606d4c9ecc5","first_seen":"2024-08-19T13:38:40.809748Z","last_seen":"2026-07-07T02:57:15.716755Z","times_seen":51,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/__click","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.893Z","timestamp":1783393003893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 88\r\nOrigin: https://etisalcmpez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"kind\":\"page\",\"path\":\"/ecare/c/quick-pay\",\"vid\":\"c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:56:43 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HNIp64VStldqHiSjxYqS2uOcBIi3FvrsuVT2dIhNBPbEZKaF3%2B1l9BdcLt9jYfJJiACQQkTemsIx%2B8oDGM3Snf%2ByUmwcgEAYd6QfzbhH%2F1zUXBBNgB83OvEzVMybCPj6YQFARg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17393e25bb9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1894,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=false;includemegamenu=true","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.937Z","timestamp":1783393003937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=false;includemegamenu=true HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2309769576.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; Path=/\nTSe663c25c027=084df50742ab2000ddfdf87944b4b06ac93e01bb58124ad56a7611b6aaea9931957893887a603953084bffa4fe113000d1c58d05a1d6fa12bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; Path=/\r\nx-cached-at: 1783393004087\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lKyXBbk6TdjTv3zCmZNBs%2BHqjUBYieF62CjXaxfbQzS4d16YXLI5ha7mxnvDE4LKOvmNkof%2B4fbgAy8clujCd8xCYL3qlm43RWP1NanMVoiqC%2BjAcl7n9z4lvNbzD%2FriDU%2FtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e29bbfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48623,"size_decoded":6382,"mime_type":"application/json","magic":"JSON text data","md5":"1e45ea9ecbdd6ab85408f4668c2a5a7d","sha1":"4c68af3ce5469bd68048c1390b7e5429a2b6e8ba","sha256":"344d082bbc49e5ef7c8cd5fce03d40eef84f9609f81faa8810eb59442c5abec6","sha512":"60281e280224924354e464abd6d14451090ae048e1c741bb7c6d7edf86707b7ebf1afaa914d502c386ef6ac342d83ee9a42f789e99a2045a50187510a05bdded","ssdeep":"384:Jzd6nlllldk/NMEExRzoPJcw48USrg+RRhz/JLq8JgBBnY5EEifjn1:5dellllbEExR0RRhzhyrV","tlshash":"6e238a64366a28a3a30f6a71bd973f51997e51434290df34acf1eb6d8df23e041e2264","first_seen":"2026-07-07T00:13:37.703615Z","last_seen":"2026-07-07T02:57:15.717905Z","times_seen":17,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/quick-pay/?locale=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T02:56:31.591Z","timestamp":1783392991591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/quick-pay/?locale=en HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0uh%2BIaQ2RkEOQojjW39waVNdjW%2FKYAHUH3j3vZ2mzHM04kG6g5XDThb8SOzeCO1Qz05%2BpPURp7bh3aCUOITVIihV5UbkRRSz%2BrWZZDDkZh5Ji8WJOGB6jlbmPgs18lxgkwOFxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393957f51b28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i\r\nage: 198\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nlast-modified: Tue, 07 Jul 2026 02:53:13 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392785641\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55575,"size_decoded":20188,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51807)","md5":"03eb240ce58da76215c341ebada6bd56","sha1":"62885b2011dd3e83a9cddd020bce8cf8b8be7066","sha256":"822f9ad1997f27a8bf93c4a67e92db6a202906b58b8c6ec4317456498a892f8c","sha512":"61de423b2c08230f6079ee9aa9619ccbe3eade31b499fcef92c62ad413298480a607d72c6e110fa2bb2c3ee73dd71cc15dbf3413d4c58cd2032d03f1f8a48bcc","ssdeep":"768:FHwX1pGzPitm9nLSPxrJvgUAgmTJQJuvLqqEiZf0YPzZd9nQGjiZ4y5:FHepOqMSBJvgUAFTDuqEiZf7PNMj5","tlshash":"06432ab673d6247113f7583960beab08f1b5cb425d068490d46bec986cace864637efc","first_seen":"2026-07-07T00:13:37.70254Z","last_seen":"2026-07-07T02:57:15.718501Z","times_seen":15,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/assets/i18n/en.json","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.435Z","timestamp":1783393003435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/assets/i18n/en.json HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWSDSu8kSUsSm%2FGwgkOYCRLhywfFBX%2F2qcKWgXPJkANi4JrMMVdlhXxrMpcZj%2BYVCd1k%2FzXqt41ra6WPoxygUYPqf5%2Fn01JHCdgzS5uvp%2BXEJVfV%2FSHoBsaYlSaBc7QVw7a9eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393df7b93b28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 208\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nlast-modified: Tue, 07 Jul 2026 02:53:15 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392783912\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84562,"size_decoded":19859,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b50c6177e88337ec73c512e9263d1c64","sha1":"0f7d6c63ade4e73f01138395d0f129d3ee61cbd0","sha256":"8f2e28761e1f18f5e9c7c3d24254c9f7fb6da65f193f9615058ddda4f5d4a6d0","sha512":"5183f432ff94300790963197878fb2937dfe19649fccad2fb4c8b7308b1fe85fe4f32d4f0494c79944918419d8db98224ba257e0765d63d1a61561e7daf9c33b","ssdeep":"1536:gsoMGc8AVLOtfxz9suWeyV4Opm9l5ji9j7tNGk:mc8AaxzLyV4Opmz5jiltNGk","tlshash":"2983c70ef68411b70ad10b5dbc4faad3ba1d50b903112569a89d402cd3faf7a277f68d","first_seen":"2026-06-12T06:47:47.879729Z","last_seen":"2026-07-07T02:57:15.719076Z","times_seen":27,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/assets/fonts/ar/ge_ss_two_medium.ttf","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.158Z","timestamp":1783393004158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/assets/fonts/ar/ge_ss_two_medium.ttf HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab200084bf49ca889213a247ef2a85afcf0ea91c2ea67a667884d473a4e32a556c2eda08badf1f1111300052ac345f1142f44abf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=3,i=?0\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004301\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifEWnZ6Z6qQpjS6CyKGrtvzzszl2388zzgDDLW%2F6r9w267aPK1zot7pKIdnJpM9hwiHZ2RqaWMlXYQXuiljAM5YMI8%2FDInZAf2UJQi9iHFF5QwEzMEJ%2Fc3866yCQ4q3eYOhbLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e3fbddb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63888,"size_decoded":26128,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 17 names, Macintosh, type 1 string, GE SS Two MediumRegularGE SS Two Medium MediumVersion 1.200;PS 001.002;hotconv 1.0.38GESSTwoMedi","md5":"eae5755acee59644deada63a2c3ba677","sha1":"7a260875690459c8520ad2a71019bbc8aaceaf6c","sha256":"c438a2129c6a0a655f5775ee3ecff515a7cf7743c02705ef8920e5ae59c3bb4c","sha512":"44578a25a592e2d1ff0f0b1678c4e2c9accbf1c4f0b2a3a1ed2c668cf5dc5e4592e5e012bb5d8ff03027fcec5ca97ae6afdaf0d5aba0c63af3a2426a4f5b54b8","ssdeep":"1536:3v/3AYBGMLLim/UwimYrRKz1T4e8tIofaze/oKvQPNVlLg6xGeCkg:f/1HLHpim/zue8tIAaze/TaLg6xGeCkg","tlshash":"e453e8d7e9f70d13eaa98f78d9edd2bb0580f8029b627404bc508941d3772e17696e38","first_seen":"2025-11-17T21:22:01.782348Z","last_seen":"2026-07-07T02:57:15.719629Z","times_seen":30,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/__click","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.187Z","timestamp":1783393004187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 106\r\nOrigin: https://etisalcmpez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"{\"kind\":\"render\",\"ok\":1,\"why\":\"\",\"path\":\"/ecare/c/quick-pay\",\"vid\":\"c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IW2lXOCn5%2BLGqBdDXv6l0jpCsX8oWHYijH2lsBKyJ6W1MAEe2NnXjr1v%2FXu8Bz3dMhg3lDG%2BofWonwX5zX89gNqO8XLZ8KZN5418QIIIez%2FrL%2Blno0OdfGH5ZQl8H8W5vSxcdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17393e42bdeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1916,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/actions-open-link.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.210Z","timestamp":1783393004210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/actions-open-link.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004356\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HImy8hRwhXuO%2BUQaHAz9y3SpYSrVPygZgpib86STD9CduRbHJElP3zO8fkXIe%2FHbuCDA2ifBIXUMKpviIn8lfkrmUbcCY8fbsMcv2DT0C7DNETP%2FKiN9hj7LqV7%2BykobcCGfNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e45be6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440,"size_decoded":896,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e63f2ced9c5a0b9654e96d539ecd9229","sha1":"3964262c8818ae760320f512a49c9dc3e8aa7b91","sha256":"7e62f9d8cf2b282f07dd200c3b1449b6f1a1346388dc25f143157feef1ae1c42","sha512":"1bf3f68aa53a303e398750144ed9f90b4e63af23a523d80bb766a247ad1607f2482053688581509477a2c2b82f68f64f811177d3de75be736210c70c85a17854","ssdeep":"","tlshash":"a5f0e57d434c5d2cf952c634e76c3231b12a129321486188d87a85b062416acfc3fad4","first_seen":"2025-06-22T04:03:22.719513Z","last_seen":"2026-07-07T02:57:15.720165Z","times_seen":47,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/master-card-dualtone.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.221Z","timestamp":1783393004221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/master-card-dualtone.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004386\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n80OcjrjZa3b0owlue72Nkfoub4SMXMnHXvthq99B57X00aM1X3yn6KV2s%2F59z3nsIAl3NY40lqHI%2BMKCmAZtcMNrQL1ub40jT%2FEvw39GDnYtbw89Cbk60%2FOYCHC9FIBON7Yeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e46bf0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1976,"size_decoded":1296,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"383d03288df6951e039f2d64cb85b250","sha1":"680caaa8ae91ff29b8a2f7931fdffa3705fd3dff","sha256":"e75fcefabe57425a97c4b3965d504a5b2285484d3de8a3f58a49eac256770d7e","sha512":"6c87784d297fac8a493c60935cb6861112d8f10e80f674eb51f41e6ab8cda23098b4c3aefb059d8ba16b3cc8c206fce8ff933c71aa189673bb2ac0aae6ddfedd","ssdeep":"","tlshash":"3a412ad61318491ff4018fbcea5e55b9ed0f21abb38765c9c52a6a9c1903404db06afe","first_seen":"2026-06-12T06:47:47.874436Z","last_seen":"2026-07-07T02:57:15.720677Z","times_seen":27,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_5i17DLpDiofOXJQ\u0026Q_CLIENTVERSION=2.52.0\u0026Q_CLIENTTYPE=web","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.517Z","timestamp":1783393004517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 04 Dec 2025 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:37:A9:16:10:8D:0D:87:5B:1E:EC:69:C0:9D:1C:CE:5C:2A:67:91","sha256":"7D:48:65:F2:AE:D8:08:02:F7:C8:47:36:A2:AD:69:20:84:6D:85:0E:A2:02:90:E1:56:72:4A:90:6C:D5:40:4A"}}},"request":{"raw":"POST /WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_5i17DLpDiofOXJQ\u0026Q_CLIENTVERSION=2.52.0\u0026Q_CLIENTTYPE=web HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 141\r\nOrigin: https://etisalcmpez.click\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":141,"data":"Q_LOC=https%3A%2F%2Fetisalcmpez.click%2Fecare%2Fc%2Fquick-pay\u0026xmdRetryCount=0\u0026hasAnalyticsConsent=null\u0026Timestamp=2026-07-07T02%3A56%3A44.453Z"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\ncontent-type: application/json\r\ntrace-id: cd290265e17b7c4d\r\naccess-control-allow-origin: https://etisalcmpez.click\r\naccess-control-allow-credentials: true\r\ntiming-allow-origin: *\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\ncontent-encoding: gzip\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: a17393e63cb956c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3533,"size_decoded":1974,"mime_type":"application/json","magic":"JSON text data","md5":"e28d41f5d33d2f716b1e19e933f80f64","sha1":"d9b436313a29443a34b1cb6cb1cd18821eb1c392","sha256":"f823f0c5f5e6a5def64cc1af370a1f69f93addc5c380aa4a29ca102dbbeebcfe","sha512":"0948ddcc281efaa67c89a493473092e95d3c3b1ce0ba150a6238095f484b66c0fac7fc095549f1f9593614e56364d7f9e3f1bf13ab51d0d67e1bfced0491e1a0","ssdeep":"","tlshash":"8271bfa678e82cad81478355e0857f064efc507721443974e48d5fce60ff4ba0a697bb","first_seen":"2026-07-07T02:57:15.721223Z","last_seen":"2026-07-07T02:57:15.721223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/runtime.691f5f7227d03402.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:32.075Z","timestamp":1783392992075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/runtime.691f5f7227d03402.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JiONj25lfsN1CWU%2FAhZavMgckuNfVK6GUkooZqmCoTjTMDkoIItT2tKx27kJSK0%2BaAIHztvb5y34wu2QSkmeHmPWu8idPJxm20LW%2B6Pl5Xmr3uQPBXk53FEAWtkgT6Su7Dpgag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393987f79b28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 197\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:14 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392794156\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4088,"size_decoded":3097,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4088), with no line terminators","md5":"d4eff532dfcd3ad63fae90fbfd96f041","sha1":"4817ce6969e36510c4e6f8b1f2d49e572816dde6","sha256":"7d6e32c45eabbec8170a82a19b658a570a730c7bdc2290100beebbce6ac72941","sha512":"11915b78c106bee6350b2133ab1981023cea6f5f6d7b397af0348d785863a67c617ee86dce05f9a177d9661830d64bb5ed65a5fd1375a80386fd0484248d35fd","ssdeep":"","tlshash":"4c810bb63674fdb72a7554d0583dc842f6297036141bf8f1ab5bcea95064ec60c22ef1","first_seen":"2026-07-07T00:13:37.698307Z","last_seen":"2026-07-07T02:57:15.722092Z","times_seen":17,"resource_available":true,"data":null}},"time_used":10976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10974,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/etisalat_eand_English_Primary_logo_RGB_Black.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.129Z","timestamp":1783393004129,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/etisalat_eand_English_Primary_logo_RGB_Black.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab2000ddfdf87944b4b06ac93e01bb58124ad56a7611b6aaea9931957893887a603953084bffa4fe113000d1c58d05a1d6fa12bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/assets/fonts/en/suisseintl-semibold-webfont.woff2","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.153Z","timestamp":1783393004153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-semibold-webfont.woff2 HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab200084bf49ca889213a247ef2a85afcf0ea91c2ea67a667884d473a4e32a556c2eda08badf1f1111300052ac345f1142f44abf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004300\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DtUWOgufXhrKQb1CkDPYB62C0vR%2BltyHdcq4YjlIq5vLYAWpOUCuYh5a%2BcjfkgXcqoynaaUhub8AzK%2FjzQeypHSOWfhmHvyGG2vwrW6IPVDg119rMH5hDbsM6hlizZRbSlxKZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17393e3fbdab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21576,"size_decoded":22229,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21576, version 1.0","md5":"82a8405f66fe5f1405045c413a3f337d","sha1":"50789987d8a3856030ca4b9679902a7e7ea50a26","sha256":"51874258722edfbe9f4db2dc560c8b8f9ffc3fc638f62d96bda7dab476ffb762","sha512":"4976b96409aaabd347c0e6e3f0b82efb66e16e6945e4cc1c47482a1859fb6f73fb98789c0773d6cf93fa0dcf439aec23f8904edb1073f4fb39be4f7e762ef0d4","ssdeep":"384:9xSaeCvSL3iNnoEsqeJol0ME6n9aU5A8x6wvJsiveO9XVGMSy4bYkVxYjskLQH+I:O9MSLADsqTjE69ZxdJY51y4bY4kLTaO0","tlshash":"dda2e1ff96f18339fdf88c248992714b0543b3052d59627d238b42ee0a19e7cd5807e6","first_seen":"2024-12-30T21:22:19.809732Z","last_seen":"2026-07-07T02:57:15.722598Z","times_seen":50,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/google_play_app_store.png","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.212Z","timestamp":1783393004212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/google_play_app_store.png HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004366\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Nho%2F3m5OBK%2BRmKXuLW5mVek8IUcBAL5A6HYdGoqobmpYTI9WxXmQKit3NRlcvz%2Fi3dFwPS8dj0PhBlPvt5Y8rMvuk3PbfQllVMkohhsluKbK1TTP3%2FgcdtDVVrSEnuTO2ljPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17393e45be8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10141\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10141,"size_decoded":10792,"mime_type":"image/png","magic":"PNG image data, 500 x 150, 8-bit colormap, non-interlaced","md5":"7da62b6b96523a24b0b699ea8bad86fc","sha1":"64dbbb2bb150a953047a98d456a29edc55c8fab7","sha256":"570b654f96c702326965944bb9b0945e9e2c9238562a6e01ab110e1733e213bb","sha512":"8ac185e3474e8dfc7172930910153fa92919b50e9ce5a5714820fae59e9c0e39f4b9e9bf3d17058f529cf3145e871ae99266c3f3a50c67722c51bfb7cfa3f1ae","ssdeep":"192:qU/Mr/XkO9kyM13OYUj8muw/X/CNdZ/HaeSwakwnvlbjFHM19LqA3VBS:1Of9kyM13O7jvuwX/SdZOsevx5EqAlBS","tlshash":"e422afc50d93ec492e7b68de4b014487eb2b11c2c790b21d0d702a9e66e5a5143df7fb","first_seen":"2024-12-30T21:22:19.863072Z","last_seen":"2026-07-07T02:57:15.723183Z","times_seen":48,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/941.26756aa0d9c4208a080a.chunk.js?Q_CLIENTVERSION=2.52.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=etisalcmpez.click","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.345Z","timestamp":1783393004345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 04 Dec 2025 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:37:A9:16:10:8D:0D:87:5B:1E:EC:69:C0:9D:1C:CE:5C:2A:67:91","sha256":"7D:48:65:F2:AE:D8:08:02:F7:C8:47:36:A2:AD:69:20:84:6D:85:0E:A2:02:90:E1:56:72:4A:90:6C:D5:40:4A"}}},"request":{"raw":"GET /dxjsmodule/941.26756aa0d9c4208a080a.chunk.js?Q_CLIENTVERSION=2.52.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=etisalcmpez.click HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nedge-control: max-age=604800\r\ncache-control: public, max-age=604800, s-maxage=604800\r\nage: 427607\r\nlast-modified: Mon, 29 Jun 2026 18:29:48 GMT\r\netag: W/\"23821-19f14a50960\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a17393e54c6556c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145441,"size_decoded":39639,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64779)","md5":"0a1f3d3e89851c205c272269dbc95c26","sha1":"ec394a7e8f1ecb680ba48759f3166639a7a0e807","sha256":"a87c6295091e592fa348b466a1b167362458bf22a3b0fa8b211a350a7a8ac86d","sha512":"ba485dcea8a39bff4190d75e1b8bebf39a092d1168d4b5a48a39bfeed7c045863a7330dd70e382b7aed8fa6da6538d6e68d05fea10e73a36c2f38a45a171e914","ssdeep":"1536:4E/FNANA5AqfCO/cacXKq+ze1aGdhtxGJmnr0BP24D3cMg42nhvbmxt4:4E/hfCO0vXKlzegGbtxGJDDkC4","tlshash":"b9e309ceb2c6f02943a36575d13f6206f2372668384d40a4e50ad1d5b8ba85fd327bf9","first_seen":"2026-07-03T09:18:07.765859Z","last_seen":"2026-07-08T07:02:35.849726Z","times_seen":4,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":17,"connect":4,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/__ext?u=https%3A%2F%2Ffonts.googleapis.com%2Ficon%3Ffamily%3DMaterial%2BIcons","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:32.068Z","timestamp":1783392992068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /__ext?u=https%3A%2F%2Ffonts.googleapis.com%2Ficon%3Ffamily%3DMaterial%2BIcons HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPN2SWFuimJUe5Og%2F3TQKIcMmY%2FKqfjI3V5dR4hXLPz%2FROUZilbkKvK%2FYMeQuE%2BjE%2FCEp7IpZwMeccJC8O4hRDRe%2Ft10F1i1xEV%2Fi3xCq%2BXJ%2BqFhkwh0SFcUmdXCIegsf9FRDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393987f76b28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i=?0\r\nage: 198\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:13 GMT\r\nserver: cloudflare\r\nx-cached-at: 1781735277720\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":1146,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e9315901ddc4241a17975e182b6a6afc","sha1":"509da39e077949d7eb9c2360292f70f91ff14396","sha256":"4fd41998f059c61c77938cf685be27f3c7dcf8a29c92b72cf020f65b67c5e1fc","sha512":"675fce706e63d2fd1c9faeb7fed9653d82735a4d05ca966a4ca912c479908f49793b933e4e060b8d72e9e2e02b38008fd21800eca8ca718a1e9125b43309c48f","ssdeep":"","tlshash":"dcf04c58b995594555520c02730f3f251e19402f780ac8fd4b521d5c8dfb97b439670f","first_seen":"2026-06-16T14:05:20.025218Z","last_seen":"2026-07-07T02:57:15.724309Z","times_seen":23,"resource_available":false,"data":null}},"time_used":10978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10978,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/styles.ee8ec3dfb960805b.css","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:32.072Z","timestamp":1783392992072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/styles.ee8ec3dfb960805b.css HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sg26DIePnd7PZqk9VKAvUzC6511pt9ZQTkCMD7ocRBqqeyoL6aGBaDTrrrMojYiNk%2FjDNXyv2h4EMdgMFuxPtQLvtZlW0HrTTl3XGbiMXXhjlDX7VNy%2BLNeOqqPT4npRcj0pUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393987f78b28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i=?0\r\nage: 198\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:13 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392132197\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124629,"size_decoded":18910,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7cb288fa830e03868070ef5e22d70ce","sha1":"f667d6cf8ea5040568e569c23da155ab41bd7700","sha256":"4bdad59b61b2ea0995e790494741f753e4608a2fe0d0a3ccdde158ca8d349caf","sha512":"5f1fa9aaaefeacabf9c9335e887a3d22b66a4183a781b057f68b8cfdd0796d60b5f3e1561052027a154ada2076a3ad0b0c413b0b641e19f4b5b744cc44567b88","ssdeep":"3072:jI44szL19a7ZL3WIN7ZL3WIH7zLL3WIu7zLL3WIu7zLL3WI944szL19kp2/8PTm:jI44szL19a7ZL3WIN7ZL3WIH7zLL3WIW","tlshash":"07c35295d2013016ba6788fb48e0ee248dc8e995df539ba5f1c06f3cc1dbcba625e711","first_seen":"2026-06-12T06:47:47.863876Z","last_seen":"2026-07-07T02:57:15.724809Z","times_seen":27,"resource_available":false,"data":null}},"time_used":10983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10977,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/b2c/getUserInfo.service?authGuard=true","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.932Z","timestamp":1783393003932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"POST /b2c/getUserInfo.service?authGuard=true HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 47\r\nOrigin: https://etisalcmpez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"headers\":{\"Content-Type\":\"application/json\"}}"}},"response":{"raw":"HTTP/3 400 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; expires=Thu, 01-Jan-1970 01:00:00 GMT; path=/\nADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; expires=Thu, 01-Jan-1970 01:00:00 GMT; path=/\nADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937; expires=Tue, 07-Jul-2026 02:57:14 GMT; path=/\nADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; expires=Tue, 07-Jul-2026 02:57:14 GMT; path=/\nADRUM_BT1=R:37|i:535832; expires=Tue, 07-Jul-2026 02:57:14 GMT; path=/\nADRUM_BT1=R:37|i:535832|e:133; expires=Tue, 07-Jul-2026 02:57:14 GMT; path=/\nADRUM_BT1=R:37|i:535832|e:133|t:1783393004010; expires=Tue, 07-Jul-2026 02:57:14 GMT; path=/\nTS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; Path=/\nTSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; Path=/\r\nx-cached-at: 1783393004155\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVxTF1onWk%2Fk%2Fs3vWBv8cXxWXEMvMCUQY%2BHBEJfHvrf%2Bs%2BUSx9RQEWDj9ZxOV75bNYWewN4Zc4Tnm5TJ2wcYqd5h7Hv%2FENUFcSfFK3%2B0bzN3BNH0XOf4PFtiPpcpPwP8loLbRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17393e29bbeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 186\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":1953,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a72b8d276cd1028f77acc5e2b5487b9c","sha1":"ca83c4700efd4628ec3b93ba39d257683db4a4db","sha256":"b245916cb0be1948f36d3aaa64e230675e9e7a933c7d19f97e073177613fafa8","sha512":"df04ff44c6d7aeffb58bbd9b22e012f939bfa3ed979a970fc5c2f262d788b46dc772879c97789cf2a9bc80ab05e825acb09a27d5cc337287da7fe45ecf7c6918","ssdeep":"","tlshash":"4ac0120e4f552e5336001589ac1a36b673f0d95703906c104a41823603ed8cad90ef85","first_seen":"2026-06-12T06:47:47.880824Z","last_seen":"2026-07-07T02:57:15.725384Z","times_seen":25,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/assets/fonts/en/suisseintl-bold-webfont.woff2","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.155Z","timestamp":1783393004155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-bold-webfont.woff2 HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab200084bf49ca889213a247ef2a85afcf0ea91c2ea67a667884d473a4e32a556c2eda08badf1f1111300052ac345f1142f44abf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004317\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fNR519T%2BTOLWMd4jGmmX9l0dsKXbnA0PZI%2BFpOT3An3VRdUeEcO%2FAjfkiq3LjoWQo3x4cQeUod2M8wSWGsfHJYjJKI5KpzZi7gAaWWbMgoetA1EvDrImkPn00isWBui0M5AIpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17393e3fbdcb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23164,"size_decoded":23817,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23164, version 1.0","md5":"e4d01e1b3db34d7e9257eb4d6f9c2872","sha1":"49aeba6f0a449d55197cdf2f2d698cdb7ec13ab4","sha256":"ac1091fb1dfd0807834402eb090694a78474529b5a99f2bbd820f501fc86990e","sha512":"5f88f9dcc3783b8595b0640dc23a89aad55e9b45470b314ad890c2b2ec96b7b84553827b2a480dab114ec82dc66fa93813b9f51fd559bb0df9810acbf466fa78","ssdeep":"384:khL7S58TKclUEEaodUzvlUNBCvHnHyyPuuU0DlGF7BvAkMwDu0zxPwz4QloKzes:EqqTKclTMvNqHSyHUSc1JywPMTlTp","tlshash":"74a2e12bffa9283892476b335b5414fed0be01c774b5c8eff999e0884a1748bc16904a","first_seen":"2024-12-30T21:22:19.81481Z","last_seen":"2026-07-07T02:57:15.725927Z","times_seen":48,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/mega-menu/etisalat-logo/eand.jpg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.206Z","timestamp":1783393004206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/mega-menu/etisalat-logo/eand.jpg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004357\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k17XAhor5cRHgamETcxxwTJbmBXVb6ziCLpwLGCqAJrcK46jChYiL9qTdMFn5pAWcFiYv%2F3uNOjdDPO2N1jpTBFiW%2Bdt9IUW4km1EXIXDf%2B%2BW2lkj%2FCAlTU1dcD%2BkuwMokhkRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17393e44be2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87326,"size_decoded":87982,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"b9eb903c810260396f5354ab8c8fe7ee","sha1":"f4cc76318d790a0ef3011cc04a11593d1fb1f311","sha256":"88279dd6bfbb917b7b96fc404e5744524d1c2f574076c047574349725d5fb2b0","sha512":"22ff0e1c5c60dd9d6404a2bbf4868a2a19d841dd0b9b16a2a3753f2418066aea35132de3990f60fdf6a1fdbde5e7fc0f3edb52e866bf0618f1317c403fb67701","ssdeep":"1536:/abrGdxUwfNoVB6NwZp+btf1u7VWKrV8kyTuC/d4v8A0aWURxU9V3eF9mx9mytyN:/erG4wFoOdbtf1u7dty6C1g8A01r3Hxo","tlshash":"d083f130adf2645df7a4857428f4fd82dd60a3a3662f1979bbbc7c414b814172baf0a1","first_seen":"2025-07-14T00:26:18.749947Z","last_seen":"2026-07-07T02:57:15.716237Z","times_seen":31,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/facebook-dualtone.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.214Z","timestamp":1783393004214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/facebook-dualtone.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004361\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXuKadoHK0zEmrEd9xbJKQD8C3%2BmFHLkGh1Kvt7hfAKREl4HgrsNfmSOPRcamiBq%2F1C9%2BT%2BRkY5kVXr9mM9k6xvoTBn7cAvRiaF3ThLAVz13dq52DsLuAgvqXnLios3xJHiZAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e45beab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":523,"size_decoded":954,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b396eecf399c7b3846e77591d3066e1","sha1":"db75d6d9b3ef433c1b234773a6523f88733f083b","sha256":"dea0e9b5bb3b4f86e625d3a9c55a3ddca36118b4ed128ca0c63253ab035aa338","sha512":"f010ca65772a301e03fe85c87166eaf376f7db95f60791514c9f3585ea1e2eca4e1a7cd1c59aba9105732ecec299fbbf8252b705a659721f319eb1d47ad4fe2a","ssdeep":"","tlshash":"d3f0e97993c88c2cbd174d10ea183536933f62727959a794cc3f417016c154df83fa94","first_seen":"2026-06-12T06:47:47.892686Z","last_seen":"2026-07-07T02:57:15.72647Z","times_seen":27,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/favicon.ico","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:36.890Z","timestamp":1783392996890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/favicon.ico HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jb9JfgPPDBae5PLedGLZJxmaPO9YQq8Tz9mZR7d4mV9LLjBuY%2FjdJBkxp4A54JYV%2FBIhHjGbcZ3isIKrYAzMHeBA9HMjUnOXwGNky5uC75BhByWOd7KXgrbKFZepmpvzpYJ9Aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:37 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: zstd\r\ncf-ray: a17393bbe95ab28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nage: 201\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:15 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392795952\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3815,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"592fd2ffcee8a3004fffca3c1ebed0e7","sha1":"392f72aaeabd0b9c7b5caa8048352353c51657bb","sha256":"7ba4d8507d71d10e6a2448217415334e1938a1d54f4e3a19a0d8d57743e9315e","sha512":"d0edac5dc83ad0a8934c25903e32a7714cd833f94aeb2bebf72c2e4a352f1d7c02f6478cfa5c4c6d483b19814bdb7d27c4453170419abcd772f86d6f8ceb960a","ssdeep":"192:zs+v/xPGJgsD8pBgggggggggggQTunRh:zsWp9+R","tlshash":"2b62d9c2998426a9f266bbf810a02d7f229b0d636d34d146bd20fa1bc3776cf0474e13","first_seen":"2024-04-30T16:39:53Z","last_seen":"2026-07-12T03:59:00.28523Z","times_seen":85,"resource_available":false,"data":null}},"time_used":6160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6157,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/assets/icons/search-icon.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.207Z","timestamp":1783393004207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/assets/icons/search-icon.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004368\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hH3FUMbTpTyfNFcLTb5epqCfj8R8ZxaNv1esM2tpr0KzTh3pHHusIi8U4hhQtqrhXZmTYHWvuvtq32EC3L1HEtJZ54boshY7a3fbRpAhN%2F6iSBwbR%2BvPHwRwZfxHAQQ3NRRVTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e44be3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":865,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"453082f2e075418c32a9f22a93d87f51","sha1":"7e4ef45885d1f2ea29b2e010a56dbd82eed6a13c","sha256":"8bb464072d205cbd271e3e0c2e0abcd5c72e970f06a5d880bf137f0555387249","sha512":"1765592ed1fd458786fefd1953669146d64d57aaf07a05efe08ebb3103df62b43cc75ca23f370ce5187bbdbed7920b1481626f248393b7e285db2d19007bbac2","ssdeep":"","tlshash":"b5e08c195f48482cb3238919d33835b0865aa163aec40ea8887a0136324599ce62f1f8","first_seen":"2025-07-14T00:26:18.761038Z","last_seen":"2026-07-07T02:57:15.727525Z","times_seen":31,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/follow-us/linkedin.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.362Z","timestamp":1783393004362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/linkedin.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004506\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njdCSYdTNCQ%2ByQK3k8NOaxQ7NXO7MmbMRIUr7TpEPcYWj2vxpBAnBX%2BZsqRRURfPhztpUHKwU%2Ftjxth8d1zDu5bdeIPeCDxRrYylg6J29WYv1x%2BqDUI8hYNhEUb9zCoCfZYBlg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e54c09b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4677,"size_decoded":2208,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec195155cd241102c8098dbd0ca92059","sha1":"b9f6063ad2c9f5d7d3e52f0fbf2e18b380d06c9e","sha256":"cdf1cbaad575f958a9f35d9d135ac718110dcb7acdc6843c3c8624dcd4b2e4ba","sha512":"4c20945fa17f4352c6bc14b3af8f70c6f5446c9fff3c78244d88f2ebb543d4d7a912d19206efae31bbc06024fdb90dff47c17c2780c28e649721c584732ee537","ssdeep":"96:XjyqzYqOhmNWCEBMN3rhG82s/v+FZdthuAVHE:6Kt31G8/+Pk","tlshash":"66a19ae6f1a12ed85ed35fc0b809c675f03925b93b899218a26b57c7e1e77ccc0ac944","first_seen":"2024-12-30T21:22:19.834359Z","last_seen":"2026-07-07T02:57:15.728005Z","times_seen":50,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/follow-us/youtube.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.369Z","timestamp":1783393004369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/youtube.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004539\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uvrn0TjQ0x8JBnRkEgNYsGJKcJ0yuquLQQUf4zqIqBzOCjmRrXQOEHzolDE%2BsFROYrKxIRMT%2FDZs%2B%2B6aanlMu9h7UAilhIZRtTG%2FXBFmH1m65u2Drpj3J70oQK9%2Blxt0TDgcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e55c0bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":998,"size_decoded":1221,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a74c9bffbfd0db7dc08bd66d7273625a","sha1":"ec61c6074907b260c7038abe9942fe8e5351a34b","sha256":"9b659af296dcd52d828e1f7e3d012821854abe43f989463fd1533c6d0cea62a5","sha512":"a5c8de59a5d71e92ed205b9d9bb2712db6920006a9011f81595650954684790c7e6d9c93795acea38ad62c3dbdfc0d00d0943d0c6de00ee64f6927305f3ee86b","ssdeep":"","tlshash":"131121f0c2c471f05c03db95b5155835392d38fa668bc3ac41a09e38b26605a89dcc58","first_seen":"2024-12-30T21:22:19.835909Z","last_seen":"2026-07-07T02:57:15.728494Z","times_seen":47,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/master-card-dualtone-v2.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.374Z","timestamp":1783393004374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/master-card-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004531\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUgyjzmZrjZ6bvjSaC5bTKtOJ9QJ8IieSt7U5QI1DP0LI8KwfI0%2BHYdRnpLxYgMlsBkaWhC4xCPdJqkQjKYJK7s2g9DLXPpjSBGu2bY8vxVDI4JXOVF5DfbAZFRCGpU6QixUQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e56c0eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1475,"size_decoded":1175,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30bc5d791e2199ea57b51c4b2beb07ea","sha1":"5a1382e824d8f662737f5221ade99b7bf126f94c","sha256":"9d03aa2e3af21cda81061f9e079cbcfc79a4db87c00a87f8cc6d6e1f9ee5c07b","sha512":"2721f67002b25c8ba2730ac6999f7f04574dd3571ba74284f173678e46cfd3d19a497ce5c3270cc2c1a638a5c93252c18105a18bf589784f2359e2982dc2d417","ssdeep":"","tlshash":"2831c050a2fd93d0f24cd37d490c68be366650e53914e895c7b07979f864bafec8a0c5","first_seen":"2024-08-19T13:38:40.806792Z","last_seen":"2026-07-07T02:57:15.729046Z","times_seen":48,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/__click","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:32.091Z","timestamp":1783392992091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 97\r\nOrigin: https://etisalcmpez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":97,"data":"{\"kind\":\"ping\",\"path\":\"/ecare/quick-pay/?locale=en\",\"vid\":\"c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:56:32 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZ3tTowi9RZo8oIMCo7welXZds8r4967dDaD72nTk0K7Onb90%2FI3dNIpAl5PSMpA75%2Bx0ZgH9ywvfaxziw8dy0uitvn00A7kUGYfEoWP8kSFTatASVWIahrpE5V6TI0lz9h3kw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17393989f7fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1222,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":10957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10957,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/735.cc1bcd4cf7aa7ccb.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.514Z","timestamp":1783393003514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/735.cc1bcd4cf7aa7ccb.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VNVN37ngBTwiRi3U18OldgihVFVBtMmiQwo5Bo6YWm5UPrR8CVOpcEqjdnwEc7yCIX8ovsNZmjUdD4jV8Qtt0q1c40zka37azo6j9UTUmARhkJQDW5tAH9th3mhJ7gblhqAUkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393dffb9eb28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 208\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:15 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392547308\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27888,"size_decoded":5342,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27888), with no line terminators","md5":"a3758711c432d726fc43280b1604c109","sha1":"605acc4c37f6bc3e645a943fb4674a3539f44c82","sha256":"dc078c31c761e0dc034952b6ef0048406989c786f37b121d1dc975944f1de664","sha512":"d1c112ab50dd5763af8c19eba9b8871f16a160fb040c281dd31de0df303f404e52eaa739d0b84014c443ed3f92c8a949b8add02890b91fd506e59dbd3b1279c8","ssdeep":"768:xK8KILrn4srZZJcgoCKfK3eFK3eVDovY24Ga9/nufvzxXI:xfDHn4s9ZegoCoK3eFK3eVDovY24Ga9N","tlshash":"f2c2405f7691b86516c983bc187b1e08e335998e1f2c000db2189ed6dfa5c466aaf738","first_seen":"2026-06-16T14:05:19.98475Z","last_seen":"2026-07-07T02:57:15.729557Z","times_seen":26,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/assets/fonts/en/suisseintl-regular-webfont.woff2","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.149Z","timestamp":1783393004149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-regular-webfont.woff2 HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab200084bf49ca889213a247ef2a85afcf0ea91c2ea67a667884d473a4e32a556c2eda08badf1f1111300052ac345f1142f44abf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004325\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTvvxZBWWSTK2VHwUoioa3Jq3WDaKFPBhR%2FSbXaMPApNnDFOsaC0pt6g%2BXh5UIBJF3RUvNzG29P4YAsrItipLem7%2FIZx%2BydB95RdAV9DLJJRQkMxKcIewwa4xlHxJ1URlTxKfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17393e3fbd8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22720,"size_decoded":23375,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22720, version 1.0","md5":"9aff0b960184a28444c0bfc63d6fb87c","sha1":"b055bd93476904d5c1f59614110d7a13af6a7d81","sha256":"765fcebc4454e93de798b9ff1ffcdd19616f553d7acf82059d24d76ca1cadd21","sha512":"656b2187c1fa2242f1bea8c05a3ea8eb042121995b1eed820b4113e08e37c8cbb499e5f6da83746833a705004a18a3e80adbb3461831ad5c2d15c67b3b63ce2a","ssdeep":"384:hdH7q3d/FrzTI6hWLWnZgiE/PBo5qSwxpK3bdDjktZAj1g5xHfNao1G5H+l9Y3+i:TSdpTI2WLWZlX5GILuXHltqAY365y","tlshash":"4ba2f12384218fd0f416192ae9afc17661651f7a22653cb9ab4a1852c078acfb91833f","first_seen":"2024-12-30T21:22:19.811296Z","last_seen":"2026-07-07T02:57:15.730131Z","times_seen":50,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/assets/fonts/en/suisseintl-medium-webfont.woff2","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.151Z","timestamp":1783393004151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-medium-webfont.woff2 HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab200084bf49ca889213a247ef2a85afcf0ea91c2ea67a667884d473a4e32a556c2eda08badf1f1111300052ac345f1142f44abf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004305\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPmB6MntngHzDfgP0GgbVdBDAx%2BoNu2imdEkjXwEUFSUyAZURM%2FFdkdbzFYe7MCafIDRFB7t6IPmlKV%2BIOSombnVGOFSUFNi89T6zPK%2Fo0GLf2IiAEGhlx4%2FSSnITbMfOY2ThQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17393e3fbd9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22888,"size_decoded":23545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22888, version 1.0","md5":"a64d76f4b2b8032d0ee7766c90897519","sha1":"dde1d9973bdb7de262c2987cdc0ba68c993c9331","sha256":"2e1c906a39bc6303901b430a8cc16da85ce77d48f4e08c6ccebbaaef246c188b","sha512":"3942e419447a04ff5af421173b4b7a712a4c97f5f2f9f2358ed0f01e3a2c6e6829c5556bc94aedf762a60ddf48bc0346e30c18685a4aaba07086392531f392c5","ssdeep":"384:gzdqSbHII3wabQMrTCUX0iGVKj8A8Ohkz/5O1re6G5Kz7qFSmqPxTyMUZzzt/XA9:4dqEx0iGUOWG5KvqFSXP1ybltfCU4Ukn","tlshash":"5ca2f13d16031fbb0b465525a5da723d1285909d51fe62333f0a74b6284c7ca0e7dbe7","first_seen":"2024-12-30T21:22:19.812773Z","last_seen":"2026-07-07T02:57:15.730669Z","times_seen":49,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/android_2_tcm313-205859.jpg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.213Z","timestamp":1783393004213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/android_2_tcm313-205859.jpg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004375\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXj%2BCkv6n2oKfl4m7Aiur5VFh40xQbUFV9gHbnvoXsyDyE5YM%2F8NUG4ITN6C7FqyVIflE3hfZNf%2BiYfbYVNYE5gEyVPtr317THD15yOA9UJaP5S4XZc3x7eKM8NnPQSCTM%2F3ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17393e45be9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22596,"size_decoded":23248,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 448x136, components 3","md5":"b7689345d58a33b43ca83f3592f0827b","sha1":"91897286c76246b33b88718451d72620a8612a51","sha256":"886bb1ba2381e43c92b8cb8afda0bb852fdc56cacc6381c993df4a5881429fb0","sha512":"7104d95fbe288d5a1d147c780280e670cc8f84c28762d0b1d4a78e3a5dfb59575591c84519ae4973f01e54a56b4390c28df440c67de71ec9d42342fd261e3ab1","ssdeep":"384:pP4OzBnAYXuEXBZloCeQxa8HcJK67ZKnx2KWlXIrCaVcYm/C12Rhq5AZEFenH:p4GVAY+EXBZlAMvHT67oQXCCQ2a1CqAF","tlshash":"66a2be5d6015b68edec8e9c9f0e3ca342b5c5430387ceb978f0e52db78e2a111948772","first_seen":"2023-05-22T10:23:22Z","last_seen":"2026-07-12T03:59:00.327948Z","times_seen":68,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/youtube-dualtone.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.219Z","timestamp":1783393004219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/youtube-dualtone.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004375\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdrHSSMJ0YIMuWj784qqZmqxvPbLePkpLTL%2B0H2YjsqPb2OJkYOSzruOMdwynOAdCgcq%2F66ssTHmQX6PBC41LbLM%2B7ZTvMSXc%2FUXiKBLHb1DkFjdMPMaLs%2FydYD%2BwgIY%2Bk3trg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e45beeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678,"size_decoded":1062,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"640609e9602d03333d5914fd4e9e938d","sha1":"e445ab1f26211e76c9cacb3de956f6fa6e0b32b1","sha256":"b324f977ff2694decdf7a3bc73fbd74ce83de0ae413fd8b8a4008d406b37221f","sha512":"17ad8a91ba50a6cdbd5d492569bab60bdd7e8541fe08661a623bf45b578e101f079c7470745cca2df1936bf8db040ab3e66317236e0815a6898b8dd56222fc71","ssdeep":"","tlshash":"3b019eda13b8ac1cb6935e6aef4d7671152614b7292a41d8d97540312243f4c781f680","first_seen":"2026-06-12T06:47:47.854323Z","last_seen":"2026-07-07T02:57:15.73166Z","times_seen":27,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/follow-us/facebook.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.358Z","timestamp":1783393004358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/facebook.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004523\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BhguFUrgwAPHSyEwnficiCVGe1pS56eHYdTOqkok5RrxmftLD3WjA22a2mzvapBQeU1BYdX48%2FHgO8HNWCXzbuR0MLMZlDfcQx5C61vnNyMv2QfCdf7PJ8%2F0ohONAtcdn2RqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e54c07b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1370,"size_decoded":1318,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07fb11e7af7ac9d680871eb9a87fe974","sha1":"08675f17ef0cb9c4aa070d89e74bed9957fbfd2b","sha256":"edb38bba1106d7ead042e6526fec407061b4ff4b1b1c73cc4c062ac54871cedd","sha512":"f2d2bb5afe3f59062b8ceb9d2026fe03ad0031839f034d1b2eb9531a790441d457aa84561f4f678e7f65a2a09ef977e6e50838d4e390a458031df3fb8f9c5d9b","ssdeep":"","tlshash":"9921f0f5e394b2e0910adb30d0399425b69a38b9bb1a0710d3084f8563b32ade1cdcac","first_seen":"2024-12-30T21:22:19.829498Z","last_seen":"2026-07-07T02:57:15.732148Z","times_seen":47,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/follow-us/instagram.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.360Z","timestamp":1783393004360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/instagram.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004512\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aD37cQ7KJNHRjjYBPRtwxw3BaVsSkFMSBbY5IyDVBSJov9q2fZVyAcM0E5STutrfm6%2B7uLQpH8N%2F6XNoNKcearMeoPufYZVOc%2BFjOuhWC7WfLgTd4ivfLjallnVFZzrs9H5FEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e54c08b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":542,"size_decoded":964,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e870402cb8b926c0bc289262463bd97b","sha1":"84c0bbcc6a04c315d44209da7cb9855bab4bc5f3","sha256":"b444a00cb3b39735c73fca85e61935225d393721c25480a81435dcac97917064","sha512":"6614fe49183e4f435e918b7bb3a7006ed4b6ea7a1564f16ffd523e4c24f83a73f74609db3036143ecbbe9c2cf852487d67fc28943a668242523737f4d4d8cf0e","ssdeep":"","tlshash":"3ff02b587318583ca3568f08e32932bb317315399d4915d8c131e4b8616258f6e7fbec","first_seen":"2024-12-30T21:22:19.83102Z","last_seen":"2026-07-07T02:57:15.732594Z","times_seen":47,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/scripts.d9574d0e6cd3bf5c.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:32.079Z","timestamp":1783392992079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/scripts.d9574d0e6cd3bf5c.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZU%2Bj0WACnMC%2FvLvKGaYh6mGgtqk4dDEyXWgScaZYzcGlAf%2F5Xv3IeAZe41FO5%2Bwgagq47WSry1bIc7pUE%2B%2Bg%2BjHyGGXTiw9ewy6IQ1zE3BrUa%2FBQkmt251jzg72HjXeuZEVSYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393988f7bb28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 198\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:13 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392793847\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79889,"size_decoded":26455,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"c133ecc32ea46e7bfb19fe41727baead","sha1":"f14a9582c633ab6a27882f98b483ee3733bc809b","sha256":"28968ccce7405788636552434a1a47527722b8d7078720f23c9fcd81e95ab630","sha512":"c383113f7c1295499d445b4b41f07e666eae3e69489db277617fe2f78cf6d15b25d508eb08a2f3310838d0e8c3774be1765e8150ec1cc4b4ef63f9b13d2b7085","ssdeep":"1536:o8/9b4Q+R1P2ilvoXkilrW8rVnvidWw+qmZYCFdT/FQyDid:JrVtqWwwTf/FQyw","tlshash":"ea73d75a3244b47309df85b78037420bf2265da8b14a812cb56cadde2a7dc863277f7d","first_seen":"2026-06-12T06:47:47.889237Z","last_seen":"2026-07-07T02:57:15.733081Z","times_seen":27,"resource_available":true,"data":null}},"time_used":10977,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10969,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/b2c/ecareEnvironmentConfigurations.service","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.569Z","timestamp":1783393003569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /b2c/ecareEnvironmentConfigurations.service HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:43 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392900523\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFqCbw6%2BC3t2rgMgnFDGhuTUAf4GJMRHqesgFv02aD%2BATV2sGcbdqcIBTlNXIMMEan84ssm5notFgITrAfiH4bKK0NNrA%2B8gioFumwxIgA%2FHnMRgvucCskn9nkrok27XdvLVyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e05ba6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4189,"size_decoded":1912,"mime_type":"application/json","magic":"JSON text data","md5":"5a17907c2965c31106cd0d04c1e4d34d","sha1":"acfc4802c2e015c6cbd0b0177ebae5bbdaf81e22","sha256":"0dcbc26ab72621992aecbe2d6a452e07121ec7d4bc910544c952f6aaefba7477","sha512":"c94853073b446805e3101489f4350bb46dbc5efa11b0f4b4e5672a757aab3e99be98663201255ed84fcf5dbc4d475f138621b75e34207911a345df5f0b6ee6c2","ssdeep":"96:lmjKrjOmgHWtmjKrjOmgHWENO5iMtm/rjOmgHWRHCjn+3:EWrj3jcWrj3ja7rj3je+3","tlshash":"e281529a0b40bcfbcbf8b154b01d31ab096e771796cc97eaa4cd1c2c3be98541146d2b","first_seen":"2026-06-12T06:47:47.869747Z","last_seen":"2026-07-07T02:57:15.733539Z","times_seen":27,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/instagram-dualtone.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.216Z","timestamp":1783393004216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/instagram-dualtone.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004362\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HqK7sHV%2Fwh0kTP3fUgMF%2BpDikzHow34Nh9ZL84%2F1f%2FbdOzTI18QKwuyTcl2j4V0uDUqvl5emZJNb0Ixp0yp67%2FeNhJm1wM5q9Srio2%2BSZsTFG2Iad00tJMpH%2BFCrqVrK5m0Esw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e45bebb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480,"size_decoded":939,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"598dc7ddd591280df1b7befe3c9cf92a","sha1":"acd4adf685fc5ed50826393f5369536786abf487","sha256":"56e91111694d073f66ebf0fcaf7827919b89ced3482645dc5c26f601de2cb55f","sha512":"eab2e5163f327f953db2536b59ac3e57266da63a9d155c44cf2d576083fc527537bfd977ef1bb2b8ce7d94b60e79c8f3c220ca23448605c409276b22bf4328dd","ssdeep":"","tlshash":"cef0e2de430c5cbcf8264a64c73c3135235949b3331840a7b83e4171254152ce92fed0","first_seen":"2026-06-12T06:47:47.852427Z","last_seen":"2026-07-07T02:57:15.73401Z","times_seen":27,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/amex-dualtone.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.220Z","timestamp":1783393004220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/amex-dualtone.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004370\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NRpZDTSc7N6dzeQBogOtxmqTgPVYpxnv8oL4bb8LI0jtDwaIpRLeUAIZG%2F1%2Bx%2B0n5vwv6e1rQW4aAyjXuw%2Bjzf60%2FRV4qqiAlR7aFNYzb4%2BCYcFFja9kh5pnP1IfOj%2BCSjMcrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e46befb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":1110,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e98590c575d77cfe48fc31435d023f8","sha1":"71eae56d1544692141c2915b7bfb22b2a216f428","sha256":"95c4f695e62afe789334a5d7daf5787632c66d9383e98a587daa06f4a8126f48","sha512":"e6a68a88a80beddbcd5bed93f3fb58393bf19d499bd9c76f912ebdaff9326cadea6ecb51ab82acf281d6713bea789901e16b40f3f70286ece433e5aeecfc3b98","ssdeep":"","tlshash":"2201d07a6354d74cbf034835ef3e7ee6a21f10e1350c1261d436a720614259ae40bbd4","first_seen":"2026-06-12T06:47:47.861861Z","last_seen":"2026-07-07T02:57:15.734491Z","times_seen":27,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/card-dualtone.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.223Z","timestamp":1783393004223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/card-dualtone.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004387\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJsOyafmzyv2mUhTHvtNy2hz1z93A7KTW0toKRdR0SVzcYlVOVmXNI%2Bnr3ZPiKDnsa464Ub1ftg2uYnHKtMGqsnRy%2BOfCLV%2BQO0nJlSkqM4%2F72SzbupLKP%2FR1MnpZCl9XPkbHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e46bf3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":887,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e5e506bb14a57f7d811018693925919","sha1":"d52fcc5757c13cc50828a95bc668d6048d8b753c","sha256":"4a2b069397940679ab99f94c81bf8c6f321640a4eae150bf11ad8ffde21b7386","sha512":"e4976296f05233c5b1bd44ffe760397679678ab58f7f0ccfa89ddb6f558038ccad930249c2bb8e55f500d3b7ff50be08d3e3550875c9555af62a8d921e4e77ca","ssdeep":"","tlshash":"1ae0d83d538c8d2cbe038a30e3693233821f629336886329cc3b8130568605df42bed4","first_seen":"2026-06-12T06:47:47.862954Z","last_seen":"2026-07-07T02:57:15.735014Z","times_seen":27,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/__click","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:51.859Z","timestamp":1783393011859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 88\r\nOrigin: https://etisalcmpez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab2000fe244f373d71a9f5decd00dad3f45e121d8c81f7584c218336875848ddc7cf1608d961a9f111300095d046e43e1a6141bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"kind\":\"ping\",\"path\":\"/ecare/c/quick-pay\",\"vid\":\"c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:56:51 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1m%2FSxkH9XlK5GfAm%2FHo5bonRSP9W3AyycWteqBKz9kyFtgDRybS6ec%2BolIEUCKphoJLePlzQkFZTkDFhcIVw%2Fm9ZspU%2Bdx34jWzLTYCq9wL6%2BMdiypTVX66Vilnd0g70GwMpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17394142e7ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1899,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/vendor.62ac21f3ea5ee07c.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:32.081Z","timestamp":1783392992081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/vendor.62ac21f3ea5ee07c.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5go93mEw3OuYE40iodbQ4LdyjppAAu7wT2WJRVx6Wznnu7WCAQa2uudPHHqxE0N1Bc%2BLk%2By1nJMnaLxOSFN2HhRABP3RBNs%2FpkNgRLwynwvwiCinRdxMHZ%2F%2BwaJY7sXxKTByA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393988f7cb28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 197\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:14 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392542908\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720897,"size_decoded":463752,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11022)","md5":"9ecc22e629a5c50bea615784372e534e","sha1":"a98787aaa0c091b7f4841bcf6460c0fb04e3dbbc","sha256":"8843ebb01e485539f9840a6b3342c959d605b494452723349bbcde2d75c4fb5b","sha512":"a25504a21a9a8f82ec8b93ee51a32b6fcaf2b776c9a33b1de7e0a6f0ff1cb88d6e23f8157b42aaf3e37e5a0aded4d506e8f44f6a77c3d7fea2ebb268f4f87b2a","ssdeep":"24576:ez9oPf1eooIl+XBslvebOB9SOQmS1XnlPdQDsSj4Nofm0JsHP:ezaPf1e6leBslvebOB9SOQmS1XnYsSjI","tlshash":"f8252a9632c1302242d240f65477054ff299648eb50a819df1eccded6faee4c62bab7d","first_seen":"2026-06-12T06:47:47.857214Z","last_seen":"2026-07-07T02:57:15.735599Z","times_seen":27,"resource_available":false,"data":null}},"time_used":10987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10968,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zn5i17dlpdiofoxjq-etisalatvoc.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_5i17DLpDiofOXJQ","fqdn":"zn5i17dlpdiofoxjq-etisalatvoc.siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.921Z","timestamp":1783393003921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 04 Dec 2025 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:37:A9:16:10:8D:0D:87:5B:1E:EC:69:C0:9D:1C:CE:5C:2A:67:91","sha256":"7D:48:65:F2:AE:D8:08:02:F7:C8:47:36:A2:AD:69:20:84:6D:85:0E:A2:02:90:E1:56:72:4A:90:6C:D5:40:4A"}}},"request":{"raw":"GET /SIE/?Q_ZID=ZN_5i17DLpDiofOXJQ HTTP/1.1\r\nHost: zn5i17dlpdiofoxjq-etisalatvoc.siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nage: 352312\r\nedge-control: max-age=604800\r\ncache-control: public, max-age=3600, s-maxage=604800\r\netag: W/\"2940-CLvfFoaE88GuzVLKaODMelpMzlU\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a17393e2fbd356c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10560,"size_decoded":5564,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8737)","md5":"f8fedee713d5bf4d9514108d2e75f6eb","sha1":"08bbdf168684f3c1aecd52ca68e0cc7a5a4cce55","sha256":"f36110093149c7ad41513d8be5d490902bd2de1a3df4304a1ff1609ed82857b2","sha512":"1045eec11d9f14ff148245993ab51a9b57b12213a23885ac7e2d9aa556463049de96572f136661557a03f612009e678f1550030beb0c86e72a5687bcf20e055d","ssdeep":"192:pIU8NupNPxapeKOwrA0NZzDqTEFPsGli61CmSv0K1fG29bohLK/iZuFXupBy2dw6:/PJKDrAOzDqTEFPsGliiCmS8K1fG29bS","tlshash":"c822e8dfb684bc7e02d214e5c53f7145ba2e06bb290d94a2b60cd0a12a74bd68137fb4","first_seen":"2026-07-07T02:57:15.736053Z","last_seen":"2026-07-07T02:57:15.736053Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":60,"connect":2,"send":0,"wait":11,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=true;includemegamenu=false","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.981Z","timestamp":1783393003981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=true;includemegamenu=false HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2460764520.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; Path=/\nTSe663c25c027=084df50742ab2000470f978a51bf93f1302d1a96dda9b3ec5f1eec2bbee2a62126ff81d87f3b99f6089a078343113000823f2d3dfd3f179cbf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; Path=/\r\nx-cached-at: 1783393004127\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FlEy66N9LjQgc3OpjJY98KMMW%2BZiPrb2sZP1tBL1WLVoVnlUg%2BrGzGYUv1HlGaDKt06M43S00x0nvW2fIG%2Fwouc7NlTx2cIg46cISYbKc3mZiwTDwyhyMczs8aT3DT8Hp%2FXrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e2ebcbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2127,"size_decoded":1653,"mime_type":"application/json","magic":"JSON text data","md5":"9060e384d6e5a9001688802591695336","sha1":"d9d8eb13b26d5d8eb79ca83f5ae280c1a64e86e5","sha256":"3cc86711a0dc72fda644f9e4609ed161a1315b7bca7c56c583e094d56e0164bb","sha512":"4884c0764d504afe01ec61036e700c8da9cae213501b8338b8bdf86e0f1a721ebd699214f627a5127826a49cb5dbed7bf5be54e28f0c6f19ecb3e3a32e9f2957","ssdeep":"","tlshash":"ae41907437763863f34faab2dc623d41b0b9404641726f60e9e0e7b90be63e490612e9","first_seen":"2026-06-12T06:47:47.887088Z","last_seen":"2026-07-07T02:57:15.737061Z","times_seen":27,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/graphql/execute.json/etisalat/nwt-consumer-popup;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/popup/offer-detail-popup-main-sec;variation=master","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.061Z","timestamp":1783393004061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-popup;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/popup/offer-detail-popup-main-sec;variation=master HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2309769576.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; Path=/\nTSe663c25c027=084df50742ab20003e1a2ae17b5efacd24a440ab3576931592f74f57524f06fa83224b270eb33e290812166ecc11300050cbcf5be647683dbf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; Path=/\r\nx-cached-at: 1783393004491\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=neMeYc5WZZhXyZSa0Ezjx19lP8bswnepRLLzdMcgh94%2F3Sm3ncYu9iOWbAN0M4Uu6nj7%2B7pZCgfbHstuakQdSl90wv%2FwFi%2Bmb69UUfqRNsCIEUcw6AfsSQwQ6hGXRdA9qDLGJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e36bd4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":830,"size_decoded":1506,"mime_type":"application/json","magic":"JSON text data","md5":"c5aaf7a03640018c01874dab2002a327","sha1":"980b9221bf12384b43e249538ec9ae1bd4e0ef50","sha256":"d6917e1722d9541cf7a1191af608d015df8629613cf45385a5aa8b03e0c390d4","sha512":"0478b4b5304e263d5eec1dfa2e280115d2130aa39b148f45b05df5f120b19f76deeb52ed8ee31688b41add5bde273153878ca9d999407cf72bdb513bb4bbd14f","ssdeep":"","tlshash":"eb01af32b6595e53a38d8a413e6739d1e0381642e2504d2098d4abe46ea57e96071ab8","first_seen":"2026-06-16T14:05:20.016109Z","last_seen":"2026-07-07T02:57:15.737516Z","times_seen":26,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/assets/icons/cart-icon.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.208Z","timestamp":1783393004208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/assets/icons/cart-icon.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004357\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MK7wO1Xm2LFd9qVOmtVYicpjdVa0TIcUfgmhR5IGJ2Y2ONyL4wtGhgf6g%2FMpF2e1Wy15OZ7uh87ulkcaNbknU18ILw%2FQQ6sJSIGryu2YpBhaiCgoA%2BNqGpfPSNyfWrBOitXEGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e44be4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659,"size_decoded":957,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a6e184fb8d41fd438b1f069bf9490adc","sha1":"8d54526feadad735f6dbddb84b302f7d7075d248","sha256":"462e7d2b1851b756c62d0faa759006bddc944b81c2ce7c25691c89f487f43bc8","sha512":"f1999384f07a94f37d70d09350486285088d98454cae49f76b24390d5c40140410bbdbe58ef3cf379a6a181658ec4fb7a790a19c186c59f4521e07571ec90fc9","ssdeep":"","tlshash":"7b01f9bd130c4cbcb823ca6ce32a3332a22f817325a563d0843e45701a9214cf93fad4","first_seen":"2025-07-14T00:26:18.7664Z","last_seen":"2026-07-07T02:57:15.738008Z","times_seen":31,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/apple-app-store.png","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.211Z","timestamp":1783393004211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/apple-app-store.png HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004364\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dG%2BB0ZwW5HeR61fWvs10nGruiYU8COyEKA3pSX1pFoRO7z2msTJCMmsp5pFlq%2BO5Ui1%2BHIXhsoWWSqwaN5QKdKBiErgy4WxZ91j2qWdkFo3MuGErvu%2F3VIjno2tqM8yD06J9og%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17393e45be7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6292\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6292,"size_decoded":6942,"mime_type":"image/png","magic":"PNG image data, 142 x 50, 8-bit/color RGBA, non-interlaced","md5":"fe356bb3f31ed6920d6092c3952d96c2","sha1":"4123d161f5ad6bcabd4607bd110060b0c271292c","sha256":"14c6edf775bfbc8967d2ddc1212620d2e59f9eb1a73333aabd8a441caabb698e","sha512":"5f3bce97c65c9f124a481c29f4f7f2e78e7a9acb38584bcc9b3674f5c16432e4491d95f2c664f45a8a53cdc02160ff8ad98c5a7400bae901cf2f7efbf92e3f1d","ssdeep":"96:gj0a2h2hQDlB7nZ4rMKBbBwecITgO0ZktwF6ch2r1U0MsfyN66PzASrUr5j8BHui:gwa2h2qJB77egTZwch2r1yNVrejfkB93","tlshash":"a4d19fd9af5f9ca2bc7cb54770e00d18e68d00fd5ad54b2ee0e65be4255b8c74081477","first_seen":"2024-12-30T21:22:19.859727Z","last_seen":"2026-07-07T02:57:15.738499Z","times_seen":51,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/linkedin-dualtone.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.217Z","timestamp":1783393004217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/linkedin-dualtone.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004362\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SkMG%2F2sHbLCocjN1wQaCXNMqaBColrWauuhfIIcLd24Gthcvm3joTTin7RdUIRrop35ExxqHUIR95f6kQ9GA%2ByFPumylwLRqqaxr1uFT0Ad%2BaqDgCxHCBJ%2Bu6OHyQ8K3pNQew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e45becb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1314,"size_decoded":1309,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e9e28559ad7043cca8bcb1631eb9863","sha1":"7b05fb47e76da6252fa19a33a220d8e06e318966","sha256":"d6024a6503b56d8820117dcc0e45f0e8b962c2bfc71fcb0e4af84f335373fd73","sha512":"7d56ac2c76cadf7d76542b3399d244bfa1e974a4f2fc506ddd1b6129a831ca9ef76d7c1df6f0e36fd6b7e2f0db77ea133ec98b6d76eac55a9cf64b90f1ce7c56","ssdeep":"","tlshash":"3d21adbd072c279cb956ba31ff3d3e6ca30c204d399ae58091ae97306563195f88ac50","first_seen":"2026-06-12T06:47:47.89356Z","last_seen":"2026-07-07T02:57:15.738992Z","times_seen":27,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/#?lang=en","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.324Z","timestamp":1783393004324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/ HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=1494428682.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; Path=/\nTSe663c25c027=084df50742ab2000e863146aaf93b203c80a387df53c6242affcfe11a9bddd09828c1ea4e453cce308912d2f421130002c955d34016e4c88bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; Path=/\r\nx-cached-at: 1783393004476\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xc1Hg4vyplZcSSKIB8QbA%2BlTC%2B1WeeP0nCbVl2wt95sTmcqk52CHhJPlp8A3jaZOVlBbT%2BtUPR0c%2BLU6muQm0WmbHP%2BDhiFJy2fRCAqopRAbMarBT8VM%2BwSvPiDMyE0z14XmFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e50bffb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55575,"size_decoded":20627,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51807)","md5":"03eb240ce58da76215c341ebada6bd56","sha1":"62885b2011dd3e83a9cddd020bce8cf8b8be7066","sha256":"822f9ad1997f27a8bf93c4a67e92db6a202906b58b8c6ec4317456498a892f8c","sha512":"61de423b2c08230f6079ee9aa9619ccbe3eade31b499fcef92c62ad413298480a607d72c6e110fa2bb2c3ee73dd71cc15dbf3413d4c58cd2032d03f1f8a48bcc","ssdeep":"768:FHwX1pGzPitm9nLSPxrJvgUAgmTJQJuvLqqEiZf0YPzZd9nQGjiZ4y5:FHepOqMSBJvgUAFTDuqEiZf7PNMj5","tlshash":"06432ab673d6247113f7583960beab08f1b5cb425d068490d46bec986cace864637efc","first_seen":"2026-07-07T00:13:37.70254Z","last_seen":"2026-07-07T02:57:15.718501Z","times_seen":15,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/amex-dualtone-v2.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.372Z","timestamp":1783393004372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/amex-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004515\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n72jrr41WM%2FBdxSoOMijGezWie%2BG4m9KFDUI6HzwMJ3Zllu00hbpJU2ZeAdpQ1rrExnh09YTT20szZ4nFeKf7phUbGZ%2FpMs%2B0pYJPg%2BgWPmbUZWh8K3rACKFUw0BG%2FLEwXMW8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e55c0db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1273,"size_decoded":1316,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b739632f5ddab94804ccafacc0f81773","sha1":"58a27eafe8a8defb359f4d4914f6f2eabfea16ba","sha256":"6b21646546e8fa7027e980ecec25ca4d3f89ded11f8eeda38519395936559ee5","sha512":"190059ef0c5bddf49ee41adb1b43b73a63381bae284601369c6e7944a074fd7d2efb1a518064f6a42a9e5b31f446d220d7d89c4a3498c21cd1163ae36c363a54","ssdeep":"","tlshash":"f42132766bdd6980ba09c7f015a21485326734e9de78de828bce3d13da261ad086c811","first_seen":"2024-08-19T13:38:40.80622Z","last_seen":"2026-07-07T02:57:15.739488Z","times_seen":48,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/polyfills.197dcadece2ff59a.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:32.077Z","timestamp":1783392992077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/polyfills.197dcadece2ff59a.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHjuODyC11I64wHIkyig5LxTUTszJE40Bd78ME7n5aJuZlBlv808030OrWA%2F%2BwcYvNw7btjEkHSfC%2Flir808iz3Udz13120ev1V%2BeUVa2nbCT5%2B22ED9GdjiR2GASRSIBuVGIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393987f7ab28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 198\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:13 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392132197\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37050,"size_decoded":13840,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10103)","md5":"d6ffde237c23a6a83796f6821f023889","sha1":"e6d52ee446baecacb12122e47fbcc6558abb79ac","sha256":"f513cae12324ef89d977f502573958d9043c011711590747b62c431e61c45fce","sha512":"c8df86d4a2e87e67089619e1feb97d71aac0cadf19cc79b3afbdb69be2bac2edd136964e06aed5ec518ff7c412bfb92e3f6b6c76051b7b38f47d9ff8a864840c","ssdeep":"768:xK8K6x159hBF4q7rhvM893a1UNlJ1T+xuQP/WOB9toPHQxCKArbvlkCdjGLzw7mv:xfrbHzeVtKTir","tlshash":"a8f2e7da73d1b07687f209b1853b804bf62b2565784c88d8f51c86fa3f3715991a2f2e","first_seen":"2026-06-12T06:47:47.856251Z","last_seen":"2026-07-07T02:57:15.739944Z","times_seen":27,"resource_available":true,"data":null}},"time_used":10979,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10973,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/515.f63eeaa81966b9bf.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.522Z","timestamp":1783393003522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/515.f63eeaa81966b9bf.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F434u8PKeQWiOmAYroACudczXr3cMYOWWO8ozNTXBnbWeXidR0F6UjBC0RqkVPwCHr733EMCDDlJUCn%2F0XUW4%2Bl1vmYBhMeR2T0C0MoZz6nf74iUOC7iPzYYPycPgY7AVHY%2FGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393e00ba1b28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 208\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:15 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392795081\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8648,"size_decoded":4361,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8648), with no line terminators","md5":"6f887620d659e5451f3c770d37d1d29c","sha1":"8c12da1be5fb4deccf33a0546ed8ea2b3ec0bcb7","sha256":"c50cd8cfb250df7c123fdbb12eec993c31e48cd02e32c6c816b38f1686190f0f","sha512":"0cabbe0cae13a741332d40651b565e9b7599bc05bf72826c49d3541abf77bda6b689c0a014fd61528df9d0b9bb895f773eb3924cfaba7cbc8268428cc84a70b3","ssdeep":"192:xK8KIVcpJPShcM59rAkFlwLGSTPCQJatDKr5ePVZe2LIzfRErWRTawlb:xK8KIYKrWaHnkduAPh","tlshash":"a602b9d73484203b4a6d61d1fd7205486231610d9aaa446cf1dc9e8a3b8dd593fcfafb","first_seen":"2026-06-16T14:05:19.99724Z","last_seen":"2026-07-07T02:57:15.740451Z","times_seen":26,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/b2c/eshopConfigurations.service","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.572Z","timestamp":1783393003572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"POST /b2c/eshopConfigurations.service HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://etisalcmpez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:43 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; Expires=Thu, 09-Jul-26 02:56:43 GMT; Max-Age=172800; Path=/; Secure; HttpOnly\nADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5; expires=Tue, 07-Jul-2026 02:57:13 GMT; path=/\nADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; expires=Tue, 07-Jul-2026 02:57:13 GMT; path=/\nADRUM_BT1=R:46|i:449690; expires=Tue, 07-Jul-2026 02:57:13 GMT; path=/\nADRUM_BT1=R:46|i:449690|e:55; expires=Tue, 07-Jul-2026 02:57:13 GMT; path=/\nADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; expires=Tue, 07-Jul-2026 02:57:13 GMT; path=/\nB2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033;samesite=none; path=/; secure\nCMS-cookie=1494428682.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; Path=/\nTSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622; Path=/\r\nx-cached-at: 1783393003765\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pO7SwJQARgw5e1xceFhK2Wy9FaBYihVpULtUX%2BrlkFWmupZf5aPgyryc%2Bk8jwq7YYi0WKrYm2gnSfoKnuD%2BmvaSNrBgKyYlwKZVhPSyEZCujCKmHs%2FyoR4KOR7ezYjHm1E2aBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e05ba7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675,"size_decoded":2147,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ea2f173ca73a85f669f50e474d6b7819","sha1":"cdd9b5000811e1af5a65c53e24b00d5ff52bd959","sha256":"55f27f87a417461700b25ee1cac86d7fadc7c5b6a72232dee331063b3934d9c0","sha512":"7fe1f0ab617dab8f7cbc30a9bbad7a401e226dff0a3cf529ee9c8e81ed163032ead2763754c16d0145797e500b61af9c07c7072a2e18e8e302828a7fdf6bef54","ssdeep":"","tlshash":"14014468b4f9a70209776340dfcccc37dba98ee54094e061a5c8a2a50957c782681705","first_seen":"2026-06-12T06:47:47.88629Z","last_seen":"2026-07-07T02:57:15.740906Z","times_seen":17,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/assets/icons/icon-arrow-small-mega-menu.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.128Z","timestamp":1783393004128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/assets/icons/icon-arrow-small-mega-menu.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2309769576.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab2000ddfdf87944b4b06ac93e01bb58124ad56a7611b6aaea9931957893887a603953084bffa4fe113000d1c58d05a1d6fa12bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004268\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4FFvcT1v702lHELXxolOcxd1NEtf6FMAPTfbNA1i7CdkgmeJfzdC4hHzDvkl9HY8IblOfG8ZpMb04Es5ReSD9WZHE4%2B9wH0BRgNc3eZ0IyKvGKBfIjOtl8it2s0dSUSrdNUyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e3cbd6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":833,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee01076d6f7e5552a2ee3553deb11146","sha1":"f11406996b96acef705b6ab25345f46396cc10fd","sha256":"0524958c325784c31b5b7a782939ec579210a3cabd90581681ab83a7b100ef40","sha512":"81031b86b54154f5862016897f06d91204b85db15c5ad714ae702d00a1b7d97226161fd21a136dc932bb2fd5c1aa48962340bdc7c6e48e8f020dd59571c76c24","ssdeep":"","tlshash":"b7d0972a86448d1cb82b0b02e6b8b638002a9082440e0008e83226b482121ce3a3b8fc","first_seen":"2025-07-14T00:26:18.74322Z","last_seen":"2026-07-07T02:57:15.741391Z","times_seen":31,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/visa-dualtone.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.222Z","timestamp":1783393004222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/visa-dualtone.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004371\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fm7HeNvX10fPNn7JKTqVn0Ykn6E18LY49%2Ftdxr2L2Y72TC49qluk%2F57PN33rLQJnnIBviI4DrP3iMGA0HU4nLg4Oq7OHDKbSb1FYUMyKrP90qljImso0Jjj0z8QHcT4xCXuv8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e46bf2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1099,"size_decoded":1294,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cae299f35ae42f860950fe24b886acc4","sha1":"2676fbe07c3b307617f5897fbf549b3dccbea44b","sha256":"fea238ed4c41647bb929064181e82c680f45d683c330eed3da918f31e35f3ae2","sha512":"3c110373dd4957ad667ddaffc8df030c36cb380bf21f1929c183ac9b835c7952b8762c998cf5ae82cd1373f672cad954a8a11b3ccec6784a22660c46900adb03","ssdeep":"","tlshash":"ea11d0f613688a5d1dc5c67c9b2daee5c11fe0c7396452908d7ecf64204b588f2276d4","first_seen":"2026-06-12T06:47:47.868756Z","last_seen":"2026-07-07T02:57:15.741886Z","times_seen":27,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/881.721410485d67c340a412.chunk.js?Q_CLIENTVERSION=2.52.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=etisalcmpez.click","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.343Z","timestamp":1783393004343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 04 Dec 2025 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:37:A9:16:10:8D:0D:87:5B:1E:EC:69:C0:9D:1C:CE:5C:2A:67:91","sha256":"7D:48:65:F2:AE:D8:08:02:F7:C8:47:36:A2:AD:69:20:84:6D:85:0E:A2:02:90:E1:56:72:4A:90:6C:D5:40:4A"}}},"request":{"raw":"GET /dxjsmodule/881.721410485d67c340a412.chunk.js?Q_CLIENTVERSION=2.52.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=etisalcmpez.click HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nedge-control: max-age=604800\r\ncache-control: public, max-age=604800, s-maxage=604800\r\nage: 8066\r\nlast-modified: Mon, 29 Jun 2026 18:29:48 GMT\r\netag: W/\"cf3d-19f14a50960\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a17393e54c6356c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53053,"size_decoded":19094,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52199)","md5":"0602ebf29632a79221579b7d5388ad26","sha1":"d7a2461f8b15c9a6889bca2078ed1ffe1b14c2f0","sha256":"078373a48d312cd36db239bcf4dabb29f55160da52c179d545d7ff5a531d54fe","sha512":"93c3f0b81b560c71c638d0683bb388042011f7c0556267ff2680712d40b397aa87807218cc3c3422ea9fa68962b749ad51f60372280295a0496082c47831bc5d","ssdeep":"768:4TAsoLjBdP173M1FBYw0jYcC7zNjIHFUlIvwH7UuwxC96X5SeMRm6v7qECjNfroN:4JZUP0Gnjgk3eNLNbHB9Sw","tlshash":"603319a221e264a807e01cd480970fa6767815722c4a15bdf77c8dd63870adbf0bbe7d","first_seen":"2026-07-03T09:18:07.761374Z","last_seen":"2026-07-08T07:02:35.786293Z","times_seen":4,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":19,"connect":4,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/824.a9b798eca73a1c49.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.491Z","timestamp":1783393003491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/824.a9b798eca73a1c49.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ssVYNKlAPIjfx23lrUNzlNhienofQ910T0WslQGGYFESxbnXm7W4GSL%2BE6Mbqa%2BeXtGYn%2BEyLwHnazYhncbFYXfQFuBFZR8%2B6AzITcvppG7%2FyHOyiPCWd83e74IM2ZwSOGEXlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393dfdb98b28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 208\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:14 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392794885\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2316,"size_decoded":1930,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2316), with no line terminators","md5":"7d0af501d7b539d6ee6e67763bbf50bc","sha1":"2880da0fe25139e3ac8f55dff394b12893ce8c4a","sha256":"c4e98d05a455399353714085817e1414b389792697a01706f597ffa55b6b6a6a","sha512":"3f213c07e5fb73984762f8a24b13708077561ddd7bff720d72582598fb421d50c2f55aa404049b1b36cef216a32e52fbca6aaddb537a362602ff3572bee1c0c3","ssdeep":"","tlshash":"2b41b818365bb5ed1f293e60cab5599c1f581c88a08e8ae8425edef44b4e40cf1d7778","first_seen":"2026-06-16T14:05:20.004588Z","last_seen":"2026-07-07T02:57:15.743644Z","times_seen":26,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/graphql/execute.json/etisalat/nwt-consumer-content-main;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/buyget-hero-quickypay/quickpay-main-sec;variation=master","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.060Z","timestamp":1783393004060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-content-main;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/buyget-hero-quickypay/quickpay-main-sec;variation=master HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2460764520.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; Path=/\nTSe663c25c027=084df50742ab2000fe244f373d71a9f5decd00dad3f45e121d8c81f7584c218336875848ddc7cf1608d961a9f111300095d046e43e1a6141bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; Path=/\r\nx-cached-at: 1783393004499\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utc9YU7HV8JoV%2BuyZnUIoYlnc6LypnpXrJZRl%2BXHsTKSA%2BIOcwoX8HyCG2O6BhBUakNX2Q550nqV8VCTPuCMTReKjIhPR5q9eLl4AFJeAgyBmzEES2tFNjioLobr3hSDsdV8mQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e36bd3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1324,"size_decoded":1588,"mime_type":"application/json","magic":"JSON text data","md5":"0116ebaf55deeb08111491a4c661b86f","sha1":"5a1329dd8637f92bc2960366922ed784fb54f5f7","sha256":"c68d62079e5a8b5578bade55442f4b5720b0918395bac880c63d85c7c524f218","sha512":"4f2181269eb735b27868ff06769665f4fb94f0ee1c84b6b817a1c16ccb9c2070bb6ec136ff1f3c94462d13741ea261dd125e4572e0e7710117a1b1088cc7a7fb","ssdeep":"","tlshash":"a9217c31b510df31b28e97a25cba3d7290bc1703e1c11c109da6eae459e5ef850a35aa","first_seen":"2026-06-16T14:05:19.986222Z","last_seen":"2026-07-07T02:57:15.744145Z","times_seen":26,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/assets/icons/icon-info-dual-tone.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.209Z","timestamp":1783393004209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/assets/icons/icon-info-dual-tone.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004361\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oH4XhfUpsjVsi0J7mkLlo99%2FZOTKYzWEXpFv%2Fda%2FBCh7AJ2cwli9sqsXn6vl1DchzJQHSaX7901Mi1sxLAWigDg1iPmeEV1QnYd5TYkFHjcu6HpvyuWAhzZF6Ac%2Bt1fpfjs9Ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e45be5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":898,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67f9b49d520a871a86bc8f97f76edc0d","sha1":"9f53e76146e94f7f5dbeb4e81e14d230a4d68cd0","sha256":"654d932e9408ca608fa1303ba81748b20021c49c52fa47bb5b66ed98255a86a7","sha512":"4fb6fec189cd35455c79749c203fe668bfeafd7c862a6879065120561cc1110f4aeb4b7d0ee02fdb4dfb32209d0966a5fe6ff4a23e9f39c2d8813569f07211ff","ssdeep":"","tlshash":"9ee078168e58ccadf0114d24f7153631455f1c7331556090d47d0570502a5dcb527cc4","first_seen":"2025-07-14T00:26:18.767348Z","last_seen":"2026-07-07T02:57:15.744605Z","times_seen":31,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/follow-us/x.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.368Z","timestamp":1783393004368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/x.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004512\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7KXeEzpsts19jQYXyFEFl0c%2FW6RY%2BbVcErs2MDqb72A8dielNVxJwMjxPWNdtQM8fHc6zZyHGs9GCqoJrjCtuHBwCl2ImSXesP2UX%2FVy%2FmRzW37p9JAIkqo%2Fy7XsEwuS3QdAPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e55c0ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366,"size_decoded":915,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23f463fb671c7de13c31aed4b6803c1f","sha1":"79a589f5941f20ac3a48b9f94d7ab474a565d216","sha256":"1d1d4361fe5e424a02218ac1dadf0e8f404728f4c7dc9a77ca9c4f5d76136965","sha512":"0c667d3b0863c0ca22fe01d11cb5caf6d8b7450738120a0a5c511ac724e32f7a89e62b3793d9a2b7133157c41c06dfc3e515ae599d555fb6e8d8098739bacaa9","ssdeep":"","tlshash":"97e0c0e992d45000d2018f10a537222e65bf21fcbebc0bace5523330f0d5946290e5d8","first_seen":"2024-12-30T21:22:19.832589Z","last_seen":"2026-07-07T02:57:15.745131Z","times_seen":47,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/839.8532b49a16632ca4.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.520Z","timestamp":1783393003520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/839.8532b49a16632ca4.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7x01vfiA3ctyy0LSkNFwPH2krwAvlwfMkIti1ist%2BKFwfUlQXdpy1Iu5b0aflvTfGu0HJmgcEqubPld8I0wPaRD6h69sFJYDcgw4orHuN%2Bu%2ByvinDvoXs2cmLr%2BtSSRAPANY9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393e00ba0b28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 208\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:15 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392795064\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50894,"size_decoded":13829,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50894), with no line terminators","md5":"d8c4ed980801a7211ef6383402be7d44","sha1":"bcd3405f248628fd63a112c3a46419b3b5b184d9","sha256":"5dabd08bdf275f531b16a5f4c2937763673349001908efd54544950ec818ecf6","sha512":"2be999c9cae38fbbd4de7b10f6c1aa33555441be1db897b4dde6d513dec9ce10f1483bea6ab9f85ec0bcf7feaf4d76316d9c47606e624f909c3abee7793a385a","ssdeep":"1536:xfjtGx0dTLxSmUc7vuTZK5uWQYm2n712Nq3GwTWYCHFcjCAnmsYbgFLgcMxkNfR1:1tGx0dTLxSmUc7vuTZK5uWQYm2n712NY","tlshash":"bb33fa21be705079d27960666bea4a4b073cd4a15a024a9cf2dc4fec37c8dd9671b3bc","first_seen":"2026-06-16T14:05:20.060401Z","last_seen":"2026-07-07T02:57:15.745621Z","times_seen":26,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/twitter-dualtone.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.218Z","timestamp":1783393004218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/twitter-dualtone.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004380\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XEWEKFJu63vRQC5xQGwIsNxP7v3DXqvXKV3SA%2FHa0n4qTuVhujS9FZf9zQZe8K27f6n11aHA0wdMqXKu4yDYubi%2F1ByyEQslZn1jfjLLFncWLVm7RTfiL%2FavgbOwvxj8LdSleA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e45bedb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":686,"size_decoded":1043,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a93994614c7738ea1931832e81c3a8cb","sha1":"a0285196c8eb1b6b1d4fa65639d64a051d722515","sha256":"5f8c5453c0f4c0d1e3429ea43ba801d4a19b3262d6bdec3a6d29dbd98b49e391","sha512":"6d059b23f92a36e39ef9048e2de67546a1af39af5ac1ece7d0a48bca34917b17a9fa9b8ccf74d6064c4512ea487da4849d4ae767dd1ae3f0d64603c0c0d36890","ssdeep":"","tlshash":"150102f6c3881e28e52e9b84d306fc76b09a22f31f85c2c4c1a452249592e6e5c3fdc3","first_seen":"2026-06-12T06:47:47.853315Z","last_seen":"2026-07-07T02:57:15.74615Z","times_seen":27,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/882.ad8e672ab8498e43.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.518Z","timestamp":1783393003518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/882.ad8e672ab8498e43.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CJp%2FhwGyI3TM01Pnz2l9BRFlN98rNolYD6O2Xh4Itf%2FQCG1vCtbFxNV0zuBY17hL%2FJ6R6jf%2BgPA%2FRXEVYa%2FPgozsDl258lJG67WNMyi1%2BIr39iXbvBK5aEB6OtpIxWFLdGoDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393dffb9fb28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 208\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:15 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392795511\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19490,"size_decoded":5347,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19490), with no line terminators","md5":"c067b2553ff672573226a52489bcc5e0","sha1":"e34d42e92c9eac322970fc161f309a4eb7c43173","sha256":"e081a22394962cc6d9714a97237e8b32cf815327b3fa711038f29c10fb03795d","sha512":"8859c0ac6e6aa701a41c3e196d05ecd3d31a4b41977f35d70a924c38dbb22acd0173c65c0da52827cb4869cbae12e06d27736275ef1c031b808b478c753bb639","ssdeep":"384:xK8KrQzpAXA54fs/+bBmU6XOeKVSiHltLVmwm8TRmz3fuF7HeDLygGHA3f3oCwKu:xK8KrYpAQ54fs/+b9VSMtIntR7pR/Zpq","tlshash":"c19231cbf2865dfe74c8073a910985c42b2cb8d37c19457cb7461eb3a1045a8bd5aafe","first_seen":"2026-06-16T14:05:20.049256Z","last_seen":"2026-07-07T02:57:15.746723Z","times_seen":26,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/668.e43d0cd77bf31d0f.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.524Z","timestamp":1783393003524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/668.e43d0cd77bf31d0f.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E1Xv96aSC3hkxs16j54xtGKwsmYDV9dxeZMUwRLPB%2Fd2pzH0GjyOOTxmt%2FmSoJQdsp6dT4JlcZ5604C2WlU6xlZsMBW74zZR4Rh1GfWjKL%2BrFLLv%2BGx%2FYhwuPPcZErjVZ%2Btr2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393e00ba2b28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 208\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:15 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392795065\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45974,"size_decoded":12694,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45974), with no line terminators","md5":"941d6539f61fe9c68d53649f639b2fc6","sha1":"6b94c3a2ee766e0ad8b936e49f2c669105434396","sha256":"78a4df96773d7088b76879b0a859fe6a6f3c114b3c69802ed97e87fe1dfa56d0","sha512":"9c12acdfdd50ff5681a114029df5222e799a1d67685b6a758971f0a4a71a15c45a56a872285e65c6f15c840e07a3ef39ea82028d61a667e07a0475666be23dc6","ssdeep":"768:xK8KBN0fe1y64YuTkyEIyPC6EEdaqywnGpcag17wK+1POAA5uZHn+nVFHrZek:xf0XKN/wFX","tlshash":"4b23c600bad4503a56661075f7bb4e070a1ce961a815865df1cc9fe837add8e33abb3c","first_seen":"2026-06-16T14:05:20.063336Z","last_seen":"2026-07-07T02:57:15.747228Z","times_seen":26,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T02:56:31.512Z","timestamp":1783392991512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 07 Jul 2026 02:56:31 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpL49lsuircUyu%2FcB2R91qGxhKfm%2BG5vGZL4sx1F009ADLlXur2qi%2B9vNa3bEjmfCSp10UFIHewJl%2FXux4eCYRfj2nry%2B5CtDmswynFOXCrBay3Akbjr7gtkwVu680nRFTDqKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a17393955f46b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":3,"connect":55,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/smart-banner/new-smart-app-banner.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.924Z","timestamp":1783393003924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/smart-banner/new-smart-app-banner.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004072\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=je%2FZjItHxH0BXszsmFcVexmnBLhKAN2j0fFYYtrjMyhKxR8kbWpj6vVP6ltXLMpt8jYpTW%2FfOzAXzKadybooCVFkGMHx9R7%2FjYxywkmPCZFMBrHxS0Ca0MKf%2FzzBMMMhL%2FhU4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e28bbcb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9014,"size_decoded":3386,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b0ec3630e473d46ca2e3b26cf4751eaa","sha1":"ddd543d3cc6b7daee04126eef170bf131f37b3d0","sha256":"5560d4d2a6f3038fbae6041b6271a611718a772b55665141c6a69f3ac8421c95","sha512":"f4d0a04e62a5a5eef946dbd90594fdaa90ab9fc0e72197ccec184f6e45b45e5f7e54967286701f0487a495b7a3f83c85e8e6524f403a52e2e9a2ecddc0909e67","ssdeep":"96:RxMPNH4Hpy4+KXSPNj6UtdF9rmcbh/qA+yui0Pay0iNtR4SD4zLwzK:RK1kpy9KiNjfacbh6i0PapiNbLD8LEK","tlshash":"74022e496e511231457357aeafa36a1cf7a26d63e202c1263bec63505fb6805c2b2fcd","first_seen":"2025-11-17T21:22:01.731386Z","last_seen":"2026-07-07T02:57:15.747649Z","times_seen":33,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/follow-us/tiktok.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.370Z","timestamp":1783393004370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/tiktok.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004515\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pk0XflIUrci7Dy7SmdjmCwGoglzChcQuAmm3lm7oBuDEuMn1uuDAHDSwjO1HrBBsvHnUx4cxKgcYx9yNm14RdibsSlfdq2KvjOq7k6cXO0T9bhKpPiItTg4MUPaivVKJ%2F2ChUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e55c0cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":1193,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d657070cbc75fc777aad0110a9456403","sha1":"c7b1d594194581aa053b5b79bc9ef5529cb600fd","sha256":"0df803163da2bd77ed7852c06037e61708c20a517dbb0ad12032ffd183eab524","sha512":"098d87a20f2731bd1af5e5815c5c89ee228a3d748de2560f7e26ccbfa663e049aa3f5a33f86a24b70a6304aef060ab1cfd8ecc8016c20e2276660e4f1cb73660","ssdeep":"","tlshash":"5c1165e123c52699e3024b20e23538393ba6307e3fa8146081702b60e7517c59cffdec","first_seen":"2024-12-30T21:22:19.837572Z","last_seen":"2026-07-07T02:57:15.748191Z","times_seen":47,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/ecare/main.6eb70d2f69f85627.js","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:32.083Z","timestamp":1783392992083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /ecare/main.6eb70d2f69f85627.js HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzJ%2BV8FdlFQj7s2%2BJcCuUsdxuIuFotpsb3%2FbVVrh30IcY59iLBRw16cnIVvWTuV%2BKYz9hio8ss6DKf7N69XDT9j%2Fc5rl5W9ZMPNOpPi%2BPXa1BKMRlzmx83dM81sSIiNNGoNGzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a17393988f7db28a-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 197\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 02:53:14 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783392542962\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2729799,"size_decoded":283828,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"53b005fac1ad340d4c2a427d9d0c55f2","sha1":"47117c2c495378c8b971d14d87da449b3585e75a","sha256":"cc143016c27ce5e0ebc1f4d08041c8d5cdc74d31dff7a73a9276564062ef7dbf","sha512":"473534a6c377a4090df69b84fdf84341f6ba124d63e5f0ea06f75f5921b6a4b4f79854eb6afa29d5da6948726344a873abfd5ccbd2e05d7743c9a4f3d811bdae","ssdeep":"6144:BtK90fgyvZC8hWXNWPRf2TTnmtK90fgyvZC8hWXNWPRfYTnJy+VzgYu0:zH2zgc","tlshash":"7b255292f180302d6c9b86999465ffbeab3ea482d3054fb5f10367a4538d1c72d71ace","first_seen":"2026-07-07T00:13:37.722775Z","last_seen":"2026-07-07T02:57:15.748708Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10966,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=true;includemegamenu=false","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.938Z","timestamp":1783393003938,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=true;includemegamenu=false HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/header/findus.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.201Z","timestamp":1783393004201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/header/findus.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004350\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKoMhz89cFao0YXkcoV%2BEtfSpztu0b9kbZ1fMWqElqWeQgIJW5mxzYyyczdunIioVQnANMLWP17P%2FNWS56CQdc8CsTrlf41q%2FFC7okO%2BdoQcZh%2BZRyX20i%2FSl0wkOr5lFbo74Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e44bdfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507,"size_decoded":948,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a332325ac63fa590b273ccb2a7410894","sha1":"7822e7c29b7e1977ecb4692e435d1b773cd25eec","sha256":"64621ee6f07224c6b9e9fcd6da60c39aa299321a2812ac173af9113193bb54e4","sha512":"37c237b0a5fdf8ccb983964c74dbaaf8eafe84c471881fcfa2acab8a8707a31944d9cdeb4e046cee12420e2bc18cadacf8f5f2454f75df0f2f3aa31c8b5e5940","ssdeep":"","tlshash":"06f0e2ba03485c2cb5274d28cb2e35f56b2d0ab3234c5398e87e5534515624df93fac4","first_seen":"2025-05-03T16:54:18.296477Z","last_seen":"2026-07-07T02:57:15.749198Z","times_seen":54,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/hide.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.203Z","timestamp":1783393004203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/hide.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004351\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ti5TWYfjjSZu8y9A94xDakNLKI%2Fly4Q8sy5WKuWjDQcNjRAuAcJOs2Fc4KgQFxUnaQP7rgh1CEDyFcK9S15qCKkqGwZFObwbPy6JRsDIzQZtfZbwxdFbx%2BqjGL8i4l008VjYGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e44be0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":958,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"016367b5038f54c9246790fec5454e86","sha1":"d88e0d751c3b4ad910b33ad72e31db5b4ba8b33f","sha256":"5ed5313b0d89e9dc109b84afc69f4aa356b5df3e4bb98b7736fa404aa69401a4","sha512":"0972c0f4c12475ab1595d583eb5b258afd8ccb1882c855f2d73be21e6c55888e102d26bb53162b96e29844ff281c7fec1c5a15118388e7b89697931d6cf82f3f","ssdeep":"","tlshash":"0cf022b70b08ac2cb6234e38e33ab271712905ab2708a284d87a0570554554dea3fec8","first_seen":"2025-05-03T16:54:18.330243Z","last_seen":"2026-07-07T02:57:15.749711Z","times_seen":54,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/quickpay.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.204Z","timestamp":1783393004204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/quickpay.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004351\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GokUjbgRu8DYt2cvuljSMNiSHf189WCTlIRVSsZDrWe61QFNB2pRwi8sB3AXo5utf15w%2BV3fYrvaYpjp5y4siHKn%2B16HleVPN%2BOHz4072K8lFTrtEshrNXCWY232vAg3uEmI1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e44be1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":952,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77c22a18cd8f832b176305af52714a3e","sha1":"64505a813fee8a5077903beb1ccdb242aaed4e1e","sha256":"b44edad7e92579d496d3147eef2322f778e899c386714d948ab3675e46e58bb9","sha512":"1f467c0c08a2dfa73476e80763cddb7bebf4069d0d02b372f2ed9165e665ee694ffc4046f9554ec6a7fec3de0aa6a780283e7a7ea2e8e21b61f92d758080c217","ssdeep":"","tlshash":"50e0ab669708cc3ca0166aa0ebb8713d0e6e2152239a94c8d0a84230b062899d83f9cc","first_seen":"2025-05-03T16:54:18.331651Z","last_seen":"2026-07-07T02:57:15.750198Z","times_seen":54,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/visa-dualtone-v2.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.375Z","timestamp":1783393004375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/visa-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004530\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YcJ1%2Fujn7l%2FXN8ZMhxNiv4DqSFzq1xdZmWNoLPK%2B0jDzvNWbBDB2yCncWq7n6g57n6NIS2toHxGyyULQCLPlbrgWL8W6NhrVkwIBGmTXN5BjUZY66j5MWqS%2BwhDuyHneiKvBqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e56c0fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1537,"size_decoded":1444,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d96d24f8f1123c174c7063d6cf7d066","sha1":"fea70e131377f40005e29b077bf2ec12451cb5d7","sha256":"08b3b8b007ab96b3344b64e65fa047af91af9ed20f02e872158776c93b350d54","sha512":"cbc9774a61bcf12619cd227b12522b0771bf06cd256751de578a49ac85ee4b1fa500cafb50e07aadd362b284e8ea6568d6e15b98ad6f98a73ed207a4b6a8cabd","ssdeep":"","tlshash":"ea31d0b9739963e1d105d7b04915e530357b48fb3f27ea79c7e81891b82668c4855c84","first_seen":"2024-08-19T13:38:40.808043Z","last_seen":"2026-07-07T02:57:15.750906Z","times_seen":48,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/content/dam/etisalat/consumer/nwt/footer/apple-pay-dualtone-v2.svg","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:44.377Z","timestamp":1783393004377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/apple-pay-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20002ecf6d4736ae2606a33835150a851da044acfd98bbc1cb35442bbbf6e255d82708b094dd791130007080a395e47cc2e9bf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; ADRUM_BTa=R:37|g:3baafea4-6227-4e05-a786-e0e526b46937|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:133|t:1783393004010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783393004527\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Caw%2FMKVTLtFxD3nJeaGy92lIP8VQMwaw%2Bx92g6NI0t5Be3BZgYh%2BImamVcQ46j0JWI5A6EgpQO822dxrekU9moWLc0y6a0GueEQY%2B%2FjoIBUvXwCP1CNNrdXc%2FJWXVyMLwTcr9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e56c11b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2725,"size_decoded":1922,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"320b8c2e9e1e0c68c2b6a5df2e86d3b5","sha1":"8462517f5c9ae2413b2e79952a1bf8883047c0da","sha256":"532be1dc63bd58a029d426c4ef1e3d121cffb99c1159a71084fb92688a4b2059","sha512":"ec467fefba1be1091c67f6a3a051adb9dc0f308d703a7c55afc611c37e27f478ec0a60c5b79e0f0728c760c105af35c6ec43047b0b4df09535c4a913ab83d73f","ssdeep":"","tlshash":"215142dab3d2a3e0d915d3f09b5990342f2724fa2e21d7684f62bdf0ba1315d54c8989","first_seen":"2024-08-19T13:38:40.809031Z","last_seen":"2026-07-07T02:57:15.751379Z","times_seen":48,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=false;includemegamenu=true","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.928Z","timestamp":1783393003928,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=false;includemegamenu=true HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcmpez.click/graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=true;includefooterbottomsection=false","fqdn":"etisalcmpez.click","domain":"etisalcmpez.click","tld":"click"},"ip":{"addr":"172.67.174.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcmpez.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:43.963Z","timestamp":1783393003963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcmpez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:04 GMT","end":"Sun, 27 Sep 2026 00:00:01 GMT"},"fingerprint":{"sha1":"68:1D:0C:E4:5D:58:C7:22:BD:F6:B3:B2:05:01:9C:96:58:24:8C:06","sha256":"F2:56:DE:50:D2:52:21:2F:11:6D:EA:00:D0:AE:33:42:BC:3E:55:A8:3E:0E:CC:55:E9:EA:6F:B8:CF:02:78:A8"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=true;includefooterbottomsection=false HTTP/1.1\r\nHost: etisalcmpez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcmpez.click/ecare/c/quick-pay\r\nCookie: __om_vid=c7533c2a-5b6c-4c6d-ab71-91e7af4ffaf6; myAppLocaleCookie=en; stickounet=1783393004.642.17459.189705|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:03bec5ee-bde4-4920-b438-7ba913b104e5|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:55|t:1783393003643; B2CJSESSIONID=qF06gah_UhyknG-tBQr6QnjUGZ2XUv7syYza6fu5kyy27tFPlQz3!-1499632033; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; TSe663c25c027=084df50742ab20004ab80b846c5bc3227c44ceb2715fa7ff1e67af0464622b2ec7fd8ca6247e292a085006c1f01130008693a6fa2f45589555d21827698464d0a238395b43c564cb968a3c92857fba25ea3576410141c5b6dda04829b1682622\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:44 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2460764520.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c7115990e66a52cad2184071670c7176d64290f114c69da9e0e73e5ddf63d549324166d3e890b3bf6d6239afc034d54ad; Path=/\nTSe663c25c027=084df50742ab200084bf49ca889213a247ef2a85afcf0ea91c2ea67a667884d473a4e32a556c2eda08badf1f1111300052ac345f1142f44abf8392698d27227d3a5dc01d09f1c4c904910d1c410e94e0d84894b69b0ad5855a4a979ed6ca2873; Path=/\r\nx-cached-at: 1783393004137\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LALpkZ9uWMoAzzKHTTNJ5m%2Fys00bmMAiT2ZLS4RniSloFitLRZ2AUMDIq4GgkuJZofFWwAC2HbpAJEfslDjp%2BGePCJiz1%2F5dbdMex7pqgddKexNs7a7DfhG7scKJPerJvNXs2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17393e2cbc4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13321,"size_decoded":3253,"mime_type":"application/json","magic":"JSON text data","md5":"bfe47170179ebc68f3456ffa5d5152ff","sha1":"a081bdf3c993fa11ce45f6f2d03c3d37d8ca35a4","sha256":"56a2fb7efd247404530231b88c5cc85805199d3587a6d14e6a90665aa6dda28f","sha512":"e2fbd35a1b503335c5481e7488afac6221c358a43c7f25f54e6390c4c89eb0e59782ce76109399b5ddac42bd78fdd1f3c992376a14078ef3da14cfc4eda916a5","ssdeep":"384:Vzbx/vS4TuS/8rCwYx3p/bVsKFp9YdyKDG:VnxfjmG","tlshash":"b2525d7437762d63b71baeb1b8d33e14d8bc480245734d25ade0abf549e63e490a07e8","first_seen":"2026-06-12T06:47:47.882821Z","last_seen":"2026-07-07T02:57:15.751956Z","times_seen":27,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcmpez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcmpez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}