{"report_id":"7d8b3eb9-acd7-49e3-919c-ce6ae978a649","version":0,"status":"done","tags":[],"date":"2026-07-07T02:56:36Z","url":{"schema":"http","addr":"etisalcpres.click/","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"etisalcpres.click/ecare/c/quick-pay","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"title":"Pay postpaid bill or recharge your prepaid plan online","dom":{"size":662919,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52318)","md5":"914edf2e3c6c47f73ee67896bab7929e","sha1":"ac9fa1393725cdc4370dbab319e36035d04958a3","sha256":"d502b6668408ef05c00f539042218d73a77b4a7cdaa8d6c1d55a2e4203bf3033","sha512":"ef3b485b70583958d0786d642ee9e113bb84ed64308c1b563938338c64cf55d967af5c029c95bd64c8c0f488d2360c6a7b6954f078b61086b3ab2e4c25938fa4","ssdeep":"3072:pHaRBJvBAFHHw9IctU90fqPw1AxX4D0OZC8hWXNWPRfC/TnGeFRt6PSeS:p6LJptU90fswDZC8hWXNWPRfETnBFKS","tlshash":"f9e4a5e2f180342e2d9b86949465ffbee63ea483d7050fa5f1036ba407c92c719766cd","dom_hash":"domhash98ab2cbaa00c5f56166d2018eb6575dd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"etisalcpres.click/","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T02:56:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"etisalcpres.click","ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-07T00:23:34.457726Z","last_seen":"2026-07-07T00:23:34.457726Z","alert_count":284,"request_count":71,"received_data":5602292,"sent_data":78324,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fded9d03c895a879eb40441b36ff022c","sha1":"3b1bdca201a2d619a5dfba5fa396760d1cd724ef","sha256":"b662bc644cf2d81f8f9eecc3302bf177bcfa719f980ef813185afc0044129e25","sha512":"8c4797d4e3deb02a1b10eaf8b42b7ef13ce4f091d0ab22a6e1a215b12e47e89b665ad21c929f790e441b1f7c96254adecb3154b40ba66e53ba57567ba42add81","ssdeep":"96:DqaRHuyYh3IlbF7WO+/73M6gJ0nvpkObShTz86hTBE98fNlsVSTaibY4:DqaROy03I3OYohEu6g8ldU4","tlshash":"a9c14437560fa4b2193c3cbfc2a97d8c1589f342599356c0f49e5c98d85fb3b1a0a2e9","size":6150,"data":"","first_seen":"2026-06-16T14:05:20.094755Z","last_seen":"2026-07-07T02:57:15.753002Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e02ac2e66c1f22baca52ec2ef7c9525","sha1":"3e57169d0b3659ca1f4e4da37053d1a83f93c1ad","sha256":"2dd392951a0311ab8b0c4f876761b8b4705e225176c6d3aff366e970bea5a377","sha512":"39bd7c918592dedf837ca658e8d251e17ab7e553d33e0ad327f9ee052cd5d240168b7134047980d913ad7616e04a9158155704612da467a0fb581ce4b6fbd63f","ssdeep":"","tlshash":"06e061b5b39db57602e19534455f3b0490772bc30d410945d63a5bc0fc74d06c8719d9","size":396,"data":"","first_seen":"2026-06-12T06:47:47.894672Z","last_seen":"2026-07-07T02:57:15.753502Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47356c220e3125762a2ad323ca3c63d7","sha1":"e21c1598c247375e14aa84438eaa63c3374224a6","sha256":"cc23e286ae2994fbce2fa7f1cf8d1910c86f0561ae8670f5fb67167869b2da1e","sha512":"444df29142fb602cae922483bc33ca7c1e84d56b0f0138d078aef024d75ae1110dc5a400e70ba4603019d9df5e4a218761478ac4a05b3b40c92f77b9b3c76b82","ssdeep":"","tlshash":"ad11dcbb7660b52a105a8962344d23004973c1963b10d0924d39af80ae188494a76baf","size":874,"data":"","first_seen":"2026-06-16T14:05:20.097969Z","last_seen":"2026-07-07T02:57:15.75401Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90ca2211fc52d7e4617faea35fae7f39","sha1":"84dd1662be2653661d88f2d3fca1b8fe1707a506","sha256":"74facf3a1eda221ec765a7276682475cbf54c4356fb894e396d7837c7cf699d1","sha512":"e890bedf717b4680fa98344da64d82ce5ed61e211d3f73aef1fd01f24bb056867438b2a4ace5c6f22d0d060c3fde2f20cd1671bf8d06ee305f1be797ca74c97c","ssdeep":"192:ioUPj0fFZP9p2tqvpTQjH6nS/9+whwH9ADtBxhJwBTflqzD3fdnrJtdvBq2pySnc:iom4FZPj2t2pm6nQ+whweDxhJwBTIzDE","tlshash":"b132d8ea73c339b113f22524286fae01b57e4ad26c4d8062d56be9812c7cd498577efc","size":11560,"data":"","first_seen":"2026-06-24T08:31:30.81879Z","last_seen":"2026-07-07T02:57:15.754533Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"332aac0d16f0e6d9041a702e498a0f7c","sha1":"32aef9aeb4d915fc3f75691e5eeb9a22047d7724","sha256":"1e49c4810c2ec1018f7bf3343b001bb874c1ced0085deacf6b50f8078d598a72","sha512":"d9f37847cc3b2b3791564662be1a73b5f7b2c9dbc6ca025efd01a4a2c9423c59ced5a6cafa0a315d9f32239d64b683fd9ee8611c7755b9930f074c1035e4790f","ssdeep":"","tlshash":"5f316576b27a601843e3553633fec60871ba9e841b0e1181487b98a19d7cc849936ff8","size":1563,"data":"","first_seen":"2026-06-12T06:47:47.896525Z","last_seen":"2026-07-07T02:57:15.755046Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b713cf110179fcaac7000366d30e760b","sha1":"9624326824de27602b583b695675ac918871ba98","sha256":"470417350a6df9365880a05803482ab050e19a9673e528b65cacf203f0ae3a5e","sha512":"1ae2bc8966c5db277e52efd41bec9931cf02df79c5eb68874164cc13d6c2ae763797769c1ab30852e714c9f3586dca402a4dd5191c2c43959821b442417ef616","ssdeep":"384:s+/ObnJQ0wug4Pu7MqD+9l5nmXn2z3/Zc3iL91kY5da0zZrHMG9xVb:PmTJQJuvLqqEiZf0YPzZd9z","tlshash":"b8c209b073e62175a3eb883420bedb45f174ce059d058590c85bec68bcacd968677ebc","size":27074,"data":"","first_seen":"2026-06-24T08:31:30.821647Z","last_seen":"2026-07-07T02:57:15.755525Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a5a4cfa1bd64153449f813f71aebbef","sha1":"dc1340795710f9140d39debc06e9c49f9afa693a","sha256":"eef0b34706a4e0b12f75e81afa73bbbb9bb2b14fea49565d86e0c15653b8d79a","sha512":"6d92bfe56e388c6b30b3cc95ad976ae3628d6606edbda45aca000f6f6112063dcdc7717c3ebaa45909473f2b248918048192471f3e563728c305009aaf9adc6d","ssdeep":"","tlshash":"5d41a676b2e12e7401e70435b3af5f48f0f68a82c50b0951482dff6a1968c959e3dbe8","size":1921,"data":"","first_seen":"2026-06-24T08:31:30.82297Z","last_seen":"2026-07-07T02:57:15.756024Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cff65d9bb1cc18c67e91d5ef9d2bc1c","sha1":"832dd4610d31e536d1894e0566b58620ee55427e","sha256":"bbc77a536e02295a62b69f9d97f570f61f01b3898c6a7f174d26e4f56621af92","sha512":"53cd0fdb660a916411233d5ddc90ae4f628c2875a84509db5fe5cee9d8283cffda96942207710e54cab83d282e467fee29d069b481cdfb5e9a78029a545bf226","ssdeep":"","tlshash":"94e0683a7394093412d3ad76e07ddb8964fb2da29d43c092163d6c048659ed18936ee8","size":409,"data":"","first_seen":"2026-06-12T06:47:47.898358Z","last_seen":"2026-07-07T02:57:15.756501Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ea4c89e05550c9015ae4ea660bc6bac","sha1":"e6726e10c2c3cc76a932956bb4462e2e90d7779c","sha256":"5a89045cc6fe067289b04f30e18e659494ddbc7d2a6d77a39af7a564bb6c1ddf","sha512":"2e8c36f77fcca90713704872f2581a3de3142d0a02b64df3f7008b02c48900fda02bae20f1d53bda4a0c4c86b7fe99ad2038833a4ad6bfdae83040ca98695fa5","ssdeep":"","tlshash":"8601bd5532d3f33d879a8c2d607e9684f1b62ea17d0d80d0952ad6443968e15c339fee","size":799,"data":"","first_seen":"2026-06-12T06:47:47.899171Z","last_seen":"2026-07-07T02:57:15.756989Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c34c6d8df1e0e1a6a4a218ac6b40575","sha1":"4daa004576812c52db3edd10fcd38ac8d7708cb1","sha256":"47bc5f2ebd255dd5c1e048d6ddf3cd099495e2c57b92b1ca77a48ab1af037415","sha512":"5fca61e816dab37b5392f14c0e2f1021944ae14d2df713e8cd67f75534cd075f6cf3eb810778ecb9cd3418b47ebe4ff0dcfb4b8e079531c4d614a1d697be0e3e","ssdeep":"","tlshash":"71a002ea03030c0800e0770c1f8efe44b102122190f0d0313e8a712efb30c0bba08186","size":74,"data":"","first_seen":"2026-06-12T06:47:47.899986Z","last_seen":"2026-07-07T02:57:15.757486Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/main.6eb70d2f69f85627.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a03d97b1fb135e029cb6218ae4f95663","sha1":"04ce4d322ae40f099c3db0c0c853e56df8c2e01a","sha256":"ed566bbeaade8bdf0e86e5cdb7a17dd51f3633a97b5f93f90cdd8d56d2db9f68","sha512":"999c45d7e7528c3e8a84db151ab6aa0f196872b3ce70f460be4f21b585e498cd60f0d29cfccff995b9067274a91ba25b19dd4e9ddee828063333a6303d84b104","ssdeep":"12288:zH2zge+8xVXgRizvohR/Rkm55Ny+wVezR8CaO:0gOvgR8voym55Ny+wVFCaO","tlshash":"c3c5b5d1f361351d2a0bc701987bfeec452dbcc2c55b8975bb2a17d443882853daa3ab","size":2729799,"data":"","first_seen":"2026-07-07T00:13:37.740229Z","last_seen":"2026-07-07T02:57:15.758373Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/735.cc1bcd4cf7aa7ccb.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3758711c432d726fc43280b1604c109","sha1":"605acc4c37f6bc3e645a943fb4674a3539f44c82","sha256":"dc078c31c761e0dc034952b6ef0048406989c786f37b121d1dc975944f1de664","sha512":"d1c112ab50dd5763af8c19eba9b8871f16a160fb040c281dd31de0df303f404e52eaa739d0b84014c443ed3f92c8a949b8add02890b91fd506e59dbd3b1279c8","ssdeep":"768:xK8KILrn4srZZJcgoCKfK3eFK3eVDovY24Ga9/nufvzxXI:xfDHn4s9ZegoCoK3eFK3eVDovY24Ga9N","tlshash":"f2c2405f7691b86516c983bc187b1e08e335998e1f2c000db2189ed6dfa5c466aaf738","size":27888,"data":"","first_seen":"2026-06-16T14:05:19.98475Z","last_seen":"2026-07-07T02:57:15.729557Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/515.f63eeaa81966b9bf.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f887620d659e5451f3c770d37d1d29c","sha1":"8c12da1be5fb4deccf33a0546ed8ea2b3ec0bcb7","sha256":"c50cd8cfb250df7c123fdbb12eec993c31e48cd02e32c6c816b38f1686190f0f","sha512":"0cabbe0cae13a741332d40651b565e9b7599bc05bf72826c49d3541abf77bda6b689c0a014fd61528df9d0b9bb895f773eb3924cfaba7cbc8268428cc84a70b3","ssdeep":"192:xK8KIVcpJPShcM59rAkFlwLGSTPCQJatDKr5ePVZe2LIzfRErWRTawlb:xK8KIYKrWaHnkduAPh","tlshash":"a602b9d73484203b4a6d61d1fd7205486231610d9aaa446cf1dc9e8a3b8dd593fcfafb","size":8648,"data":"","first_seen":"2026-06-16T14:05:19.99724Z","last_seen":"2026-07-07T02:57:15.740451Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-17T13:41:44.909979Z","times_seen":334495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/vendor.62ac21f3ea5ee07c.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a275ce00ef34d4a917e63b76e9515a6","sha1":"c8851e4ba0666dd3c85e7e9acb84243f8d8a77e7","sha256":"a69f24d1cc2bb0ff7a07043a2c24f556ca0e34745529adc1416b1e0e75f6efa6","sha512":"c42a22ea8b14124ffceb31329f3b17bb53c364b1859ff6c1d5c83df5b2c128d3752f5aa20ffcb2b56cca7a2ff9e9feeb9a4d192bb7a565c4da8c00017b511f82","ssdeep":"49152:ezaPf1e6leBslvebOB9SOQmS1XnYsSj4Nofm0JsHTrxO7wq4dHX3DjTXWoq2ksqv:OulKRqv","tlshash":"40853bd532c2702243e240f69077054bf2696849750a819cf5accdee6faed4d62bbb7c","size":1720897,"data":"","first_seen":"2026-06-12T06:47:47.902644Z","last_seen":"2026-07-07T02:57:15.759069Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/882.ad8e672ab8498e43.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c067b2553ff672573226a52489bcc5e0","sha1":"e34d42e92c9eac322970fc161f309a4eb7c43173","sha256":"e081a22394962cc6d9714a97237e8b32cf815327b3fa711038f29c10fb03795d","sha512":"8859c0ac6e6aa701a41c3e196d05ecd3d31a4b41977f35d70a924c38dbb22acd0173c65c0da52827cb4869cbae12e06d27736275ef1c031b808b478c753bb639","ssdeep":"384:xK8KrQzpAXA54fs/+bBmU6XOeKVSiHltLVmwm8TRmz3fuF7HeDLygGHA3f3oCwKu:xK8KrYpAQ54fs/+b9VSMtIntR7pR/Zpq","tlshash":"c19231cbf2865dfe74c8073a910985c42b2cb8d37c19457cb7461eb3a1045a8bd5aafe","size":19490,"data":"","first_seen":"2026-06-16T14:05:20.049256Z","last_seen":"2026-07-07T02:57:15.746723Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/668.e43d0cd77bf31d0f.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"941d6539f61fe9c68d53649f639b2fc6","sha1":"6b94c3a2ee766e0ad8b936e49f2c669105434396","sha256":"78a4df96773d7088b76879b0a859fe6a6f3c114b3c69802ed97e87fe1dfa56d0","sha512":"9c12acdfdd50ff5681a114029df5222e799a1d67685b6a758971f0a4a71a15c45a56a872285e65c6f15c840e07a3ef39ea82028d61a667e07a0475666be23dc6","ssdeep":"768:xK8KBN0fe1y64YuTkyEIyPC6EEdaqywnGpcag17wK+1POAA5uZHn+nVFHrZek:xf0XKN/wFX","tlshash":"4b23c600bad4503a56661075f7bb4e070a1ce961a815865df1cc9fe837add8e33abb3c","size":45974,"data":"","first_seen":"2026-06-16T14:05:20.063336Z","last_seen":"2026-07-07T02:57:15.747228Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/smart-banner/new-smart-app-banner.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0ec3630e473d46ca2e3b26cf4751eaa","sha1":"ddd543d3cc6b7daee04126eef170bf131f37b3d0","sha256":"5560d4d2a6f3038fbae6041b6271a611718a772b55665141c6a69f3ac8421c95","sha512":"f4d0a04e62a5a5eef946dbd90594fdaa90ab9fc0e72197ccec184f6e45b45e5f7e54967286701f0487a495b7a3f83c85e8e6524f403a52e2e9a2ecddc0909e67","ssdeep":"96:RxMPNH4Hpy4+KXSPNj6UtdF9rmcbh/qA+yui0Pay0iNtR4SD4zLwzK:RK1kpy9KiNjfacbh6i0PapiNbLD8LEK","tlshash":"74022e496e511231457357aeafa36a1cf7a26d63e202c1263bec63505fb6805c2b2fcd","size":9014,"data":"","first_seen":"2025-11-17T21:22:01.731386Z","last_seen":"2026-07-07T02:57:15.747649Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/824.a9b798eca73a1c49.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0af501d7b539d6ee6e67763bbf50bc","sha1":"2880da0fe25139e3ac8f55dff394b12893ce8c4a","sha256":"c4e98d05a455399353714085817e1414b389792697a01706f597ffa55b6b6a6a","sha512":"3f213c07e5fb73984762f8a24b13708077561ddd7bff720d72582598fb421d50c2f55aa404049b1b36cef216a32e52fbca6aaddb537a362602ff3572bee1c0c3","ssdeep":"","tlshash":"2b41b818365bb5ed1f293e60cab5599c1f581c88a08e8ae8425edef44b4e40cf1d7778","size":2316,"data":"","first_seen":"2026-06-16T14:05:20.004588Z","last_seen":"2026-07-07T02:57:15.743644Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/839.8532b49a16632ca4.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8c4ed980801a7211ef6383402be7d44","sha1":"bcd3405f248628fd63a112c3a46419b3b5b184d9","sha256":"5dabd08bdf275f531b16a5f4c2937763673349001908efd54544950ec818ecf6","sha512":"2be999c9cae38fbbd4de7b10f6c1aa33555441be1db897b4dde6d513dec9ce10f1483bea6ab9f85ec0bcf7feaf4d76316d9c47606e624f909c3abee7793a385a","ssdeep":"1536:xfjtGx0dTLxSmUc7vuTZK5uWQYm2n712Nq3GwTWYCHFcjCAnmsYbgFLgcMxkNfR1:1tGx0dTLxSmUc7vuTZK5uWQYm2n712NY","tlshash":"bb33fa21be705079d27960666bea4a4b073cd4a15a024a9cf2dc4fec37c8dd9671b3bc","size":50894,"data":"","first_seen":"2026-06-16T14:05:20.060401Z","last_seen":"2026-07-07T02:57:15.745621Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/runtime.691f5f7227d03402.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4eff532dfcd3ad63fae90fbfd96f041","sha1":"4817ce6969e36510c4e6f8b1f2d49e572816dde6","sha256":"7d6e32c45eabbec8170a82a19b658a570a730c7bdc2290100beebbce6ac72941","sha512":"11915b78c106bee6350b2133ab1981023cea6f5f6d7b397af0348d785863a67c617ee86dce05f9a177d9661830d64bb5ed65a5fd1375a80386fd0484248d35fd","ssdeep":"","tlshash":"4c810bb63674fdb72a7554d0583dc842f6297036141bf8f1ab5bcea95064ec60c22ef1","size":4088,"data":"","first_seen":"2026-07-07T00:13:37.698307Z","last_seen":"2026-07-07T02:57:15.722092Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/polyfills.197dcadece2ff59a.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6ffde237c23a6a83796f6821f023889","sha1":"e6d52ee446baecacb12122e47fbcc6558abb79ac","sha256":"f513cae12324ef89d977f502573958d9043c011711590747b62c431e61c45fce","sha512":"c8df86d4a2e87e67089619e1feb97d71aac0cadf19cc79b3afbdb69be2bac2edd136964e06aed5ec518ff7c412bfb92e3f6b6c76051b7b38f47d9ff8a864840c","ssdeep":"768:xK8K6x159hBF4q7rhvM893a1UNlJ1T+xuQP/WOB9toPHQxCKArbvlkCdjGLzw7mv:xfrbHzeVtKTir","tlshash":"a8f2e7da73d1b07687f209b1853b804bf62b2565784c88d8f51c86fa3f3715991a2f2e","size":37050,"data":"","first_seen":"2026-06-12T06:47:47.856251Z","last_seen":"2026-07-07T02:57:15.739944Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/scripts.d9574d0e6cd3bf5c.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c133ecc32ea46e7bfb19fe41727baead","sha1":"f14a9582c633ab6a27882f98b483ee3733bc809b","sha256":"28968ccce7405788636552434a1a47527722b8d7078720f23c9fcd81e95ab630","sha512":"c383113f7c1295499d445b4b41f07e666eae3e69489db277617fe2f78cf6d15b25d508eb08a2f3310838d0e8c3774be1765e8150ec1cc4b4ef63f9b13d2b7085","ssdeep":"1536:o8/9b4Q+R1P2ilvoXkilrW8rVnvidWw+qmZYCFdT/FQyDid:JrVtqWwwTf/FQyw","tlshash":"ea73d75a3244b47309df85b78037420bf2265da8b14a812cb56cadde2a7dc863277f7d","size":79889,"data":"","first_seen":"2026-06-12T06:47:47.889237Z","last_seen":"2026-07-07T02:57:15.733081Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/c/quick-pay","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bacab872dbe3a0818505ae2abfdd0e7a","sha1":"446a0b9f0b53de3c549d9e62ebed1f2294d0c205","sha256":"2e7d7a729d7dfb365784cdcd418d7d7d08be441d164a3b62a3c4602c5a309683","sha512":"fe47805be459ebdad53a84891ad7364c75160f1c0aaa0d43138db9c07c6dd5b7da7b6f4050b4ce6f4556a1fa885d29826806bac77c214c7a12082a1c00261545","ssdeep":"","tlshash":"8341cc89f9b719309523506c0fff52817474110ba84ae98dbe4cd5c06f50d7626aaff9","size":1887,"data":"","first_seen":"2025-10-06T11:26:32.92681Z","last_seen":"2026-07-07T02:57:15.752461Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"STOP","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":1121872},{"level":"log","text":"This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a feature or \"hack\" someone's account, it is a scam and will give them access to your e\u0026 account., if you are interested to join us; please visit https://careers.etisalat.ae/","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":1121923},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: GTM Reverting to the default value: GTM-T57KNFL","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MAP_KEY Reverting to the default value: AIzaSyDGHGq1W76Xca8Q2YbMmlAu6LDpD3-UOL8","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: CMS_HOST Reverting to the default value: ","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: ADOBE_SCRIPT Reverting to the default value: https://assets.adobedtm.com/0d04dd99f59e/07c17e71a414/launch-a7928db5324a.min.js","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_quickPayDisable Reverting to the default value: false","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isMleEnabled Reverting to the default value: false","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isResponsiveDesktopEnabled Reverting to the default value: true","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isApplePaySupported Reverting to the default value: true","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isSearchEnabled Reverting to the default value: false","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isAdobeAnalyticsEnabled Reverting to the default value: false","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isGoogleAnalyticsEnabled Reverting to the default value: false","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isAiChatWidgetEnabled Reverting to the default value: false","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isNeedHelpChatWidgetEnabled Reverting to the default value: false","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isAutopayDeltasEnabled Reverting to the default value: false","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_isSystemFeedbackEnabled Reverting to the default value: true","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MFE_ESHOP_isMFECartCheckoutEnabled Reverting to the default value: true","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: EFR_TOKEN Reverting to the default value: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJldGlzYWxhdC5zdGdAc3Ntcy5hZSIsImp0aSI6Ijg5MzEwMmY1LTZlMWQtNDNlZC1hNTAwLTY4ZjA5N2E3MDljZiIsImlzcyI6InJoc2F1dGhzZXJ2ZXIiLCJhdWQiOiJyaHMiLCJpZCI6IjQwMGM2NTRlLTZmZjUtNDVmYS1hMzk0LTE2ZDYzMGQ3YmViZiIsImN1c3RvbWVySWQiOiI1MDEiLCJjdXN0b21lck5hbWUiOiJFVElTQUxBVF9TU01TX1NURyIsIm5iZiI6MTY4Mzc5MjIyNCwiZXhwIjoxNjgzODc4NjIzLCJpYXQiOjE2ODM3OTIyMjR9.vFr2EvAoFmyyHhlQ3VaPAbtNpPvIgr5YnSxD7o6NPyE","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293},{"level":"error","text":"EcareEnvironmentConfigurations is missing key: MAGENTO_STOREFRONT_CONFIGURATIONS Reverting to the default value: map[actor:server1.conn0.watcher16.process7//obj57 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[environment:map[configurable:true enumerable:true value:staging writable:true] environmentId:map[configurable:true enumerable:true value:0395851a-203a-4580-b349-937b7d767b57 writable:true] instanceId:map[configurable:true enumerable:true value:bbbbbb writable:true] storeCode:map[configurable:true enumerable:true value:base_store writable:true] storeId:map[configurable:true enumerable:true value:111111 writable:true] storeUrl:map[configurable:true enumerable:true value: writable:true] storeViewCode:map[configurable:true enumerable:true value:en writable:true] storeViewId:map[configurable:true enumerable:true value:222222 writable:true] websiteCode:map[configurable:true enumerable:true value:base writable:true] websiteId:map[configurable:true enumerable:true value:333333 writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://etisalcpres.click/ecare/main.6eb70d2f69f85627.js","line_number":3,"column_number":37293}]},"http":[{"url":{"schema":"https","addr":"etisalcpres.click/graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=true;includemegamenu=false","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.893Z","timestamp":1783392973893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=true;includemegamenu=false HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2460764520.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; Path=/\nTSe663c25c027=084df50742ab2000b5d31e605ad897f80c078db7093dbdabe20137f4852ad197a285dab3a7120ab7083102be57113000e16f74aceed70cec94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db; Path=/\r\nx-cached-at: 1783392974040\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tf2Aude8RN1C1PyB%2F9u2h1fbChUk2MOcoDFfoAZ9HOeUHSrQ5HqUTwm2QwMNfGAef%2FP0upvPCsJOnT%2BNF%2F2XEEO2vM%2Bl%2Fjt73d6w8nzqb%2BntypywDjDnawehiYeVEk%2ByaWGfQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739326d8bd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2127,"size_decoded":1659,"mime_type":"application/json","magic":"JSON text data","md5":"9060e384d6e5a9001688802591695336","sha1":"d9d8eb13b26d5d8eb79ca83f5ae280c1a64e86e5","sha256":"3cc86711a0dc72fda644f9e4609ed161a1315b7bca7c56c583e094d56e0164bb","sha512":"4884c0764d504afe01ec61036e700c8da9cae213501b8338b8bdf86e0f1a721ebd699214f627a5127826a49cb5dbed7bf5be54e28f0c6f19ecb3e3a32e9f2957","ssdeep":"","tlshash":"ae41907437763863f34faab2dc623d41b0b9404641726f60e9e0e7b90be63e490612e9","first_seen":"2026-06-12T06:47:47.887088Z","last_seen":"2026-07-07T02:57:15.737061Z","times_seen":27,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/android_2_tcm313-205859.jpg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.951Z","timestamp":1783392973951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/android_2_tcm313-205859.jpg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974107\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9%2B%2BrMbHHXhAvGqvqOin09mm0BuO0%2BSZKJmjaYowiXSo4cumoS7Iob3L5G3O1BamT4%2FTbVq%2F6aQYg1NmKcDACcXvXSGOkIc8Ob6k9hOcjN3TnrVhEz5zIg863ayVAxTR9GQjMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a173932738dc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22596,"size_decoded":23250,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 448x136, components 3","md5":"b7689345d58a33b43ca83f3592f0827b","sha1":"91897286c76246b33b88718451d72620a8612a51","sha256":"886bb1ba2381e43c92b8cb8afda0bb852fdc56cacc6381c993df4a5881429fb0","sha512":"7104d95fbe288d5a1d147c780280e670cc8f84c28762d0b1d4a78e3a5dfb59575591c84519ae4973f01e54a56b4390c28df440c67de71ec9d42342fd261e3ab1","ssdeep":"384:pP4OzBnAYXuEXBZloCeQxa8HcJK67ZKnx2KWlXIrCaVcYm/C12Rhq5AZEFenH:p4GVAY+EXBZlAMvHT67oQXCCQ2a1CqAF","tlshash":"66a2be5d6015b68edec8e9c9f0e3ca342b5c5430387ceb978f0e52db78e2a111948772","first_seen":"2023-05-22T10:23:22Z","last_seen":"2026-07-12T03:59:00.327948Z","times_seen":68,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/follow-us/instagram.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.288Z","timestamp":1783392974288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/instagram.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974441\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrFpO0PV8RVwr5tJPdlG8YKRoC2sOc0WAhqRxgNPvFBZ%2FyFzVbnaGWoj%2B08qqMRQayO8IDFt95UZ80GIMVaRjYVgacuYYyXlhrqXU4lOeTFYCiJRLhhBaYr9Nbf4srzUe6jKog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932958fd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":542,"size_decoded":962,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e870402cb8b926c0bc289262463bd97b","sha1":"84c0bbcc6a04c315d44209da7cb9855bab4bc5f3","sha256":"b444a00cb3b39735c73fca85e61935225d393721c25480a81435dcac97917064","sha512":"6614fe49183e4f435e918b7bb3a7006ed4b6ea7a1564f16ffd523e4c24f83a73f74609db3036143ecbbe9c2cf852487d67fc28943a668242523737f4d4d8cf0e","ssdeep":"","tlshash":"3ff02b587318583ca3568f08e32932bb317315399d4915d8c131e4b8616258f6e7fbec","first_seen":"2024-12-30T21:22:19.83102Z","last_seen":"2026-07-07T02:57:15.732594Z","times_seen":47,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/follow-us/x.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.293Z","timestamp":1783392974293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/x.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974435\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jCcg5p15YF%2BZ1eknIe7Vl3BQJMNZD2%2B%2Beb4lZgautBhpiG6lxz9yCQV3Hxcxbjd4nL7A3ez1XlXplVlrgshEFvIZxPW1BhbSrP3DKsVc%2Bq%2FKMru1ywmdBz5B64dG%2Bm%2FrA5lbxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932959001525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366,"size_decoded":919,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23f463fb671c7de13c31aed4b6803c1f","sha1":"79a589f5941f20ac3a48b9f94d7ab474a565d216","sha256":"1d1d4361fe5e424a02218ac1dadf0e8f404728f4c7dc9a77ca9c4f5d76136965","sha512":"0c667d3b0863c0ca22fe01d11cb5caf6d8b7450738120a0a5c511ac724e32f7a89e62b3793d9a2b7133157c41c06dfc3e515ae599d555fb6e8d8098739bacaa9","ssdeep":"","tlshash":"97e0c0e992d45000d2018f10a537222e65bf21fcbebc0bace5523330f0d5946290e5d8","first_seen":"2024-12-30T21:22:19.832589Z","last_seen":"2026-07-07T02:57:15.745131Z","times_seen":47,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/amex-dualtone-v2.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.304Z","timestamp":1783392974304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/amex-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974453\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c5Oesou1RQ8EAVQger%2BpHnnLnSwnK85XVJe6D7rr2%2F0NmxW9t2dXyoqgXd2uJIftuh03EZTV4QH4Chzl0RTVKocvW74aWx41oV5613oElP9NgchXCqcqDPeBzgae%2FEQqr%2Bhx4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932969031525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1273,"size_decoded":1312,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b739632f5ddab94804ccafacc0f81773","sha1":"58a27eafe8a8defb359f4d4914f6f2eabfea16ba","sha256":"6b21646546e8fa7027e980ecec25ca4d3f89ded11f8eeda38519395936559ee5","sha512":"190059ef0c5bddf49ee41adb1b43b73a63381bae284601369c6e7944a074fd7d2efb1a518064f6a42a9e5b31f446d220d7d89c4a3498c21cd1163ae36c363a54","ssdeep":"","tlshash":"f42132766bdd6980ba09c7f015a21485326734e9de78de828bce3d13da261ad086c811","first_seen":"2024-08-19T13:38:40.80622Z","last_seen":"2026-07-07T02:57:15.739488Z","times_seen":48,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/__click","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:32.519Z","timestamp":1783392992519,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 88\r\nOrigin: https://etisalcpres.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"kind\":\"ping\",\"path\":\"/ecare/c/quick-pay\",\"vid\":\"53739f11-c9f2-4feb-ae6a-c3216501a95f\"}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/assets/icons/icon-info-dual-tone.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.945Z","timestamp":1783392973945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/assets/icons/icon-info-dual-tone.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=4,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974094\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7HyHJEr8vbn8XuDzgYEVPEsXcIZvCDqXt%2BKn7ArrduEkstRa96q5vRtJlLM8UyI7kU29Oh5bSe1mnkxink%2BgoIZAHCdLSgTVgnBEmqNSz48WEWJjR9LnFRbuk2QZxOqTpwSvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932728d71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":894,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67f9b49d520a871a86bc8f97f76edc0d","sha1":"9f53e76146e94f7f5dbeb4e81e14d230a4d68cd0","sha256":"654d932e9408ca608fa1303ba81748b20021c49c52fa47bb5b66ed98255a86a7","sha512":"4fb6fec189cd35455c79749c203fe668bfeafd7c862a6879065120561cc1110f4aeb4b7d0ee02fdb4dfb32209d0966a5fe6ff4a23e9f39c2d8813569f07211ff","ssdeep":"","tlshash":"9ee078168e58ccadf0114d24f7153631455f1c7331556090d47d0570502a5dcb527cc4","first_seen":"2025-07-14T00:26:18.767348Z","last_seen":"2026-07-07T02:57:15.744605Z","times_seen":31,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/google_play_app_store.png","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.949Z","timestamp":1783392973949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/google_play_app_store.png HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974100\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74f7geXpmruaXru1kqWH0u5y1eo%2F9RdHhkghS4na7HPVBDVSuaMkWDMSd4r%2BVnbhlxqAtNF%2BMBYQby7In40kBzYtYbv4RmCvViRJpOvgYTkEeQZfR7jFLvTKBZY%2B7uDr1D3EaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a173932738db1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10141\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10141,"size_decoded":10792,"mime_type":"image/png","magic":"PNG image data, 500 x 150, 8-bit colormap, non-interlaced","md5":"7da62b6b96523a24b0b699ea8bad86fc","sha1":"64dbbb2bb150a953047a98d456a29edc55c8fab7","sha256":"570b654f96c702326965944bb9b0945e9e2c9238562a6e01ab110e1733e213bb","sha512":"8ac185e3474e8dfc7172930910153fa92919b50e9ce5a5714820fae59e9c0e39f4b9e9bf3d17058f529cf3145e871ae99266c3f3a50c67722c51bfb7cfa3f1ae","ssdeep":"192:qU/Mr/XkO9kyM13OYUj8muw/X/CNdZ/HaeSwakwnvlbjFHM19LqA3VBS:1Of9kyM13O7jvuwX/SdZOsevx5EqAlBS","tlshash":"e422afc50d93ec492e7b68de4b014487eb2b11c2c790b21d0d702a9e66e5a5143df7fb","first_seen":"2024-12-30T21:22:19.863072Z","last_seen":"2026-07-07T02:57:15.723183Z","times_seen":48,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/card-dualtone.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.975Z","timestamp":1783392973975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/card-dualtone.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974124\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JmqDWlZPvp9q1%2BCehRGcjWZiyx8MM9AaW4d1aidT1E3kWR5ml71F8eP3hSVepjDByCFN5%2FzCr6GVuApirTS2RS3x%2FJrkabNv%2BI7Ikl9UHIKNrjr%2F1IBChjva8HrDTni77A%2FOSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932758e91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":889,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e5e506bb14a57f7d811018693925919","sha1":"d52fcc5757c13cc50828a95bc668d6048d8b753c","sha256":"4a2b069397940679ab99f94c81bf8c6f321640a4eae150bf11ad8ffde21b7386","sha512":"e4976296f05233c5b1bd44ffe760397679678ab58f7f0ccfa89ddb6f558038ccad930249c2bb8e55f500d3b7ff50be08d3e3550875c9555af62a8d921e4e77ca","ssdeep":"","tlshash":"1ae0d83d538c8d2cbe038a30e3693233821f629336886329cc3b8130568605df42bed4","first_seen":"2026-06-12T06:47:47.862954Z","last_seen":"2026-07-07T02:57:15.735014Z","times_seen":27,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/vendor.62ac21f3ea5ee07c.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.464Z","timestamp":1783392972464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/vendor.62ac21f3ea5ee07c.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HY5DhPs%2BEzGhm5tHAaUpjXxugBssYY%2Bbx5djwMf3RPEs%2FsNsPWn72yvdhNdyXKFw1Kqr%2FBcUn1Wl5hWrBM52jz%2Bxko%2B2kuS8%2FPYspo0yURFgsXENUc5oYt5zaLXev82b8DrisA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173931de8551525-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 9187\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:04 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383784930\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720897,"size_decoded":462775,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11022)","md5":"9ecc22e629a5c50bea615784372e534e","sha1":"a98787aaa0c091b7f4841bcf6460c0fb04e3dbbc","sha256":"8843ebb01e485539f9840a6b3342c959d605b494452723349bbcde2d75c4fb5b","sha512":"a25504a21a9a8f82ec8b93ee51a32b6fcaf2b776c9a33b1de7e0a6f0ff1cb88d6e23f8157b42aaf3e37e5a0aded4d506e8f44f6a77c3d7fea2ebb268f4f87b2a","ssdeep":"24576:ez9oPf1eooIl+XBslvebOB9SOQmS1XnlPdQDsSj4Nofm0JsHP:ezaPf1e6leBslvebOB9SOQmS1XnYsSjI","tlshash":"f8252a9632c1302242d240f65477054ff299648eb50a819df1eccded6faee4c62bab7d","first_seen":"2026-06-12T06:47:47.857214Z","last_seen":"2026-07-07T02:57:15.735599Z","times_seen":27,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/assets/i18n/en.json","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.913Z","timestamp":1783392972913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/assets/i18n/en.json HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUs13kRlmUzv%2Br5CC4eOAL1ymSnZKk6LRTXYRxDDqPNswCY2Kkfk8wH5rWWsLiwZElKQeAZZ3vEQmtdYZPboVfTMkLBm19bakxZVQLApXCjE%2BolAGw9S6ZglqRtTSvCcjZcDrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739320b86f1525-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9187\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nlast-modified: Tue, 07 Jul 2026 00:23:05 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383778074\r\nx-proxy-source: r2\r\nx-proxy-cache: STALE\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84562,"size_decoded":19852,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b50c6177e88337ec73c512e9263d1c64","sha1":"0f7d6c63ade4e73f01138395d0f129d3ee61cbd0","sha256":"8f2e28761e1f18f5e9c7c3d24254c9f7fb6da65f193f9615058ddda4f5d4a6d0","sha512":"5183f432ff94300790963197878fb2937dfe19649fccad2fb4c8b7308b1fe85fe4f32d4f0494c79944918419d8db98224ba257e0765d63d1a61561e7daf9c33b","ssdeep":"1536:gsoMGc8AVLOtfxz9suWeyV4Opm9l5ji9j7tNGk:mc8AaxzLyV4Opmz5jiltNGk","tlshash":"2983c70ef68411b70ad10b5dbc4faad3ba1d50b903112569a89d402cd3faf7a277f68d","first_seen":"2026-06-12T06:47:47.879729Z","last_seen":"2026-07-07T02:57:15.719076Z","times_seen":27,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/882.ad8e672ab8498e43.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.027Z","timestamp":1783392973027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/882.ad8e672ab8498e43.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ciDXqQupJ8SJxhaj2%2BG7Ky0Kiuau8i461LG6551W8%2BBEUtYN%2BJ%2F3LQSKQcbcnGfhn0x8xD8mrmLY4xjuR4sxp%2B6ZHJpLlXhrrs5yir1PjyzJVFexeAWpmn5WJWv0LTomzplUgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173932178791525-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9187\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:05 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383785678\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19490,"size_decoded":5397,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19490), with no line terminators","md5":"c067b2553ff672573226a52489bcc5e0","sha1":"e34d42e92c9eac322970fc161f309a4eb7c43173","sha256":"e081a22394962cc6d9714a97237e8b32cf815327b3fa711038f29c10fb03795d","sha512":"8859c0ac6e6aa701a41c3e196d05ecd3d31a4b41977f35d70a924c38dbb22acd0173c65c0da52827cb4869cbae12e06d27736275ef1c031b808b478c753bb639","ssdeep":"384:xK8KrQzpAXA54fs/+bBmU6XOeKVSiHltLVmwm8TRmz3fuF7HeDLygGHA3f3oCwKu:xK8KrYpAQ54fs/+b9VSMtIntR7pR/Zpq","tlshash":"c19231cbf2865dfe74c8073a910985c42b2cb8d37c19457cb7461eb3a1045a8bd5aafe","first_seen":"2026-06-16T14:05:20.049256Z","last_seen":"2026-07-07T02:57:15.746723Z","times_seen":26,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/assets/fonts/en/suisseintl-medium-webfont.woff2","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.902Z","timestamp":1783392973902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-medium-webfont.woff2 HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974050\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mx3DLDEb1KhlC2mE0bwnCnzknN4HuIiEOuNjUToHy2nBXp73OVlhDUl%2BXpGf%2BRZwfQO%2B7LcknX9UAq4sBmkHfOP%2BrjnOyOrYie17Nf6A6OJAnvO1rM%2Fmchb1A7s%2FW1htTJsrMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1739326e8c81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22888,"size_decoded":23547,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22888, version 1.0","md5":"a64d76f4b2b8032d0ee7766c90897519","sha1":"dde1d9973bdb7de262c2987cdc0ba68c993c9331","sha256":"2e1c906a39bc6303901b430a8cc16da85ce77d48f4e08c6ccebbaaef246c188b","sha512":"3942e419447a04ff5af421173b4b7a712a4c97f5f2f9f2358ed0f01e3a2c6e6829c5556bc94aedf762a60ddf48bc0346e30c18685a4aaba07086392531f392c5","ssdeep":"384:gzdqSbHII3wabQMrTCUX0iGVKj8A8Ohkz/5O1re6G5Kz7qFSmqPxTyMUZzzt/XA9:4dqEx0iGUOWG5KvqFSXP1ybltfCU4Ukn","tlshash":"5ca2f13d16031fbb0b465525a5da723d1285909d51fe62333f0a74b6284c7ca0e7dbe7","first_seen":"2024-12-30T21:22:19.812773Z","last_seen":"2026-07-07T02:57:15.730669Z","times_seen":49,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/assets/fonts/ar/ge_ss_two_medium.ttf","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.908Z","timestamp":1783392973908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/assets/fonts/ar/ge_ss_two_medium.ttf HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=3,i=?0\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974059\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yvvhc9L1Po2ILqfZRWiRnJhiGHrwvhSF7rD2%2FFplteCiVO4p9fJ7WFUGqdsMFdYGTcyV0O9460wAPxl2z5jGUWdvIEr5w3wOtwH9UIZ3%2BQOHfQgc%2BZcKq1uYIIUoYwBdJL%2BJzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739326e8cb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63888,"size_decoded":26130,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 17 names, Macintosh, type 1 string, GE SS Two MediumRegularGE SS Two Medium MediumVersion 1.200;PS 001.002;hotconv 1.0.38GESSTwoMedi","md5":"eae5755acee59644deada63a2c3ba677","sha1":"7a260875690459c8520ad2a71019bbc8aaceaf6c","sha256":"c438a2129c6a0a655f5775ee3ecff515a7cf7743c02705ef8920e5ae59c3bb4c","sha512":"44578a25a592e2d1ff0f0b1678c4e2c9accbf1c4f0b2a3a1ed2c668cf5dc5e4592e5e012bb5d8ff03027fcec5ca97ae6afdaf0d5aba0c63af3a2426a4f5b54b8","ssdeep":"1536:3v/3AYBGMLLim/UwimYrRKz1T4e8tIofaze/oKvQPNVlLg6xGeCkg:f/1HLHpim/zue8tIAaze/TaLg6xGeCkg","tlshash":"e453e8d7e9f70d13eaa98f78d9edd2bb0580f8029b627404bc508941d3772e17696e38","first_seen":"2025-11-17T21:22:01.782348Z","last_seen":"2026-07-07T02:57:15.719629Z","times_seen":30,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/etisalat_eand_English_Primary_logo_RGB_Black.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.923Z","timestamp":1783392973923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/etisalat_eand_English_Primary_logo_RGB_Black.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=4,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974081\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eKQiLOvzrYqqp4VQYYvvpzeKfozIjMvloW1k1Cvj6qck66dpDOAS9xvgLW2e%2BcLK2iTpNbWIOvk7xTpGSStsfyxSuigHVSpfayEY73YAtMZsUSdwi8N2%2B2kP1Q%2FTwDJmXzG%2BFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932708cd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3815,"size_decoded":2234,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b44acc4c325c0c20f7cfc856c18b8dd7","sha1":"78334e79dd07c13114a22294bda766cf778a2b53","sha256":"12da6c93ec90c11b612e5a2812c8b253586cb785427df11b14d8d44b84e3aee2","sha512":"8c7f07c960866d8d40bdd53d248e2bb7c2e56c24f373f8446566d5a15474fb5025c8d62059746d16c09caa6d878dc8c41d90e1382382cb04921d09418e0c87ec","ssdeep":"","tlshash":"fd7184d6671191cc10dbfc8ebf36688cb71fa8a93eeb96c444eeca596083c88d503c40","first_seen":"2024-08-19T15:09:04.786922Z","last_seen":"2026-07-12T03:59:00.311367Z","times_seen":61,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/quickpay.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.938Z","timestamp":1783392973938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/quickpay.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=4,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974087\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2F2lJIERbL6kgCsP6pN5mRoAUrUQY8nNDpprdRriHWG5hdTtgQ6gbqOPM6gDH%2B7CxVAehwyWh7y%2B%2B8X%2F5scUvdlPi6B8dypcdRWFOkj%2F90dKqgSmKm4WvJPJ3e7kyPWDbsKICg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932728d31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":958,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77c22a18cd8f832b176305af52714a3e","sha1":"64505a813fee8a5077903beb1ccdb242aaed4e1e","sha256":"b44edad7e92579d496d3147eef2322f778e899c386714d948ab3675e46e58bb9","sha512":"1f467c0c08a2dfa73476e80763cddb7bebf4069d0d02b372f2ed9165e665ee694ffc4046f9554ec6a7fec3de0aa6a780283e7a7ea2e8e21b61f92d758080c217","ssdeep":"","tlshash":"50e0ab669708cc3ca0166aa0ebb8713d0e6e2152239a94c8d0a84230b062899d83f9cc","first_seen":"2025-05-03T16:54:18.331651Z","last_seen":"2026-07-07T02:57:15.750198Z","times_seen":54,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/instagram-dualtone.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.955Z","timestamp":1783392973955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/instagram-dualtone.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974099\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uLW78RVwMlxEWHLyBVDUuNEEfJh5c4aUiljX2e1aXBSItX6Bs4GhKv%2BieZIzSFVcog8w9uPVORenAxz4XJP%2F%2F6ZtDPqRWVKN0A9wXOAwZzqyvS8OLEEGU07eksY9zuUQWy%2BpBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932738de1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480,"size_decoded":933,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"598dc7ddd591280df1b7befe3c9cf92a","sha1":"acd4adf685fc5ed50826393f5369536786abf487","sha256":"56e91111694d073f66ebf0fcaf7827919b89ced3482645dc5c26f601de2cb55f","sha512":"eab2e5163f327f953db2536b59ac3e57266da63a9d155c44cf2d576083fc527537bfd977ef1bb2b8ce7d94b60e79c8f3c220ca23448605c409276b22bf4328dd","ssdeep":"","tlshash":"cef0e2de430c5cbcf8264a64c73c3135235949b3331840a7b83e4171254152ce92fed0","first_seen":"2026-06-12T06:47:47.852427Z","last_seen":"2026-07-07T02:57:15.73401Z","times_seen":27,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/favicon.ico","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.941Z","timestamp":1783392972941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/favicon.ico HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evn9dmrTI51jGjWZO0%2FIG6y76w11YH2ICfU2BKLBXCNJTS3o56%2B9wW%2BlQ%2BqPhIbt0Q5dUlEOH91cnsa%2BiqfVyYag%2FIljS38NAk9wSsnKf%2BnYA8BShWFBgAds78sJaGlNKcpu6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: zstd\r\ncf-ray: a1739320e8731525-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nage: 9186\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:06 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383786172\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3826,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"592fd2ffcee8a3004fffca3c1ebed0e7","sha1":"392f72aaeabd0b9c7b5caa8048352353c51657bb","sha256":"7ba4d8507d71d10e6a2448217415334e1938a1d54f4e3a19a0d8d57743e9315e","sha512":"d0edac5dc83ad0a8934c25903e32a7714cd833f94aeb2bebf72c2e4a352f1d7c02f6478cfa5c4c6d483b19814bdb7d27c4453170419abcd772f86d6f8ceb960a","ssdeep":"192:zs+v/xPGJgsD8pBgggggggggggQTunRh:zsWp9+R","tlshash":"2b62d9c2998426a9f266bbf810a02d7f229b0d636d34d146bd20fa1bc3776cf0474e13","first_seen":"2024-04-30T16:39:53Z","last_seen":"2026-07-12T03:59:00.28523Z","times_seen":85,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/839.8532b49a16632ca4.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.029Z","timestamp":1783392973029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/839.8532b49a16632ca4.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6xOiotpqbcOrS7El6TIeqItIJkzZ0FIPcHgcRqgEv8t5vwD8t8mNUMdo2Kz6CDUrVhM%2BirYcwTY0MQGyzWgsFRN7txmwZBFb4G96MYkXZk1Xaq%2F0r7lb5qThwUrLVZgn5pa4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739321787a1525-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9187\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:05 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383785670\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50894,"size_decoded":13759,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50894), with no line terminators","md5":"d8c4ed980801a7211ef6383402be7d44","sha1":"bcd3405f248628fd63a112c3a46419b3b5b184d9","sha256":"5dabd08bdf275f531b16a5f4c2937763673349001908efd54544950ec818ecf6","sha512":"2be999c9cae38fbbd4de7b10f6c1aa33555441be1db897b4dde6d513dec9ce10f1483bea6ab9f85ec0bcf7feaf4d76316d9c47606e624f909c3abee7793a385a","ssdeep":"1536:xfjtGx0dTLxSmUc7vuTZK5uWQYm2n712Nq3GwTWYCHFcjCAnmsYbgFLgcMxkNfR1:1tGx0dTLxSmUc7vuTZK5uWQYm2n712NY","tlshash":"bb33fa21be705079d27960666bea4a4b073cd4a15a024a9cf2dc4fec37c8dd9671b3bc","first_seen":"2026-06-16T14:05:20.060401Z","last_seen":"2026-07-07T02:57:15.745621Z","times_seen":26,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/assets/fonts/en/suisseintl-bold-webfont.woff2","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.906Z","timestamp":1783392973906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-bold-webfont.woff2 HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974546\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYTKE36oFQ70hqY1clI5Hbrio7snFvDKgIfHmDJEFNJaajehT0eIi8wLwRJ%2Fi%2FQPbl5EWelyWdtGcCddIzFgF2L%2F1ZoMCVUnWwFBfmMWIQFGvmtqhwo7D2JNWu1LYbZJKt3Fkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1739326e8ca1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23164,"size_decoded":23817,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23164, version 1.0","md5":"e4d01e1b3db34d7e9257eb4d6f9c2872","sha1":"49aeba6f0a449d55197cdf2f2d698cdb7ec13ab4","sha256":"ac1091fb1dfd0807834402eb090694a78474529b5a99f2bbd820f501fc86990e","sha512":"5f88f9dcc3783b8595b0640dc23a89aad55e9b45470b314ad890c2b2ec96b7b84553827b2a480dab114ec82dc66fa93813b9f51fd559bb0df9810acbf466fa78","ssdeep":"384:khL7S58TKclUEEaodUzvlUNBCvHnHyyPuuU0DlGF7BvAkMwDu0zxPwz4QloKzes:EqqTKclTMvNqHSyHUSc1JywPMTlTp","tlshash":"74a2e12bffa9283892476b335b5414fed0be01c774b5c8eff999e0884a1748bc16904a","first_seen":"2024-12-30T21:22:19.81481Z","last_seen":"2026-07-07T02:57:15.725927Z","times_seen":48,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/assets/icons/icon-arrow-small-mega-menu.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.921Z","timestamp":1783392973921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/assets/icons/icon-arrow-small-mega-menu.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974065\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yqgi903g9LDo%2BDBmU2jg0xvwE9BXcy3eITVcS9mUcUnbb%2BzNFk9iQPiCGivEYYHuPZv1yyRoMC2yXDgRpWm6bZ5RCgIRynPtSiE0m51yAcJX3sS%2F03L2iHD0DbpxESKV49TgfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932708cc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":837,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee01076d6f7e5552a2ee3553deb11146","sha1":"f11406996b96acef705b6ab25345f46396cc10fd","sha256":"0524958c325784c31b5b7a782939ec579210a3cabd90581681ab83a7b100ef40","sha512":"81031b86b54154f5862016897f06d91204b85db15c5ad714ae702d00a1b7d97226161fd21a136dc932bb2fd5c1aa48962340bdc7c6e48e8f020dd59571c76c24","ssdeep":"","tlshash":"b7d0972a86448d1cb82b0b02e6b8b638002a9082440e0008e83226b482121ce3a3b8fc","first_seen":"2025-07-14T00:26:18.74322Z","last_seen":"2026-07-07T02:57:15.741391Z","times_seen":31,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/eand.jpg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.118Z","timestamp":1783392974118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/eand.jpg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000dde434bb1281e3d2358f4aa34918fe2f0edef4be74c40b742a7459af714f350d084566d204113000d02ce1e2d3b9088694bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974279\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztim0w0vNVkMrE7Qdv5CjoTEM2k%2FPinAKFzfIpGEJXtyYwqabHOOH%2F%2FYNzm296Gl2O2sufMpHd9z2bHO6SpOz%2FfNJp6C8fTTlElgA%2F0KNQhwUGRz0cWkACK62omJUMwBRDFVTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a173932838f11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87326,"size_decoded":87980,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"b9eb903c810260396f5354ab8c8fe7ee","sha1":"f4cc76318d790a0ef3011cc04a11593d1fb1f311","sha256":"88279dd6bfbb917b7b96fc404e5744524d1c2f574076c047574349725d5fb2b0","sha512":"22ff0e1c5c60dd9d6404a2bbf4868a2a19d841dd0b9b16a2a3753f2418066aea35132de3990f60fdf6a1fdbde5e7fc0f3edb52e866bf0618f1317c403fb67701","ssdeep":"1536:/abrGdxUwfNoVB6NwZp+btf1u7VWKrV8kyTuC/d4v8A0aWURxU9V3eF9mx9mytyN:/erG4wFoOdbtf1u7dty6C1g8A01r3Hxo","tlshash":"d083f130adf2645df7a4857428f4fd82dd60a3a3662f1979bbbc7c414b814172baf0a1","first_seen":"2025-07-14T00:26:18.749947Z","last_seen":"2026-07-07T02:57:15.716237Z","times_seen":31,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/b2c/eshopConfigurations.service","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.228Z","timestamp":1783392973228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"POST /b2c/eshopConfigurations.service HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://etisalcpres.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:13 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; Expires=Thu, 09-Jul-26 02:56:13 GMT; Max-Age=172800; Path=/; Secure; HttpOnly\nADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2; expires=Tue, 07-Jul-2026 02:56:43 GMT; path=/\nADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; expires=Tue, 07-Jul-2026 02:56:43 GMT; path=/\nADRUM_BT1=R:46|i:449690; expires=Tue, 07-Jul-2026 02:56:43 GMT; path=/\nADRUM_BT1=R:46|i:449690|e:57; expires=Tue, 07-Jul-2026 02:56:43 GMT; path=/\nADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; expires=Tue, 07-Jul-2026 02:56:43 GMT; path=/\nB2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444;samesite=none; path=/; secure\nCMS-cookie=1494428682.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; Path=/\nTSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db; Path=/\r\nx-cached-at: 1783392973436\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyX6xbwjgutDsxpTI0KmJS07CfVp4p%2FypWQppzEY0K6qZUVMmTMkjoosekL2eUgGTenHUw8vg%2FWiQTanRgbKqA0nS54ZI6fqXq6T7WxUAI%2BWmyBojSiK84UuQdwPNpGDnNVsag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739322b8861525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675,"size_decoded":2145,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ea2f173ca73a85f669f50e474d6b7819","sha1":"cdd9b5000811e1af5a65c53e24b00d5ff52bd959","sha256":"55f27f87a417461700b25ee1cac86d7fadc7c5b6a72232dee331063b3934d9c0","sha512":"7fe1f0ab617dab8f7cbc30a9bbad7a401e226dff0a3cf529ee9c8e81ed163032ead2763754c16d0145797e500b61af9c07c7072a2e18e8e302828a7fdf6bef54","ssdeep":"","tlshash":"14014468b4f9a70209776340dfcccc37dba98ee54094e061a5c8a2a50957c782681705","first_seen":"2026-06-12T06:47:47.88629Z","last_seen":"2026-07-07T02:57:15.740906Z","times_seen":17,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/facebook-dualtone.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.953Z","timestamp":1783392973953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/facebook-dualtone.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974110\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iarwwzn45eNXds6w9r7TIriZBcDPhxArR2MZbSYzIDGXY0vsfIiMnooKJ0MJf9%2FZsOIVFKe3LRvAaxIPDWcg0cwsHKBKOBulqAOmva2ESeEyovxPal269YEoxHAMJQg4%2FvJ7IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932738dd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":523,"size_decoded":950,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b396eecf399c7b3846e77591d3066e1","sha1":"db75d6d9b3ef433c1b234773a6523f88733f083b","sha256":"dea0e9b5bb3b4f86e625d3a9c55a3ddca36118b4ed128ca0c63253ab035aa338","sha512":"f010ca65772a301e03fe85c87166eaf376f7db95f60791514c9f3585ea1e2eca4e1a7cd1c59aba9105732ecec299fbbf8252b705a659721f319eb1d47ad4fe2a","ssdeep":"","tlshash":"d3f0e97993c88c2cbd174d10ea183536933f62727959a794cc3f417016c154df83fa94","first_seen":"2026-06-12T06:47:47.892686Z","last_seen":"2026-07-07T02:57:15.72647Z","times_seen":27,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/668.e43d0cd77bf31d0f.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.034Z","timestamp":1783392973034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/668.e43d0cd77bf31d0f.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4Vi96OmK2A3E2oSqDoMcXUulEOQBB17nh6L5vY9HMP%2FDasMyYpyHLj8KcAs1glFyN%2FYRr%2BbV3mYeRFpgkmYVVVrlRhhiV5U%2BZk%2FmE3nPxF1xZD91V4AqLp2sUPN7%2FbPUo7RnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739321787c1525-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9187\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:05 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383785677\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45974,"size_decoded":12695,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45974), with no line terminators","md5":"941d6539f61fe9c68d53649f639b2fc6","sha1":"6b94c3a2ee766e0ad8b936e49f2c669105434396","sha256":"78a4df96773d7088b76879b0a859fe6a6f3c114b3c69802ed97e87fe1dfa56d0","sha512":"9c12acdfdd50ff5681a114029df5222e799a1d67685b6a758971f0a4a71a15c45a56a872285e65c6f15c840e07a3ef39ea82028d61a667e07a0475666be23dc6","ssdeep":"768:xK8KBN0fe1y64YuTkyEIyPC6EEdaqywnGpcag17wK+1POAA5uZHn+nVFHrZek:xf0XKN/wFX","tlshash":"4b23c600bad4503a56661075f7bb4e070a1ce961a815865df1cc9fe837add8e33abb3c","first_seen":"2026-06-16T14:05:20.063336Z","last_seen":"2026-07-07T02:57:15.747228Z","times_seen":26,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/hide.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.936Z","timestamp":1783392973936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/ae/en/consumer-revamp/revamp-header/images/hide.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=4,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974088\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RyUHHFBVTYfEhwTgz%2FTbJ%2FTziq1QqAQymAYm65WC%2B5xZQvcFllC7X5yKexY4m1oETpyg%2FuvtOo%2Fa2rJ2bzh7yvxNLOtBmWp7W6axNuF5PZrQkM2gSAJPVlk%2BNdI%2FFgjIIwdsWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932718d21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":968,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"016367b5038f54c9246790fec5454e86","sha1":"d88e0d751c3b4ad910b33ad72e31db5b4ba8b33f","sha256":"5ed5313b0d89e9dc109b84afc69f4aa356b5df3e4bb98b7736fa404aa69401a4","sha512":"0972c0f4c12475ab1595d583eb5b258afd8ccb1882c855f2d73be21e6c55888e102d26bb53162b96e29844ff281c7fec1c5a15118388e7b89697931d6cf82f3f","ssdeep":"","tlshash":"0cf022b70b08ac2cb6234e38e33ab271712905ab2708a284d87a0570554554dea3fec8","first_seen":"2025-05-03T16:54:18.330243Z","last_seen":"2026-07-07T02:57:15.749711Z","times_seen":54,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/mega-menu/etisalat-logo/eand.jpg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.939Z","timestamp":1783392973939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/mega-menu/etisalat-logo/eand.jpg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974090\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kxe9dF4w4%2FohyLE3f59xPrIxEJSeZZaeC9YmseG4OYp3TNZ0rZXrbxBuZbArXNIgd5hHLXIzBarViZ%2FslvL9JOK5BYnyNjRH6jCs5P3QaC%2FeaVfeVg%2FNxyJRuWyT%2BmRcV0Q7oQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a173932728d41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87326,"size_decoded":87980,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"b9eb903c810260396f5354ab8c8fe7ee","sha1":"f4cc76318d790a0ef3011cc04a11593d1fb1f311","sha256":"88279dd6bfbb917b7b96fc404e5744524d1c2f574076c047574349725d5fb2b0","sha512":"22ff0e1c5c60dd9d6404a2bbf4868a2a19d841dd0b9b16a2a3753f2418066aea35132de3990f60fdf6a1fdbde5e7fc0f3edb52e866bf0618f1317c403fb67701","ssdeep":"1536:/abrGdxUwfNoVB6NwZp+btf1u7VWKrV8kyTuC/d4v8A0aWURxU9V3eF9mx9mytyN:/erG4wFoOdbtf1u7dty6C1g8A01r3Hxo","tlshash":"d083f130adf2645df7a4857428f4fd82dd60a3a3662f1979bbbc7c414b814172baf0a1","first_seen":"2025-07-14T00:26:18.749947Z","last_seen":"2026-07-07T02:57:15.716237Z","times_seen":31,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/youtube-dualtone.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.966Z","timestamp":1783392973966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/youtube-dualtone.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974125\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBc2PeDJHBeUBybeFAkwTGUkkn5Kgs544J5dtani%2FpgLD6FFCnl3aPcNxfcLAfhc8Zx%2FazMYbGdszMKrXVPoFj7lgQwWm9yZPmd6UU2hRKmbu3IN6In1E5hbiyTGQtWiSwYrhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932748e31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678,"size_decoded":1052,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"640609e9602d03333d5914fd4e9e938d","sha1":"e445ab1f26211e76c9cacb3de956f6fa6e0b32b1","sha256":"b324f977ff2694decdf7a3bc73fbd74ce83de0ae413fd8b8a4008d406b37221f","sha512":"17ad8a91ba50a6cdbd5d492569bab60bdd7e8541fe08661a623bf45b578e101f079c7470745cca2df1936bf8db040ab3e66317236e0815a6898b8dd56222fc71","ssdeep":"","tlshash":"3b019eda13b8ac1cb6935e6aef4d7671152614b7292a41d8d97540312243f4c781f680","first_seen":"2026-06-12T06:47:47.854323Z","last_seen":"2026-07-07T02:57:15.73166Z","times_seen":27,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/follow-us/youtube.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.299Z","timestamp":1783392974299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/youtube.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974474\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCJkp7IyvBbgWKpJtCt1klQggXcPKQZDZpsVRS%2FZ3iCohttlBQrAkSxkzU3G5F7qRRbT48O9ouJfcGfjsGTHl5xhZ153jQyUs99vj0gFQ17wlMu6PdqBeLVZZDF5uf9t6HkV%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932969011525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":998,"size_decoded":1213,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a74c9bffbfd0db7dc08bd66d7273625a","sha1":"ec61c6074907b260c7038abe9942fe8e5351a34b","sha256":"9b659af296dcd52d828e1f7e3d012821854abe43f989463fd1533c6d0cea62a5","sha512":"a5c8de59a5d71e92ed205b9d9bb2712db6920006a9011f81595650954684790c7e6d9c93795acea38ad62c3dbdfc0d00d0943d0c6de00ee64f6927305f3ee86b","ssdeep":"","tlshash":"131121f0c2c471f05c03db95b5155835392d38fa668bc3ac41a09e38b26605a89dcc58","first_seen":"2024-12-30T21:22:19.835909Z","last_seen":"2026-07-07T02:57:15.728494Z","times_seen":47,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/__click","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.495Z","timestamp":1783392972495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 97\r\nOrigin: https://etisalcpres.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":97,"data":"{\"kind\":\"ping\",\"path\":\"/ecare/quick-pay/?locale=en\",\"vid\":\"53739f11-c9f2-4feb-ae6a-c3216501a95f\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gqXkNcZhltIGezIL3UzxqQe3BryTHjSHpuS%2BGUK%2FlNM943QtzfeUCF5eOL3D3dUb3MF4dBJRaTHJRa2T5op5%2F%2BaoFeefaMH8SLYmkX2HCm44%2F1tKQ%2B8i9KHQxMSzCorsHZRfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a173931e18581525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/515.f63eeaa81966b9bf.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.031Z","timestamp":1783392973031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/515.f63eeaa81966b9bf.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xPE1NJjzR66F%2BICmt1kWqE1sNZzL%2BKRLQWtGuvrGujswkU3upQRrQxhU2RcvpPQ8bq2tDFS9%2Bry2vjOyMPpu9ua9Z2KfDh7hPHaNqK6doBihEBF4BqZQQLL78kFshVEvmkC7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739321787b1525-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9187\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:05 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383785683\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8648,"size_decoded":4362,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8648), with no line terminators","md5":"6f887620d659e5451f3c770d37d1d29c","sha1":"8c12da1be5fb4deccf33a0546ed8ea2b3ec0bcb7","sha256":"c50cd8cfb250df7c123fdbb12eec993c31e48cd02e32c6c816b38f1686190f0f","sha512":"0cabbe0cae13a741332d40651b565e9b7599bc05bf72826c49d3541abf77bda6b689c0a014fd61528df9d0b9bb895f773eb3924cfaba7cbc8268428cc84a70b3","ssdeep":"192:xK8KIVcpJPShcM59rAkFlwLGSTPCQJatDKr5ePVZe2LIzfRErWRTawlb:xK8KIYKrWaHnkduAPh","tlshash":"a602b9d73484203b4a6d61d1fd7205486231610d9aaa446cf1dc9e8a3b8dd593fcfafb","first_seen":"2026-06-16T14:05:19.99724Z","last_seen":"2026-07-07T02:57:15.740451Z","times_seen":26,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=false;includefooterbottomsection=true","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.890Z","timestamp":1783392973890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=false;includefooterbottomsection=true HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2309769576.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; Path=/\nTSe663c25c027=084df50742ab20007dde4d739062356d16ca6cfcb0f058a7de44822bc10770ed7abd7ac4e12e310b087d22187a1130003a95fbed8473654894bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db; Path=/\r\nx-cached-at: 1783392974040\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=re4uqJaErfhA2S2cQkgAhsPbCOJ1st5rGox1XYvKeOLRIrVPUJJ23TxdGWL4%2B8eCPjddTc5duaN3NQKaJnNed0L4lAucnmnLPDPECmPUi9tSDLz2FVdyBKAWcxL%2Blj5Ky2jmwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739326d8bc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1474,"size_decoded":1564,"mime_type":"application/json","magic":"JSON text data","md5":"ad53fd264f2640c7bb0c9c387f120d53","sha1":"c07ad2ecb51d2f8919d088b043c49f8a3a9d4766","sha256":"889dedee4e15d59fa5411517af2a4eee8f51bfb3234e1a122ed3136878a0a3a3","sha512":"2fbbbdbe631b611cd27adf38a62f352a7d3083bdb5793095bf34ed82220fd1e5fa1ba2419dbf470f56851a9641d0f46c19f47e2e72c19371d234795fd00cfd9d","ssdeep":"","tlshash":"91316f783b632d52731afbb3e9e37e24e8b8840244265c21b8f467b505d779884a06f9","first_seen":"2026-06-12T06:47:47.87788Z","last_seen":"2026-07-07T02:57:15.715628Z","times_seen":27,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/graphql/execute.json/etisalat/nwt-consumer-content-main;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/buyget-hero-quickypay/quickpay-main-sec;variation=master","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.895Z","timestamp":1783392973895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-content-main;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/buyget-hero-quickypay/quickpay-main-sec;variation=master HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2460764520.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; Path=/\nTSe663c25c027=084df50742ab2000dde434bb1281e3d2358f4aa34918fe2f0edef4be74c40b742a7459af714f350d084566d204113000d02ce1e2d3b9088694bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db; Path=/\r\nx-cached-at: 1783392974055\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tP%2Fe5IfSLe5xVHO7UfTcLsiMaFefOTeAmpsZqArtx8y5kQ0I8A8kQ7za%2F6IBqfPYjO7zcp3siL9Qo9QV3r8vPIQGJq64gVRJV7wFUjD3uTHi1d2J%2B0jcP1lxdVjrGKAuZoxnZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739326d8c41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1324,"size_decoded":1588,"mime_type":"application/json","magic":"JSON text data","md5":"0116ebaf55deeb08111491a4c661b86f","sha1":"5a1329dd8637f92bc2960366922ed784fb54f5f7","sha256":"c68d62079e5a8b5578bade55442f4b5720b0918395bac880c63d85c7c524f218","sha512":"4f2181269eb735b27868ff06769665f4fb94f0ee1c84b6b817a1c16ccb9c2070bb6ec136ff1f3c94462d13741ea261dd125e4572e0e7710117a1b1088cc7a7fb","ssdeep":"","tlshash":"a9217c31b510df31b28e97a25cba3d7290bc1703e1c11c109da6eae459e5ef850a35aa","first_seen":"2026-06-16T14:05:19.986222Z","last_seen":"2026-07-07T02:57:15.744145Z","times_seen":26,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/twitter-dualtone.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.958Z","timestamp":1783392973958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/twitter-dualtone.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974122\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F91%2B6xfLNvob197WbDWTnRB%2Bt%2Bf9KtFmvv9JYCPK5zqyBK1KGTWk1%2Bf8a2yb7mWhK%2FHMw9ouX4aTPtLlv1fYmOyFInMVixSrxuyNgnkEPqltnyeMPealOTrUC9EW%2F6oh6ZoHHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932748e11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":686,"size_decoded":1051,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a93994614c7738ea1931832e81c3a8cb","sha1":"a0285196c8eb1b6b1d4fa65639d64a051d722515","sha256":"5f8c5453c0f4c0d1e3429ea43ba801d4a19b3262d6bdec3a6d29dbd98b49e391","sha512":"6d059b23f92a36e39ef9048e2de67546a1af39af5ac1ece7d0a48bca34917b17a9fa9b8ccf74d6064c4512ea487da4849d4ae767dd1ae3f0d64603c0c0d36890","ssdeep":"","tlshash":"150102f6c3881e28e52e9b84d306fc76b09a22f31f85c2c4c1a452249592e6e5c3fdc3","first_seen":"2026-06-12T06:47:47.853315Z","last_seen":"2026-07-07T02:57:15.74615Z","times_seen":27,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/#?lang=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.083Z","timestamp":1783392974083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/ HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=2460764520.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000dde434bb1281e3d2358f4aa34918fe2f0edef4be74c40b742a7459af714f350d084566d204113000d02ce1e2d3b9088694bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=1494428682.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; Path=/\nTSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; Path=/\r\nx-cached-at: 1783392974232\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=018dz1cLBMyFNmb8sfAzU1XoRHDtJEZ3JQiK6%2FXw1aWzOLhALOMajaQ32HFJeS1QK%2FeKROITYVurcgI6MvIoHF4%2FZI%2Bxb33h7lQ0QJtBUlINZLgiXqzNYWex3LJ9umDsW7UQVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932808ed1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55575,"size_decoded":20623,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51807)","md5":"03eb240ce58da76215c341ebada6bd56","sha1":"62885b2011dd3e83a9cddd020bce8cf8b8be7066","sha256":"822f9ad1997f27a8bf93c4a67e92db6a202906b58b8c6ec4317456498a892f8c","sha512":"61de423b2c08230f6079ee9aa9619ccbe3eade31b499fcef92c62ad413298480a607d72c6e110fa2bb2c3ee73dd71cc15dbf3413d4c58cd2032d03f1f8a48bcc","ssdeep":"768:FHwX1pGzPitm9nLSPxrJvgUAgmTJQJuvLqqEiZf0YPzZd9nQGjiZ4y5:FHepOqMSBJvgUAFTDuqEiZf7PNMj5","tlshash":"06432ab673d6247113f7583960beab08f1b5cb425d068490d46bec986cace864637efc","first_seen":"2026-07-07T00:13:37.70254Z","last_seen":"2026-07-07T02:57:15.718501Z","times_seen":15,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/master-card-dualtone-v2.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.306Z","timestamp":1783392974306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/master-card-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974456\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUh81U6i5okdiB3GkteklK2DPNm2nEDPOx9W2LURLOoDmRCbBdUtkQzf63AawXWhSpOMQQyJSmbtOzPUBNCBnqKBOqhODl09EzcgmjlczW7RMRtHV0iqAqThsNukzi5XIfJFyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932969041525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1475,"size_decoded":1173,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30bc5d791e2199ea57b51c4b2beb07ea","sha1":"5a1382e824d8f662737f5221ade99b7bf126f94c","sha256":"9d03aa2e3af21cda81061f9e079cbcfc79a4db87c00a87f8cc6d6e1f9ee5c07b","sha512":"2721f67002b25c8ba2730ac6999f7f04574dd3571ba74284f173678e46cfd3d19a497ce5c3270cc2c1a638a5c93252c18105a18bf589784f2359e2982dc2d417","ssdeep":"","tlshash":"2831c050a2fd93d0f24cd37d490c68be366650e53914e895c7b07979f864bafec8a0c5","first_seen":"2024-08-19T13:38:40.806792Z","last_seen":"2026-07-07T02:57:15.729046Z","times_seen":48,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/samsung-pay-dualtone-v2.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.312Z","timestamp":1783392974312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/samsung-pay-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974477\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEkQobm%2Fv%2BTmEgEquLwtooW0uWo4ilzLW3gxWPrr9RpMkczfbiHY5kAxYJLOJooXoXk1uogUqeqfgzN7bOJyxS3ihhc1Gyn1PXRTXvIf6LMzo9alCFsmnjIG0tEJWqfPvAyshw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932979071525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5173,"size_decoded":2859,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b11d88efc9c171b151507c7ae1ac0ddc","sha1":"c2b8df63a56f136ddec6edc52692f2277c3eb749","sha256":"643a9793d3684183495edbe37e9f86c4c11df9263a84c9c3ecf8fe576360f710","sha512":"6f7443d28c8fefa710fbb48873af5aa54d07f319122d0639344fed5ea45dc7475727f50186b80710ecd38c264501cd6090ef32cf80251ea99d7a32f23586b7c3","ssdeep":"96:if/lUsa2Q2zFxFeSCd3bQlT4B7PIECgBzPsI383OreazxHK:if/lUsXH8SClqqHDNnzQ","tlshash":"60b17379b3c4b2d4b441eb908627a435a37b38f9b73bce0e07583b46694606d4c9ecc5","first_seen":"2024-08-19T13:38:40.809748Z","last_seen":"2026-07-07T02:57:15.716755Z","times_seen":51,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/follow-us/tiktok.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.301Z","timestamp":1783392974301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/tiktok.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974445\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxQ13qbaTx74bam3DvagnCvrxmb2nAS0tnr774eoy4mKrhMrob9AnyfUw3EYLPgEo4%2BpCLg4Dha0lgH82EEjQCIaU5oud%2FlpysNTrWgcvvj%2B%2Fzuqxq23%2FqRTzpUXPytvlM1wvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932969021525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":1201,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d657070cbc75fc777aad0110a9456403","sha1":"c7b1d594194581aa053b5b79bc9ef5529cb600fd","sha256":"0df803163da2bd77ed7852c06037e61708c20a517dbb0ad12032ffd183eab524","sha512":"098d87a20f2731bd1af5e5815c5c89ee228a3d748de2560f7e26ccbfa663e049aa3f5a33f86a24b70a6304aef060ab1cfd8ecc8016c20e2276660e4f1cb73660","ssdeep":"","tlshash":"5c1165e123c52699e3024b20e23538393ba6307e3fa8146081702b60e7517c59cffdec","first_seen":"2024-12-30T21:22:19.837572Z","last_seen":"2026-07-07T02:57:15.748191Z","times_seen":47,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T02:56:12.095Z","timestamp":1783392972095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZn4jsNThB9Ut770%2BIVTnLdt9hV9SYwaWDkjFK60o2Z%2FAYh0fZxLCRrEeh9yHz3ELZdeUR6zZB%2F57LuieV2SYW%2Bx6G9lu9pNu8CEp38%2Bg2M%2FOhpENoK2ar5T0m%2Bxu6YBv5n6Xg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a173931bc8351525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/scripts.d9574d0e6cd3bf5c.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.462Z","timestamp":1783392972462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/scripts.d9574d0e6cd3bf5c.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GsfZp%2BQaqa1k7MhIEl37ElpgUUSLn2BnC%2FODQy6iaJiMjNr%2BKGjt74BVo3X1SZLDuDudmVDJuSWMGeAH70EwSlppMI605dwNHp9Ao5GTubBhaYINEeJQsStOqXdI3veCKo9mWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173931de8541525-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 9188\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:04 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383784401\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79889,"size_decoded":26500,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"c133ecc32ea46e7bfb19fe41727baead","sha1":"f14a9582c633ab6a27882f98b483ee3733bc809b","sha256":"28968ccce7405788636552434a1a47527722b8d7078720f23c9fcd81e95ab630","sha512":"c383113f7c1295499d445b4b41f07e666eae3e69489db277617fe2f78cf6d15b25d508eb08a2f3310838d0e8c3774be1765e8150ec1cc4b4ef63f9b13d2b7085","ssdeep":"1536:o8/9b4Q+R1P2ilvoXkilrW8rVnvidWw+qmZYCFdT/FQyDid:JrVtqWwwTf/FQyw","tlshash":"ea73d75a3244b47309df85b78037420bf2265da8b14a812cb56cadde2a7dc863277f7d","first_seen":"2026-06-12T06:47:47.889237Z","last_seen":"2026-07-07T02:57:15.733081Z","times_seen":27,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=false;includemegamenu=true","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.886Z","timestamp":1783392973886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-header;fragmentpath=/content/dam/cfm-etisalat/top-navigation/nwt-menu-section;variation=master;includetopnav=false;includemegamenu=true HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2309769576.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; Path=/\nTSe663c25c027=084df50742ab200074da97990f68191f7fddef58df1c96fdd1c37b9ebe46197087b88334b926427708698a4290113000840dd4bb8038e1bc94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db; Path=/\r\nx-cached-at: 1783392974044\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5q4w%2BwiZM5%2FIxJTKR72TxAaQ0jAKj8HZHs9X3bAzL9QPzGEaHVsTBzcHGhY9yi3F0tVscUTKhvbZblKdKyYXDrcRkgEvRjxvxAeUq79anK6YF%2B6Exd2N0FFQVMKMrt%2BW%2FZ2rQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739326c8ba1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48623,"size_decoded":6382,"mime_type":"application/json","magic":"JSON text data","md5":"1e45ea9ecbdd6ab85408f4668c2a5a7d","sha1":"4c68af3ce5469bd68048c1390b7e5429a2b6e8ba","sha256":"344d082bbc49e5ef7c8cd5fce03d40eef84f9609f81faa8810eb59442c5abec6","sha512":"60281e280224924354e464abd6d14451090ae048e1c741bb7c6d7edf86707b7ebf1afaa914d502c386ef6ac342d83ee9a42f789e99a2045a50187510a05bdded","ssdeep":"384:Jzd6nlllldk/NMEExRzoPJcw48USrg+RRhz/JLq8JgBBnY5EEifjn1:5dellllbEExR0RRhzhyrV","tlshash":"6e238a64366a28a3a30f6a71bd973f51997e51434290df34acf1eb6d8df23e041e2264","first_seen":"2026-07-07T00:13:37.703615Z","last_seen":"2026-07-07T02:57:15.717905Z","times_seen":17,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/linkedin-dualtone.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.956Z","timestamp":1783392973956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/linkedin-dualtone.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974119\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocGN%2FX%2FbfSTFkrwiEGDBlwWQVan0sfgQmt9I%2F0dWyzOCugJ6w%2BeziAXwB3dM5UnfPIF4XOOyOuoiguNe7YLAEUUwaEeN616dKIL6nenlbDrN%2F7OYHRcPg1Gm8cE1ePaW2D0QAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932738e01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1314,"size_decoded":1311,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e9e28559ad7043cca8bcb1631eb9863","sha1":"7b05fb47e76da6252fa19a33a220d8e06e318966","sha256":"d6024a6503b56d8820117dcc0e45f0e8b962c2bfc71fcb0e4af84f335373fd73","sha512":"7d56ac2c76cadf7d76542b3399d244bfa1e974a4f2fc506ddd1b6129a831ca9ef76d7c1df6f0e36fd6b7e2f0db77ea133ec98b6d76eac55a9cf64b90f1ce7c56","ssdeep":"","tlshash":"3d21adbd072c279cb956ba31ff3d3e6ca30c204d399ae58091ae97306563195f88ac50","first_seen":"2026-06-12T06:47:47.89356Z","last_seen":"2026-07-07T02:57:15.738992Z","times_seen":27,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/runtime.691f5f7227d03402.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.458Z","timestamp":1783392972458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/runtime.691f5f7227d03402.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FTTwq%2F271gc22NFwNacjR7XzVcccUKaPTjLXK3AEld2zPh0sP2Yb0coKxPDDLbzLtPg0rPBpSIlEwPM38AoWFxvnMa18FJKK94u%2BKFeY8ozVvIXiZSceDkFoMtQp3Hx4hV1QhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173931dd8521525-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 9188\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:04 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383784397\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4088,"size_decoded":3096,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4088), with no line terminators","md5":"d4eff532dfcd3ad63fae90fbfd96f041","sha1":"4817ce6969e36510c4e6f8b1f2d49e572816dde6","sha256":"7d6e32c45eabbec8170a82a19b658a570a730c7bdc2290100beebbce6ac72941","sha512":"11915b78c106bee6350b2133ab1981023cea6f5f6d7b397af0348d785863a67c617ee86dce05f9a177d9661830d64bb5ed65a5fd1375a80386fd0484248d35fd","ssdeep":"","tlshash":"4c810bb63674fdb72a7554d0583dc842f6297036141bf8f1ab5bcea95064ec60c22ef1","first_seen":"2026-07-07T00:13:37.698307Z","last_seen":"2026-07-07T02:57:15.722092Z","times_seen":17,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/follow-us/linkedin.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.291Z","timestamp":1783392974291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/linkedin.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974435\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qL27zAupVvg8oHFf3aBsmkpqZpLg4JAP46doP4R94vGctpJGSf9X8TZ8%2BCM0V6ha752CZh6pyvqp7Ttdv6GCuMRHd9NvhSz1KS27i%2Fnd4MxH0xrF%2B%2BuRmaUw4Y3CZ5bkW%2FglPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932958ff1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4677,"size_decoded":2210,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec195155cd241102c8098dbd0ca92059","sha1":"b9f6063ad2c9f5d7d3e52f0fbf2e18b380d06c9e","sha256":"cdf1cbaad575f958a9f35d9d135ac718110dcb7acdc6843c3c8624dcd4b2e4ba","sha512":"4c20945fa17f4352c6bc14b3af8f70c6f5446c9fff3c78244d88f2ebb543d4d7a912d19206efae31bbc06024fdb90dff47c17c2780c28e649721c584732ee537","ssdeep":"96:XjyqzYqOhmNWCEBMN3rhG82s/v+FZdthuAVHE:6Kt31G8/+Pk","tlshash":"66a19ae6f1a12ed85ed35fc0b809c675f03925b93b899218a26b57c7e1e77ccc0ac944","first_seen":"2024-12-30T21:22:19.834359Z","last_seen":"2026-07-07T02:57:15.728005Z","times_seen":50,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=true;includefooterbottomsection=false","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.888Z","timestamp":1783392973888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-footer;fragmentpath=/content/dam/cfm-etisalat/footer-quicklinks/nwt-footer-quicklinks;variation=master;includequicklinksection=true;includefooterbottomsection=false HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2460764520.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; Path=/\nTSe663c25c027=084df50742ab20000d910048f274ae3e195c3cc662690c569617a9cc9203aa9d48a792acdc8ccf1d08d5007511113000c37f4dd66ecc563994bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db; Path=/\r\nx-cached-at: 1783392974047\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tM0XAfv2iLKzyC5ZVGJMzeNCyFXRurTUS0HYAfn%2Fp3keElLLr1zLb6Z3wW6UCmEUmZVTUomxjU%2BQHEaZ0epnp1uVh%2F48f5%2FNNJfPqHWKO2%2BemdVWQoYUymqIJgw%2BZOxfoKNEEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739326d8bb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13321,"size_decoded":3259,"mime_type":"application/json","magic":"JSON text data","md5":"bfe47170179ebc68f3456ffa5d5152ff","sha1":"a081bdf3c993fa11ce45f6f2d03c3d37d8ca35a4","sha256":"56a2fb7efd247404530231b88c5cc85805199d3587a6d14e6a90665aa6dda28f","sha512":"e2fbd35a1b503335c5481e7488afac6221c358a43c7f25f54e6390c4c89eb0e59782ce76109399b5ddac42bd78fdd1f3c992376a14078ef3da14cfc4eda916a5","ssdeep":"384:Vzbx/vS4TuS/8rCwYx3p/bVsKFp9YdyKDG:VnxfjmG","tlshash":"b2525d7437762d63b71baeb1b8d33e14d8bc480245734d25ade0abf549e63e490a07e8","first_seen":"2026-06-12T06:47:47.882821Z","last_seen":"2026-07-07T02:57:15.751956Z","times_seen":27,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/graphql/execute.json/etisalat/nwt-consumer-popup;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/popup/offer-detail-popup-main-sec;variation=master","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.897Z","timestamp":1783392973897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /graphql/execute.json/etisalat/nwt-consumer-popup;fragmentpath=/content/dam/cfm-etisalat/common-component/selfcare/popup/offer-detail-popup-main-sec;variation=master HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: CMS-cookie=2309769576.47873.0000; path=/; Httponly; Secure\nTS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; Path=/\nTSe663c25c027=084df50742ab2000377fd99f77579790f33221cc4c0af7829bf63b2ed0b92e1f9cbb1dcdb41849e6085838684c1130000c281a3e45fbff4994bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db; Path=/\r\nx-cached-at: 1783392974045\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZPvtE%2BfLGod2pr1%2Fdhct6AmB12fLBzrfjVhFjz3CjUZDNTlQsYBKwDcAoeZgFHWyrF8AG2hy5tntkhJ%2FENF%2BBvpXjFgcZllVD06dyNn5G94j76GZMiv2k67WI0T4%2BG%2FBTZlYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739326d8c61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":830,"size_decoded":1510,"mime_type":"application/json","magic":"JSON text data","md5":"c5aaf7a03640018c01874dab2002a327","sha1":"980b9221bf12384b43e249538ec9ae1bd4e0ef50","sha256":"d6917e1722d9541cf7a1191af608d015df8629613cf45385a5aa8b03e0c390d4","sha512":"0478b4b5304e263d5eec1dfa2e280115d2130aa39b148f45b05df5f120b19f76deeb52ed8ee31688b41add5bde273153878ca9d999407cf72bdb513bb4bbd14f","ssdeep":"","tlshash":"eb01af32b6595e53a38d8a413e6739d1e0381642e2504d2098d4abe46ea57e96071ab8","first_seen":"2026-06-16T14:05:20.016109Z","last_seen":"2026-07-07T02:57:15.737516Z","times_seen":26,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/__click","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.558Z","timestamp":1783392973558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 88\r\nOrigin: https://etisalcpres.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"kind\":\"page\",\"path\":\"/ecare/c/quick-pay\",\"vid\":\"53739f11-c9f2-4feb-ae6a-c3216501a95f\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:56:13 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e1xOJ4FUmr%2FXNp%2FkyOtFAjVqM4HJgTMncUliJjR4g1OeG%2Fxh%2FwXNb6ozqn2CpFmWccMscdsowRyNE50dagL8OPrU0pM566oB9dPCeYOPwuNl%2FgBo0XZHcWgxHmA8v8TInYOcKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1739324b8971525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1896,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/assets/icons/search-icon.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.941Z","timestamp":1783392973941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/assets/icons/search-icon.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974096\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2V21DS1Ww%2FnbcisF3DaOV%2BkR39VvGIWt6t3UBQJdhnyNzzcEtLpnEABl94t5RXM%2BKIN9Mqms7RiMVmsB3qQpCZXBIejXvGITByhQMfMoP%2Bk43AYwI9i%2Fc0z6b7PiH2HS5co%2Blg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932728d51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":873,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"453082f2e075418c32a9f22a93d87f51","sha1":"7e4ef45885d1f2ea29b2e010a56dbd82eed6a13c","sha256":"8bb464072d205cbd271e3e0c2e0abcd5c72e970f06a5d880bf137f0555387249","sha512":"1765592ed1fd458786fefd1953669146d64d57aaf07a05efe08ebb3103df62b43cc75ca23f370ce5187bbdbed7920b1481626f248393b7e285db2d19007bbac2","ssdeep":"","tlshash":"b5e08c195f48482cb3238919d33835b0865aa163aec40ea8887a0136324599ce62f1f8","first_seen":"2025-07-14T00:26:18.761038Z","last_seen":"2026-07-07T02:57:15.727525Z","times_seen":31,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/actions-open-link.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.946Z","timestamp":1783392973946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/actions-open-link.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974095\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGqIKcOHK60tqCjwjDsXWl0tNpdJ13NeQEEcNYy9vTJnNQDA5uKVyfQLH82dkVjSz6HAD5izA05l25IY9kj2eEPqN%2BcixfAOoym4yh5KXS0CQix8urPzSAi4XQ97KN%2FD8bkKtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932728d91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440,"size_decoded":892,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e63f2ced9c5a0b9654e96d539ecd9229","sha1":"3964262c8818ae760320f512a49c9dc3e8aa7b91","sha256":"7e62f9d8cf2b282f07dd200c3b1449b6f1a1346388dc25f143157feef1ae1c42","sha512":"1bf3f68aa53a303e398750144ed9f90b4e63af23a523d80bb766a247ad1607f2482053688581509477a2c2b82f68f64f811177d3de75be736210c70c85a17854","ssdeep":"","tlshash":"a5f0e57d434c5d2cf952c634e76c3231b12a129321486188d87a85b062416acfc3fad4","first_seen":"2025-06-22T04:03:22.719513Z","last_seen":"2026-07-07T02:57:15.720165Z","times_seen":47,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/visa-dualtone.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.973Z","timestamp":1783392973973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/visa-dualtone.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974117\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhKxc74EN2kbhpql9N89IzSJyclcXpN4b6s%2BNa8DTxcLcTEOMGZubC%2FPwG7xD3XbOZFASGTYKzwas3hE%2BgpkDBSk3tUQTJ7Cu2afM2vSrv7J2DeKpfO%2F9cHqeDCN15%2BuP6f0yg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932758e81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1099,"size_decoded":1300,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cae299f35ae42f860950fe24b886acc4","sha1":"2676fbe07c3b307617f5897fbf549b3dccbea44b","sha256":"fea238ed4c41647bb929064181e82c680f45d683c330eed3da918f31e35f3ae2","sha512":"3c110373dd4957ad667ddaffc8df030c36cb380bf21f1929c183ac9b835c7952b8762c998cf5ae82cd1373f672cad954a8a11b3ccec6784a22660c46900adb03","ssdeep":"","tlshash":"ea11d0f613688a5d1dc5c67c9b2daee5c11fe0c7396452908d7ecf64204b588f2276d4","first_seen":"2026-06-12T06:47:47.868756Z","last_seen":"2026-07-07T02:57:15.741886Z","times_seen":27,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/follow-us/facebook.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.286Z","timestamp":1783392974286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/follow-us/facebook.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974434\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVzRV8kNqrEDV9s4b77qyRuBFHAitQ5RlM8j9VaxoXye%2BIPXYUJp6nbyOMX245L76dNecNSK8UtEOJ97sEjEyOgtTPwuTA%2FWb2rr1FZmzf%2B9%2FoPXIlhjn9UrMDwRzmKAPjUQYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932948fc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1370,"size_decoded":1320,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07fb11e7af7ac9d680871eb9a87fe974","sha1":"08675f17ef0cb9c4aa070d89e74bed9957fbfd2b","sha256":"edb38bba1106d7ead042e6526fec407061b4ff4b1b1c73cc4c062ac54871cedd","sha512":"f2d2bb5afe3f59062b8ceb9d2026fe03ad0031839f034d1b2eb9531a790441d457aa84561f4f678e7f65a2a09ef977e6e50838d4e390a458031df3fb8f9c5d9b","ssdeep":"","tlshash":"9921f0f5e394b2e0910adb30d0399425b69a38b9bb1a0710d3084f8563b32ade1cdcac","first_seen":"2024-12-30T21:22:19.829498Z","last_seen":"2026-07-07T02:57:15.732148Z","times_seen":47,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/__ext?u=https%3A%2F%2Ffonts.googleapis.com%2Ficon%3Ffamily%3DMaterial%2BIcons","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.453Z","timestamp":1783392972453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /__ext?u=https%3A%2F%2Ffonts.googleapis.com%2Ficon%3Ffamily%3DMaterial%2BIcons HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71ybkJi%2BeXIemYKy3ILrrnNkdGC3OQi9bNZXMcqFfzm8YokWk0fC5Er6PqUx45qmHjSo9IQSNTSzc7J0mQqY0nZC%2FRlAd7JFrZ25EvweU4%2FCjs8w20gSFmwijJfMEDwahBh0vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173931dd8501525-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i=?0\r\nage: 9187\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:04 GMT\r\nserver: cloudflare\r\nx-cached-at: 1781735277720\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":1133,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e9315901ddc4241a17975e182b6a6afc","sha1":"509da39e077949d7eb9c2360292f70f91ff14396","sha256":"4fd41998f059c61c77938cf685be27f3c7dcf8a29c92b72cf020f65b67c5e1fc","sha512":"675fce706e63d2fd1c9faeb7fed9653d82735a4d05ca966a4ca912c479908f49793b933e4e060b8d72e9e2e02b38008fd21800eca8ca718a1e9125b43309c48f","ssdeep":"","tlshash":"dcf04c58b995594555520c02730f3f251e19402f780ac8fd4b521d5c8dfb97b439670f","first_seen":"2026-06-16T14:05:20.025218Z","last_seen":"2026-07-07T02:57:15.724309Z","times_seen":23,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/polyfills.197dcadece2ff59a.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.460Z","timestamp":1783392972460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/polyfills.197dcadece2ff59a.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0DAtGLA4vnLhJGzG%2FB1ekzi6%2F3lDUSg2vdggmRtS%2Fps75y5V1bbfNAeK9zyDAnT3hFdy2oa8GCjoarLZhm4%2FQSUiKusi%2BI5icZz9RJWVSNNHq6sadcJgjaZ2zuQIfZPWHWU3zQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173931de8531525-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 9188\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:04 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383784410\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37050,"size_decoded":13845,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10103)","md5":"d6ffde237c23a6a83796f6821f023889","sha1":"e6d52ee446baecacb12122e47fbcc6558abb79ac","sha256":"f513cae12324ef89d977f502573958d9043c011711590747b62c431e61c45fce","sha512":"c8df86d4a2e87e67089619e1feb97d71aac0cadf19cc79b3afbdb69be2bac2edd136964e06aed5ec518ff7c412bfb92e3f6b6c76051b7b38f47d9ff8a864840c","ssdeep":"768:xK8K6x159hBF4q7rhvM893a1UNlJ1T+xuQP/WOB9toPHQxCKArbvlkCdjGLzw7mv:xfrbHzeVtKTir","tlshash":"a8f2e7da73d1b07687f209b1853b804bf62b2565784c88d8f51c86fa3f3715991a2f2e","first_seen":"2026-06-12T06:47:47.856251Z","last_seen":"2026-07-07T02:57:15.739944Z","times_seen":27,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/main.6eb70d2f69f85627.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.469Z","timestamp":1783392972469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/main.6eb70d2f69f85627.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVudoa5n0rvB%2FAJ5CwPjbq1VLnyf%2B%2FhRspiQrjGHtqpG3AEkrg8CAPclDJc3NXck%2F74MTb7s4MDqSeuETAjQyCmb5u%2BoQyFJeRv1wE82Edw5Wm43mdAxEN2IkT7un6ZI7RcI6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173931df8571525-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 9187\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:04 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383784922\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2729799,"size_decoded":283873,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"53b005fac1ad340d4c2a427d9d0c55f2","sha1":"47117c2c495378c8b971d14d87da449b3585e75a","sha256":"cc143016c27ce5e0ebc1f4d08041c8d5cdc74d31dff7a73a9276564062ef7dbf","sha512":"473534a6c377a4090df69b84fdf84341f6ba124d63e5f0ea06f75f5921b6a4b4f79854eb6afa29d5da6948726344a873abfd5ccbd2e05d7743c9a4f3d811bdae","ssdeep":"6144:BtK90fgyvZC8hWXNWPRf2TTnmtK90fgyvZC8hWXNWPRfYTnJy+VzgYu0:zH2zgc","tlshash":"7b255292f180302d6c9b86999465ffbeab3ea482d3054fb5f10367a4538d1c72d71ace","first_seen":"2026-07-07T00:13:37.722775Z","last_seen":"2026-07-07T02:57:15.748708Z","times_seen":17,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/b2c/ecareEnvironmentConfigurations.service","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.219Z","timestamp":1783392973219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /b2c/ecareEnvironmentConfigurations.service HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:13 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nx-cached-at: 1783392900523\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yW4daF86lj1gN21A6b4cxjSm89hgg3ImH3WT72NZxn4ReTwBKuQ4WFWLCplm0UY8pCDjYvgnkgXc6SPYyntMqb45OOq9IDqp5C7KBBe1xwHCOqtyLiwD8A1zYY5F5B0NHpwxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739322a8851525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4189,"size_decoded":1904,"mime_type":"application/json","magic":"JSON text data","md5":"5a17907c2965c31106cd0d04c1e4d34d","sha1":"acfc4802c2e015c6cbd0b0177ebae5bbdaf81e22","sha256":"0dcbc26ab72621992aecbe2d6a452e07121ec7d4bc910544c952f6aaefba7477","sha512":"c94853073b446805e3101489f4350bb46dbc5efa11b0f4b4e5672a757aab3e99be98663201255ed84fcf5dbc4d475f138621b75e34207911a345df5f0b6ee6c2","ssdeep":"96:lmjKrjOmgHWtmjKrjOmgHWENO5iMtm/rjOmgHWRHCjn+3:EWrj3jcWrj3ja7rj3je+3","tlshash":"e281529a0b40bcfbcbf8b154b01d31ab096e771796cc97eaa4cd1c2c3be98541146d2b","first_seen":"2026-06-12T06:47:47.869747Z","last_seen":"2026-07-07T02:57:15.733539Z","times_seen":27,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/smart-banner/new-smart-app-banner.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.881Z","timestamp":1783392973881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/smart-banner/new-smart-app-banner.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974040\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R5nyEk9qAJFwx2PdrYKEmBn%2FoMLF5GRmgJe55mOO3U%2BLdW7qgK0P9eoPf%2BFSJAE7vcdD6u5x46ffu2sjYtMrMlBeAP%2FGbn%2BGk%2F9nqcsQXsJcoxVZCC9GiW%2Fsiof1lzZGpKcLYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739326c8b81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9014,"size_decoded":3390,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b0ec3630e473d46ca2e3b26cf4751eaa","sha1":"ddd543d3cc6b7daee04126eef170bf131f37b3d0","sha256":"5560d4d2a6f3038fbae6041b6271a611718a772b55665141c6a69f3ac8421c95","sha512":"f4d0a04e62a5a5eef946dbd90594fdaa90ab9fc0e72197ccec184f6e45b45e5f7e54967286701f0487a495b7a3f83c85e8e6524f403a52e2e9a2ecddc0909e67","ssdeep":"96:RxMPNH4Hpy4+KXSPNj6UtdF9rmcbh/qA+yui0Pay0iNtR4SD4zLwzK:RK1kpy9KiNjfacbh6i0PapiNbLD8LEK","tlshash":"74022e496e511231457357aeafa36a1cf7a26d63e202c1263bec63505fb6805c2b2fcd","first_seen":"2025-11-17T21:22:01.731386Z","last_seen":"2026-07-07T02:57:15.747649Z","times_seen":33,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/apple-app-store.png","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.948Z","timestamp":1783392973948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/apple-app-store.png HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974102\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fOQjRDZSYfz0McD3wnW3FFS%2BZSBOnppn1qbIKq9d8wXULGTKw%2B%2BNG7hppcB4%2FGd%2F9%2BPpeC%2FCUY4WGXPIntnWxeJFoIVZdY2MX3bJdvNWDMCSLwTuaFlC7jL18IyuDCAOkmKHmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a173932738da1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6292\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6292,"size_decoded":6948,"mime_type":"image/png","magic":"PNG image data, 142 x 50, 8-bit/color RGBA, non-interlaced","md5":"fe356bb3f31ed6920d6092c3952d96c2","sha1":"4123d161f5ad6bcabd4607bd110060b0c271292c","sha256":"14c6edf775bfbc8967d2ddc1212620d2e59f9eb1a73333aabd8a441caabb698e","sha512":"5f3bce97c65c9f124a481c29f4f7f2e78e7a9acb38584bcc9b3674f5c16432e4491d95f2c664f45a8a53cdc02160ff8ad98c5a7400bae901cf2f7efbf92e3f1d","ssdeep":"96:gj0a2h2hQDlB7nZ4rMKBbBwecITgO0ZktwF6ch2r1U0MsfyN66PzASrUr5j8BHui:gwa2h2qJB77egTZwch2r1yNVrejfkB93","tlshash":"a4d19fd9af5f9ca2bc7cb54770e00d18e68d00fd5ad54b2ee0e65be4255b8c74081477","first_seen":"2024-12-30T21:22:19.859727Z","last_seen":"2026-07-07T02:57:15.738499Z","times_seen":51,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/amex-dualtone.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.970Z","timestamp":1783392973970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/amex-dualtone.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974123\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hbTG6XhAuJBlakO08SHVqAAphOzDizuBEXCx%2BelBwX1NR4JDgRozlSaB4bZZV94CnUfq%2BnC3uK4UbSOMA7Zo%2FONopiDUjSfgA%2BW%2FTT0PnIvvH2eDpovDx1PneLS1lB5jMgP4KQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932758e51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":1106,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e98590c575d77cfe48fc31435d023f8","sha1":"71eae56d1544692141c2915b7bfb22b2a216f428","sha256":"95c4f695e62afe789334a5d7daf5787632c66d9383e98a587daa06f4a8126f48","sha512":"e6a68a88a80beddbcd5bed93f3fb58393bf19d499bd9c76f912ebdaff9326cadea6ecb51ab82acf281d6713bea789901e16b40f3f70286ece433e5aeecfc3b98","ssdeep":"","tlshash":"2201d07a6354d74cbf034835ef3e7ee6a21f10e1350c1261d436a720614259ae40bbd4","first_seen":"2026-06-12T06:47:47.861861Z","last_seen":"2026-07-07T02:57:15.734491Z","times_seen":27,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/735.cc1bcd4cf7aa7ccb.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.023Z","timestamp":1783392973023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/735.cc1bcd4cf7aa7ccb.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=15driaew5zGtVi3tCOEi6uiyar54gjjmp%2FuSSbx5ZQf7I8BIwo%2FgSfWEv1G%2Fy1Gorl7ZeRkdZIfPjZFa6beAfIdpjS4%2FbAyaPyn5%2BxaTVePV2HUa%2Fggf0GMRb5igWaE7WVoz6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173932168781525-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9187\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:05 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383785676\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27888,"size_decoded":5359,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27888), with no line terminators","md5":"a3758711c432d726fc43280b1604c109","sha1":"605acc4c37f6bc3e645a943fb4674a3539f44c82","sha256":"dc078c31c761e0dc034952b6ef0048406989c786f37b121d1dc975944f1de664","sha512":"d1c112ab50dd5763af8c19eba9b8871f16a160fb040c281dd31de0df303f404e52eaa739d0b84014c443ed3f92c8a949b8add02890b91fd506e59dbd3b1279c8","ssdeep":"768:xK8KILrn4srZZJcgoCKfK3eFK3eVDovY24Ga9/nufvzxXI:xfDHn4s9ZegoCoK3eFK3eVDovY24Ga9N","tlshash":"f2c2405f7691b86516c983bc187b1e08e335998e1f2c000db2189ed6dfa5c466aaf738","first_seen":"2026-06-16T14:05:19.98475Z","last_seen":"2026-07-07T02:57:15.729557Z","times_seen":26,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/assets/fonts/en/suisseintl-regular-webfont.woff2","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.900Z","timestamp":1783392973900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-regular-webfont.woff2 HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974076\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IjbFMIGYlnkw3YYBBIukdgZbsz5ONjIoCIwLl63GmlNpUR5zUlEQOxCVOnlsxHftHi22eDSLmBqTi4y9W%2B5aOq7%2FgRAXQcHsreJZfX1xQ4XzxlvCjXY50j7onIGex%2FWPnVzrsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1739326e8c71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22720,"size_decoded":23373,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22720, version 1.0","md5":"9aff0b960184a28444c0bfc63d6fb87c","sha1":"b055bd93476904d5c1f59614110d7a13af6a7d81","sha256":"765fcebc4454e93de798b9ff1ffcdd19616f553d7acf82059d24d76ca1cadd21","sha512":"656b2187c1fa2242f1bea8c05a3ea8eb042121995b1eed820b4113e08e37c8cbb499e5f6da83746833a705004a18a3e80adbb3461831ad5c2d15c67b3b63ce2a","ssdeep":"384:hdH7q3d/FrzTI6hWLWnZgiE/PBo5qSwxpK3bdDjktZAj1g5xHfNao1G5H+l9Y3+i:TSdpTI2WLWZlX5GILuXHltqAY365y","tlshash":"4ba2f12384218fd0f416192ae9afc17661651f7a22653cb9ab4a1852c078acfb91833f","first_seen":"2024-12-30T21:22:19.811296Z","last_seen":"2026-07-07T02:57:15.730131Z","times_seen":50,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/assets/icons/cart-icon.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.943Z","timestamp":1783392973943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/assets/icons/cart-icon.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=4,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974088\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oWsvzzGXxeModIHqSbw8n5pLlzqw%2BaJ5NPWNh0%2B2iQTXIh79yrV1I0BHkwOYncHxr7hTlhWXzLhND43RsdNyhT%2F07up8nYDM8mvqx3ydN3MNa%2F0pRe6fphdpda%2BHPxOivEnGDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932728d61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659,"size_decoded":961,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a6e184fb8d41fd438b1f069bf9490adc","sha1":"8d54526feadad735f6dbddb84b302f7d7075d248","sha256":"462e7d2b1851b756c62d0faa759006bddc944b81c2ce7c25691c89f487f43bc8","sha512":"f1999384f07a94f37d70d09350486285088d98454cae49f76b24390d5c40140410bbdbe58ef3cf379a6a181658ec4fb7a790a19c186c59f4521e07571ec90fc9","ssdeep":"","tlshash":"7b01f9bd130c4cbcb823ca6ce32a3332a22f817325a563d0843e45701a9214cf93fad4","first_seen":"2025-07-14T00:26:18.7664Z","last_seen":"2026-07-07T02:57:15.738008Z","times_seen":31,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/master-card-dualtone.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.971Z","timestamp":1783392973971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/master-card-dualtone.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974116\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=680AIEgL8PAEYibSq2uJ7DCcCNVK3M07KceXMNibStqMCU0fgbeem%2Ft6qOP%2BVZNrewYVDExGo1EJ05MVyFXAF2E49KstZiPseiW4U2fQPsN8lA%2Fed2o5xX6uz9ug7eODIspPOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932758e61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1976,"size_decoded":1294,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"383d03288df6951e039f2d64cb85b250","sha1":"680caaa8ae91ff29b8a2f7931fdffa3705fd3dff","sha256":"e75fcefabe57425a97c4b3965d504a5b2285484d3de8a3f58a49eac256770d7e","sha512":"6c87784d297fac8a493c60935cb6861112d8f10e80f674eb51f41e6ab8cda23098b4c3aefb059d8ba16b3cc8c206fce8ff933c71aa189673bb2ac0aae6ddfedd","ssdeep":"","tlshash":"3a412ad61318491ff4018fbcea5e55b9ed0f21abb38765c9c52a6a9c1903404db06afe","first_seen":"2026-06-12T06:47:47.874436Z","last_seen":"2026-07-07T02:57:15.720677Z","times_seen":27,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/visa-dualtone-v2.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.308Z","timestamp":1783392974308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/visa-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974456\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a84j7trqaK5sBW2p%2FbMH%2FH%2FWX6rWMJAz3vspTBX6sxUmzX5VWYqOOp%2BhV91BZjE3G1q9%2FRGPHBcSNa9E2NaYQN2YYI8cD0IOaKeM%2BF9qzoSBuBTONP%2BG8HPqWvs0eNZgzEBZxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932979051525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1537,"size_decoded":1450,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d96d24f8f1123c174c7063d6cf7d066","sha1":"fea70e131377f40005e29b077bf2ec12451cb5d7","sha256":"08b3b8b007ab96b3344b64e65fa047af91af9ed20f02e872158776c93b350d54","sha512":"cbc9774a61bcf12619cd227b12522b0771bf06cd256751de578a49ac85ee4b1fa500cafb50e07aadd362b284e8ea6568d6e15b98ad6f98a73ed207a4b6a8cabd","ssdeep":"","tlshash":"ea31d0b9739963e1d105d7b04915e530357b48fb3f27ea79c7e81891b82668c4855c84","first_seen":"2024-08-19T13:38:40.808043Z","last_seen":"2026-07-07T02:57:15.750906Z","times_seen":48,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/consumer/nwt/footer/apple-pay-dualtone-v2.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:14.310Z","timestamp":1783392974310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/consumer/nwt/footer/apple-pay-dualtone-v2.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab200059cdaab413cdd7197f061306599fd5cb7cc8999b82608b597fdc521f8bebc2f7081fb5b5ee113000c85e662a3bd2cf962b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; ADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:37|i:535832|e:349|t:1783392973961\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974466\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxsXc1qtfRZTtJQNpYc%2F00dEAdzeEMxVzXZFpRcXxGDz1xgkwpL8RvsdhdMLf4ccfuvb67R0T7LK3%2Fzuln7cUDHMc2wqine5aLlrRJ5v%2FEMfwqg7wRkHCpDASVwvM5XVnzkoAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932979061525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2725,"size_decoded":1916,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"320b8c2e9e1e0c68c2b6a5df2e86d3b5","sha1":"8462517f5c9ae2413b2e79952a1bf8883047c0da","sha256":"532be1dc63bd58a029d426c4ef1e3d121cffb99c1159a71084fb92688a4b2059","sha512":"ec467fefba1be1091c67f6a3a051adb9dc0f308d703a7c55afc611c37e27f478ec0a60c5b79e0f0728c760c105af35c6ec43047b0b4df09535c4a913ab83d73f","ssdeep":"","tlshash":"215142dab3d2a3e0d915d3f09b5990342f2724fa2e21d7684f62bdf0ba1315d54c8989","first_seen":"2024-08-19T13:38:40.809031Z","last_seen":"2026-07-07T02:57:15.751379Z","times_seen":48,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/824.a9b798eca73a1c49.js","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.988Z","timestamp":1783392972988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/824.a9b798eca73a1c49.js HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zS2fTuXi3F0hZ1L%2Ft%2BQE4dKJKYPYfsDvIrhGIypbtbCujBRnqckvSXPEFjPHq6jnGAm3XANBb%2BRa4p%2BR%2BQQnEAaHgpH5M6GzjcIjRobxN%2FMMBaajgbWrqIaFEP5ixcOA62Wbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173932138751525-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9187\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:05 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383785488\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2316,"size_decoded":1933,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2316), with no line terminators","md5":"7d0af501d7b539d6ee6e67763bbf50bc","sha1":"2880da0fe25139e3ac8f55dff394b12893ce8c4a","sha256":"c4e98d05a455399353714085817e1414b389792697a01706f597ffa55b6b6a6a","sha512":"3f213c07e5fb73984762f8a24b13708077561ddd7bff720d72582598fb421d50c2f55aa404049b1b36cef216a32e52fbca6aaddb537a362602ff3572bee1c0c3","ssdeep":"","tlshash":"2b41b818365bb5ed1f293e60cab5599c1f581c88a08e8ae8425edef44b4e40cf1d7778","first_seen":"2026-06-16T14:05:20.004588Z","last_seen":"2026-07-07T02:57:15.743644Z","times_seen":26,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/styles.ee8ec3dfb960805b.css","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:12.455Z","timestamp":1783392972455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/styles.ee8ec3dfb960805b.css HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dC61p4UQPa1%2FyaE5l88PzF8Tixq4M%2BlNOTCITw%2B5qrqJFxqVSeXWcxOitMLO6jjDuJOioS2%2FMigyA1vEyKn8SpXIcWZ%2Bl2YCUGhwHORZpkCsfkvyNR%2FKXgX%2Fki9HLaTt42XNJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173931dd8511525-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i=?0\r\nage: 9188\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 07 Jul 2026 00:23:04 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383784392\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124629,"size_decoded":19002,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7cb288fa830e03868070ef5e22d70ce","sha1":"f667d6cf8ea5040568e569c23da155ab41bd7700","sha256":"4bdad59b61b2ea0995e790494741f753e4608a2fe0d0a3ccdde158ca8d349caf","sha512":"5f1fa9aaaefeacabf9c9335e887a3d22b66a4183a781b057f68b8cfdd0796d60b5f3e1561052027a154ada2076a3ad0b0c413b0b641e19f4b5b744cc44567b88","ssdeep":"3072:jI44szL19a7ZL3WIN7ZL3WIH7zLL3WIu7zLL3WIu7zLL3WI944szL19kp2/8PTm:jI44szL19a7ZL3WIN7ZL3WIH7zLL3WIW","tlshash":"07c35295d2013016ba6788fb48e0ee248dc8e995df539ba5f1c06f3cc1dbcba625e711","first_seen":"2026-06-12T06:47:47.863876Z","last_seen":"2026-07-07T02:57:15.724809Z","times_seen":27,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/b2c/getUserInfo.service?authGuard=true","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.883Z","timestamp":1783392973883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"POST /b2c/getUserInfo.service?authGuard=true HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 47\r\nOrigin: https://etisalcpres.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"headers\":{\"Content-Type\":\"application/json\"}}"}},"response":{"raw":"HTTP/3 400 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; expires=Thu, 01-Jan-1970 01:00:00 GMT; path=/\nADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; expires=Thu, 01-Jan-1970 01:00:00 GMT; path=/\nADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a; expires=Tue, 07-Jul-2026 02:56:44 GMT; path=/\nADRUM_BTa=R:37|g:7bf2a496-2ade-468d-afe6-ffce4e37e46a|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; expires=Tue, 07-Jul-2026 02:56:44 GMT; path=/\nADRUM_BT1=R:37|i:535832; expires=Tue, 07-Jul-2026 02:56:44 GMT; path=/\nADRUM_BT1=R:37|i:535832|e:349; expires=Tue, 07-Jul-2026 02:56:44 GMT; path=/\nADRUM_BT1=R:37|i:535832|e:349|t:1783392973961; expires=Tue, 07-Jul-2026 02:56:44 GMT; path=/\nTS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; Path=/\nTSe663c25c027=084df50742ab2000b201e5c88c6158b0b924b90bec746b048cdf7dd617c29da062614936d72029b308cca742051130003f9fbb0acc4834242b7dc1d645973942b701250db3784d05b64c6883490e764f5d8d4a4a0a52599e8b63f48e95ec59c7; Path=/\r\nx-cached-at: 1783392974158\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xm4hdYHKab5ITkl7tptRtnXlJR4dctKsvPU6RJ4jsxAJPo4TLtBAicWxiQC05ySFEGB%2BDarZS77UfzuvryZUQP1wLWfpPsgYlmYvLxpzSR58yOT%2FdAnu02eE%2Ft6roUv0rnBZYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1739326c8b91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 186\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":1945,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a72b8d276cd1028f77acc5e2b5487b9c","sha1":"ca83c4700efd4628ec3b93ba39d257683db4a4db","sha256":"b245916cb0be1948f36d3aaa64e230675e9e7a933c7d19f97e073177613fafa8","sha512":"df04ff44c6d7aeffb58bbd9b22e012f939bfa3ed979a970fc5c2f262d788b46dc772879c97789cf2a9bc80ab05e825acb09a27d5cc337287da7fe45ecf7c6918","ssdeep":"","tlshash":"4ac0120e4f552e5336001589ac1a36b673f0d95703906c104a41823603ed8cad90ef85","first_seen":"2026-06-12T06:47:47.880824Z","last_seen":"2026-07-07T02:57:15.725384Z","times_seen":25,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/assets/fonts/en/suisseintl-semibold-webfont.woff2","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.904Z","timestamp":1783392973904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/assets/fonts/en/suisseintl-semibold-webfont.woff2 HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/quick-pay/?locale=en\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974055\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FS2IAbR0RDTLlRJEH0HtrSS7TD6uz8PYcICauiK0cbEsH7iIdVDY32Eukx5CoDRCuApJVb6rWL4idLBsGzh70qjc9VmpGAi%2F%2B%2BFt6FE4Hu%2BuDOs3eIOCihqI1CW38u6tfBE1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1739326e8c91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21576,"size_decoded":22233,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21576, version 1.0","md5":"82a8405f66fe5f1405045c413a3f337d","sha1":"50789987d8a3856030ca4b9679902a7e7ea50a26","sha256":"51874258722edfbe9f4db2dc560c8b8f9ffc3fc638f62d96bda7dab476ffb762","sha512":"4976b96409aaabd347c0e6e3f0b82efb66e16e6945e4cc1c47482a1859fb6f73fb98789c0773d6cf93fa0dcf439aec23f8904edb1073f4fb39be4f7e762ef0d4","ssdeep":"384:9xSaeCvSL3iNnoEsqeJol0ME6n9aU5A8x6wvJsiveO9XVGMSy4bYkVxYjskLQH+I:O9MSLADsqTjE69ZxdJY51y4bY4kLTaO0","tlshash":"dda2e1ff96f18339fdf88c248992714b0543b3052d59627d238b42ee0a19e7cd5807e6","first_seen":"2024-12-30T21:22:19.809732Z","last_seen":"2026-07-07T02:57:15.722598Z","times_seen":50,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/__click","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.926Z","timestamp":1783392973926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 106\r\nOrigin: https://etisalcpres.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"{\"kind\":\"render\",\"ok\":1,\"why\":\"\",\"path\":\"/ecare/c/quick-pay\",\"vid\":\"53739f11-c9f2-4feb-ae6a-c3216501a95f\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 02:56:13 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2BssQUbZ0Qj0lcW5HT7YUOl4xhklx7nL3yc4FPKnerf%2F7m70zuOS1iGG%2Fn8yDxGEtW5a9QRnMlpCYqGSFp5hPXUMNWbgsyOnWRl%2BZwV4rzLh8BXpStLDWfdXNT3k40ammOSdZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a173932708ce1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1913,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/content/dam/etisalat/header/findus.svg","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://etisalcpres.click/ecare/quick-pay/?locale=en","date":"2026-07-07T02:56:13.934Z","timestamp":1783392973934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /content/dam/etisalat/header/findus.svg HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://etisalcpres.click/ecare/c/quick-pay\r\nCookie: __om_vid=53739f11-c9f2-4feb-ae6a-c3216501a95f; myAppLocaleCookie=en; stickounet=1783392974.296.17462.281795|4fe03ee20755f06e315b25ff822079bb; ADRUM_BTa=R:46|g:320a836a-7482-44c1-8c24-2363a26806f2|n:customer1_8330acca-5d30-48e6-8384-57b66386c1ba; ADRUM_BT1=R:46|i:449690|e:57|t:1783392973297; B2CJSESSIONID=q1Y6gTH15m0JuuAV1jKWX_DbF5TeIDn4-X7U3ZqW3wUrL8T9EIbq!-1069239444; CMS-cookie=1494428682.47873.0000; TS0196bc3e=012b7f183c49b08c5429352092a19551d411b0f0e0487785b1cc0b9eaebaa8232172ab280b85d78ec50e61893978b62d936485f669; TSe663c25c027=084df50742ab2000189e30770388a638131600f34c2223a2ecad9b1e9685b6ba1da954a7399d5167086a219832113000b98e81bf2b0ee57e94bce538de2e3dad84388269403f711f8d0d33805a72dc1000d1946f5548482db9ccd3a724e001db\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:56:14 GMT\r\npriority: u=4,i\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-cached-at: 1783392974089\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhrSKKTSYAw4lw%2B8QBxSRO7%2FttENxMcldVVcm0cDmFnxOhfEDrEWJdPQ90ZeDoGEMQ8qufvhFtlSHAFwgMD1LwgaYAF3MlrA0%2BQso7BMMZA90LllluZtQTDePhSJvILWq5Fq7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a173932718d11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507,"size_decoded":942,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a332325ac63fa590b273ccb2a7410894","sha1":"7822e7c29b7e1977ecb4692e435d1b773cd25eec","sha256":"64621ee6f07224c6b9e9fcd6da60c39aa299321a2812ac173af9113193bb54e4","sha512":"37c237b0a5fdf8ccb983964c74dbaaf8eafe84c471881fcfa2acab8a8707a31944d9cdeb4e046cee12420e2bc18cadacf8f5f2454f75df0f2f3aa31c8b5e5940","ssdeep":"","tlshash":"06f0e2ba03485c2cb5274d28cb2e35f56b2d0ab3234c5398e87e5534515624df93fac4","first_seen":"2025-05-03T16:54:18.296477Z","last_seen":"2026-07-07T02:57:15.749198Z","times_seen":54,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"etisalcpres.click/ecare/quick-pay/?locale=en","fqdn":"etisalcpres.click","domain":"etisalcpres.click","tld":"click"},"ip":{"addr":"104.21.55.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T02:56:12.136Z","timestamp":1783392972136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"etisalcpres.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 22:59:04 GMT","end":"Sat, 26 Sep 2026 23:59:02 GMT"},"fingerprint":{"sha1":"C2:21:31:EC:17:C4:FF:CA:6D:C2:EA:DF:9C:B7:5F:76:64:8A:D6:E0","sha256":"DF:2E:08:77:A0:8C:58:0C:35:73:33:3C:24:C4:E5:34:3B:9F:C6:86:58:1E:C1:F2:08:26:5C:5E:26:94:66:94"}}},"request":{"raw":"GET /ecare/quick-pay/?locale=en HTTP/1.1\r\nHost: etisalcpres.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1oil605l6jIvUZtYVvOM89RietBljzPJTgj1Fk44S9E%2FTIh4sam6gC51b8sYTo0LCWK%2FaEzjH%2Bf9Ip1deE6p7EHErgGIArjuG3MuVgSQyBhqHl3rsT7mOO30m1vH80RBZHYXbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 02:56:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a173931bd8361525-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i\r\nage: 9188\r\ncache-control: public, max-age=60, stale-while-revalidate=60\r\nlast-modified: Tue, 07 Jul 2026 00:23:03 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783383778924\r\nx-proxy-source: r2\r\nx-proxy-cache: STALE\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55575,"size_decoded":20318,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51807)","md5":"03eb240ce58da76215c341ebada6bd56","sha1":"62885b2011dd3e83a9cddd020bce8cf8b8be7066","sha256":"822f9ad1997f27a8bf93c4a67e92db6a202906b58b8c6ec4317456498a892f8c","sha512":"61de423b2c08230f6079ee9aa9619ccbe3eade31b499fcef92c62ad413298480a607d72c6e110fa2bb2c3ee73dd71cc15dbf3413d4c58cd2032d03f1f8a48bcc","ssdeep":"768:FHwX1pGzPitm9nLSPxrJvgUAgmTJQJuvLqqEiZf0YPzZd9nQGjiZ4y5:FHepOqMSBJvgUAFTDuqEiZf7PNMj5","tlshash":"06432ab673d6247113f7583960beab08f1b5cb425d068490d46bec986cace864637efc","first_seen":"2026-07-07T00:13:37.70254Z","last_seen":"2026-07-07T02:57:15.718501Z","times_seen":15,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"etisalcpres.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"etisalcpres.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}