{"report_id":"8ccbd898-e9ee-467c-9e8b-781f174dc42a","version":0,"status":"done","tags":[],"date":"2026-07-07T03:03:07Z","url":{"schema":"http","addr":"dujaselcmpe.click/","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"title":"du - My Account","dom":{"size":12941,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12457)","md5":"947409d3801e32cd5d869ad85a45f694","sha1":"6b7b58b59fd16f8813538d5357805e454ac52392","sha256":"c5f19c69174fe046c0ff9581f2a12675b0d6de6ccd77a2136ea031c39f19d538","sha512":"25e383690d30c0a3dc5308ff7242bb5b1ed1c463aa5fc1938aaedb70a40f1c198ff28c76cdf5ae294db3ca42b5f22d00a35220f8303b443d53ee917c24c0ddfb","ssdeep":"384:i9zAkRQYxhk2YZKnKWjKMVKHDCXK/vmeKCXyXKk/:YRQYxhL/ODC2GX","tlshash":"0642a5caf6e3b014425391b0423f5d0ee33e7968680981acb969cdd12e7d64e5637bbc","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dujaselcmpe.click/","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T03:03:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-05T22:56:15.289129Z","alert_count":0,"request_count":4,"received_data":1879483,"sent_data":2176,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t.co","ip":{"addr":"172.66.0.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-04-26","domain_rank":232,"first_seen":"2012-07-25T19:09:44Z","last_seen":"2026-07-05T04:01:46.384514Z","alert_count":0,"request_count":1,"received_data":1082,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-07-05T22:45:48.873657Z","alert_count":0,"request_count":4,"received_data":20766,"sent_data":2774,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-05T22:30:27.189477Z","alert_count":0,"request_count":2,"received_data":1319449,"sent_data":997,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dujaselcmpe.click","ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-07T00:16:12.561525Z","last_seen":"2026-07-07T00:16:12.561525Z","alert_count":124,"request_count":31,"received_data":2340021,"sent_data":21026,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThreatMetrix","description":"LexisNexis ThreatMetrix is an enterprise solution for online risk and fraud protection ('digital identity intelligence and digital authentication').","website":"https://risk.lexisnexis.com/products/threatmetrix","common_platform_enumeration":"","icon":"threatmetrix.png","categories":["Security","Browser fingerprinting"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"www.clarity.ms","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-04-03","domain_rank":4064,"first_seen":"2018-08-22T07:41:57Z","last_seen":"2026-07-02T01:16:06.206112Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":938,"comment":"","tags":null,"fingerprints":null},{"fqdn":"analytics.twitter.com","ip":{"addr":"172.66.0.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-21","domain_rank":6366,"first_seen":"2013-04-10T19:53:18Z","last_seen":"2026-06-29T07:34:40.134972Z","alert_count":0,"request_count":1,"received_data":1541,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"analytics-ipv6.tiktokw.us","ip":{"addr":"23.214.96.66","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2023-04-24","domain_rank":6850,"first_seen":"2024-05-27T10:39:36Z","last_seen":"2026-07-05T05:09:00.715444Z","alert_count":0,"request_count":1,"received_data":1355,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":1,"received_data":40941,"sent_data":547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.ads-twitter.com","ip":{"addr":"199.232.172.157","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-05-26","domain_rank":6404,"first_seen":"2017-01-30T05:00:15Z","last_seen":"2026-07-03T04:36:04.463571Z","alert_count":0,"request_count":1,"received_data":48655,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ad.doubleclick.net","ip":{"addr":"142.250.178.38","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":843,"first_seen":"2012-05-24T20:21:08Z","last_seen":"2026-07-03T21:59:54.762388Z","alert_count":0,"request_count":1,"received_data":545,"sent_data":568,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dnacdn.net","ip":{"addr":"178.250.7.145","port":443,"asn":44788,"as":"Criteo Technology SAS","country":"France","country_code":"FR"},"domain_registered":"2019-07-17","domain_rank":5184,"first_seen":"2019-09-02T15:07:45Z","last_seen":"2026-06-29T08:07:55.764713Z","alert_count":0,"request_count":2,"received_data":1594,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dynamic.criteo.com","ip":{"addr":"178.250.7.41","port":443,"asn":44788,"as":"Criteo Technology SAS","country":"France","country_code":"FR"},"domain_registered":"2005-06-17","domain_rank":21291,"first_seen":"2018-04-12T10:04:05Z","last_seen":"2026-06-27T10:01:29.802054Z","alert_count":0,"request_count":1,"received_data":75547,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"analytics.tiktok.com","ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1996-07-21","domain_rank":4379,"first_seen":"2020-02-29T13:09:05Z","last_seen":"2026-07-04T02:51:25.924966Z","alert_count":0,"request_count":7,"received_data":665054,"sent_data":3885,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static-cdn.trackier.com","ip":{"addr":"34.149.104.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2015-06-16","domain_rank":619039,"first_seen":"2022-09-05T09:59:38Z","last_seen":"2026-07-05T05:37:19.073075Z","alert_count":0,"request_count":2,"received_data":14094,"sent_data":960,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"monitor.tapper.ai","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1463478,"first_seen":"2024-10-22T13:09:41.449331Z","last_seen":"2026-07-01T21:31:05.049668Z","alert_count":0,"request_count":1,"received_data":149609,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gum.criteo.com","ip":{"addr":"178.250.7.145","port":443,"asn":44788,"as":"Criteo Technology SAS","country":"France","country_code":"FR"},"domain_registered":"2005-06-17","domain_rank":3506,"first_seen":"2015-01-22T10:58:57Z","last_seen":"2026-07-01T07:12:41.135182Z","alert_count":0,"request_count":1,"received_data":13551,"sent_data":601,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dynamic.criteo.com/js/ld/ld.js?a=102684","fqdn":"dynamic.criteo.com","domain":"criteo.com","tld":"com"},"ip":{"addr":"178.250.7.41","port":443,"asn":44788,"as":"Criteo Technology SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"76d1ab600d5117efa8f96dcff1b504fa","sha1":"bb7559958923f0d1d6c62f5aaace0acf4d7fcc20","sha256":"287765618b065f9fa812327101796928863498fc37ae743b39e3b366a76c3fb2","sha512":"198b83d9a73635e35642b97873ae152a29e30b2208450409f965d4da9783bc5929fd25e2604baf3b211a191cda457096b058f2c7ac7bee35b2508144dbc76d8c","ssdeep":"768:LED1NsH/XStA9JTHkNI+6M76XKzGG/GGdtMjLXB/3/o4zNGVg45dJqAvMfv9ZIKX:4XsvzHk6k6JgvMNZHX4eWiXyxDs5kO","tlshash":"1173f889b6d67039439390b4903f1205b33b2a6d640c84acb995d9e53cb9e0b6637ffd","size":75062,"data":"","first_seen":"2026-06-22T04:42:38.415509Z","last_seen":"2026-07-07T03:03:14.834767Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d68ccba8a8d3c0df7cede7b2787dbf77","sha1":"75235fe5cfa59788bab08772b5367a81965616b1","sha256":"4b1998c36c6fb083398c350abaf2369e03e2784d0862571252b9352803bd2393","sha512":"ba37879d649484de79a6675d93d62971c28bfaf967c8f2b241696e9732b4611b6efc3a9b9da471dbf7b6cae5f2ae5e1be8abbf46956a034a7348be8c7949fc4c","ssdeep":"","tlshash":"f751b7f5b395103149f28967743eef8438b14a82dd079101c75f9e68a8d4f524a36bdc","size":2449,"data":"","first_seen":"2026-06-26T21:08:00.614191Z","last_seen":"2026-07-07T03:04:05.447882Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c31ca6f5d573cd79ec9e6420d4640caa","sha1":"323aab804c36f4893020ae0ee789e6f1a45713b4","sha256":"c52321fca51cdcbfe7854eca4847d3620d330af5b1a3b0926100a0335b44024f","sha512":"1099871566c98fcb505a89cfadfd74023025805267a1430164f33d1323ac77091bd832474657fc2d05b6d56ac35a54c45e2c51ae673ab875e618f2824da51fae","ssdeep":"","tlshash":"23d0953d7758547113931419972fbf00a47306034d415144c2654c447c30845df162df","size":233,"data":"","first_seen":"2026-06-26T21:08:00.615252Z","last_seen":"2026-07-07T03:04:05.448402Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2437b76aca200af3fad4af43cbcbe895","sha1":"0f9d6c0a722a94ca711db818f6b143a4cdffaaee","sha256":"c66f4dfd3eb3948430ce7e4a6acaa5bcc8d07326b5a3494dc8ccc0ac13fddf84","sha512":"6001c83114e0ab0c80ba53d9141a14de55916e1fe8d7eb137118ceb4788950bdb4b0a3dd3ee997efba8c9ce15efa0ac9385c6a98f2d40f99e9ce97bb0eeab0da","ssdeep":"","tlshash":"595162b777853ab083e5e679207fbb04617e57c268008581e63ddac46d78c424abb8fc","size":3058,"data":"","first_seen":"2026-06-26T21:08:00.616289Z","last_seen":"2026-07-07T03:04:05.44892Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5803ee53326d8fdb77b42c7df2b715c","sha1":"eba8ed5d8ab153a3f33be07438afff22858e4ac6","sha256":"27a8ab9c51185a6508d66eefe773c21f4bfe6b889a15c5e6cc13ae4f92ccb13b","sha512":"e839147593a3d2b1a9061da7294c4b4b6af19648f48d61dae36fe6d4337ed8cad6d9e9e4096bb3166e7f7c5181368e8f0ad1d4210347a09c004e5fa23311460c","ssdeep":"","tlshash":"a321e0fa7251513e62f5161451aef3c0f6774bb24a0b8891c63eed02bc1cf4d8e3298a","size":1284,"data":"","first_seen":"2026-06-26T21:08:00.617379Z","last_seen":"2026-07-07T03:04:05.449431Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3284e8aac6c03da8acb33050dd7afc01","sha1":"513f07300c2bb20f3074f127bae093ba1f44ffe3","sha256":"9e7f808a05c95aebfedffc87cb74cb28ef398179f01a2feeaa50d0e84ace7379","sha512":"ed32688c6279d2e9095a437d08be9ccf4990a1649689bae06f2823f713ff7819aebf7e85df2fd560b0a9136dfb0d02d23895e4af221177570d56e758bc404905","ssdeep":"96:ioVKNpj0GbsbjYCq+mph2HTqw92ZrDtBx0q2mwBTfbJqz4S3fdkSlGiR/tpBeb:ioUPj0fU+whwH9ADtBxhJwBTflqzD3fa","tlshash":"65c1d6eb73c23df017f2293864afaf4091ba47d11c468456d42ad941bd3cd8e06b2dac","size":5955,"data":"","first_seen":"2026-06-26T21:08:00.618375Z","last_seen":"2026-07-07T03:04:05.449932Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c29905518c909537937c0440b5c7cb0d","sha1":"a4c3d45bfee5bb4c384a1d508271eec4b1f84fc1","sha256":"31024ee57c1fca4d9f788edd66c8587030e5d3a0c1b72c6948d383e3ad3d34da","sha512":"7dd50bf486bac210b182009952113806850641e6ef4122bc7a5c4be789776084e49002405c136f11f2aa1e28e7411008fe2fd9c95f78909259ec1d051106165a","ssdeep":"192:nNht1ifxxba+CXMIwObnXDm+35tUUBt/V9I5Q/K2tB41dbuhBMqZB+9pckmslumR:nX+fObn9JZnOg4Pu7MqD+9lrua","tlshash":"4a72c4f4b3e730ba03e61464447f9786f474de829909c0e1855bed943cbca454a77eb8","size":16757,"data":"","first_seen":"2026-06-26T21:08:00.619597Z","last_seen":"2026-07-07T03:04:05.450467Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"582528c1cc0193fd9eff5eb5d0fd8f83","sha1":"9675cd39492ec6aaa176e8cf0cc3a14eda471fb9","sha256":"ead98cd113eafa0548a94b0a3698ea7b973d5a4dc6f877a7ee1089867ecc800f","sha512":"1f232351ec8ee250e2c34929972cc6e8399a12fc21ce53ecd8c7515157d1fd8a06b5c634d54d7b5e7d7bc4d163b222d1cc5608f5b8cf62d6ce54bad3a6f9e4f6","ssdeep":"768:YSJWn9yAeKj+4pJRZMCkKiqF6TjM3GpQCPo9HpkDOSiEnBiJx6tCpXXwtEe1+T2e:YSJQq4pPhGzWELEgK7T1oPhu","tlshash":"ba033cb0f3801838b2e3cd64f0ab6f4674718b83cb078658c855e9727dc5d636676aac","size":39019,"data":"","first_seen":"2026-06-26T21:08:00.620692Z","last_seen":"2026-07-07T03:04:05.451209Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a3a1ef5c962f555597ef6d0293f456f","sha1":"2048016a37eafd242bb4406faf22efc7bf3ca50b","sha256":"1cd287800b3febd7edce61523e148c442f5a9a78c3b49e660eb59ff23bb56bd8","sha512":"35a765c30af254569cb878064df66b849151a4048b07efe4be745f9ad579a53b4c092a9758eab51f4560e8070dd09cb0a10b7a5730b9d43d2942b535f1815e03","ssdeep":"","tlshash":"4fe0eb4b30961820178a0cfd22b2b20d30d33320b31b1c20ccbcfc282962edf4101d8c","size":295,"data":"","first_seen":"2025-06-10T12:35:48.086139Z","last_seen":"2026-07-07T03:04:05.451759Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8e7884ab35d79c1f06b3191f20e1e3d","sha1":"097c80497eb19e8d3e8e135b08785ff45e805759","sha256":"4f3c2b3cedc03a18a4ad6e437b29e55981d3c58f32c3a51e4c4171a9ab2025ef","sha512":"d43d70213a42452c9bb7a8400a98686516353ce4dc7922009d532ff7dc909fb3a4ef09b5188198471c253a7fe86c82f4667f131ab677960b475e5f8e21f5979d","ssdeep":"","tlshash":"17c08031b1bb5936a6161ec1349414752ccc0116c56f459cec34501c0c0ef7391ddd27","size":164,"data":"","first_seen":"2026-07-07T03:03:14.853366Z","last_seen":"2026-07-07T03:03:14.853366Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d43ec3d4b880e24691b6eef3f213f20c","sha1":"ea5934484da0cee96f4664cc4ed9f41967fa5390","sha256":"10b296d06076326ab9cae0d19896ceab8834353e1e9f4ee81096cddcd7b1303b","sha512":"26d7e34efeb38e4d3b3496d744af13a58cd21fde22697e9cb957e12e95a54bc8e1d3ea1d4a1ce4ffeb8fc189f0311e8688bca7fcb7eaf9377a029dce430ccfd6","ssdeep":"","tlshash":"0f31406016b3e11397eda17907cf73027014858b16d287d4ccabdb4c03ba793c191ae7","size":1524,"data":"","first_seen":"2023-03-07T14:46:51Z","last_seen":"2026-07-14T20:39:21.543216Z","times_seen":482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a30c6ef4efc391afced744e0c18c1097","sha1":"b9f1e5ae1936d33d82d1cc4a3e9f22acef19032b","sha256":"c00e351d5258fe117be3756eb7855efe9539587c28ac79874ad99f0ec6ba3819","sha512":"d0a619b3e5b3a375ca2b74b0f60411fdc38254b75c74168c28f47fcad5f690c2a58d4b4749de5c505a33c8d34f385294183b3dfb1ce62bd4471b167268aa61c0","ssdeep":"","tlshash":"b1e061e77817087a75df05fd67b5901435836109640dc922fdfdd4241f61a97cc5e89c","size":434,"data":"","first_seen":"2025-06-10T12:35:48.078271Z","last_seen":"2026-07-07T03:04:05.455537Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/js/main.541f8879.js?__cv=v39","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea180fed1e7d68cbee7b36538551fd73","sha1":"dec2b23a798eccaa7770931f6d383c42086db778","sha256":"7fcdebbbcf9e1271f2ddabbbfa097e9fe04646e5a4b6d0461343af4f1b5bd941","sha512":"e1c892f13c4d6a989d980105a9e81913e73ba35b4b239315e3ee8f80696b3b81e088b7be18b851772d0a99bb4a2428b87b3b12663eab82181072e4f21cfd3b52","ssdeep":"12288:5y7IST5H80dGLTc0hwBC2TwJyRMAadAw5B4+bFif+3vyX50v7nzmGLYj5U:5MHP0wBnbdahjg2KX50PmfU","tlshash":"5c057dc47291b4a66eab45c650bf854db33e1d09b40e8870f325fd98256d9c8b027fee","size":838014,"data":"","first_seen":"2026-06-26T21:08:00.605723Z","last_seen":"2026-07-07T03:04:05.442059Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KJPLS3Q\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"279279ecae22f6a89e1c8ad830417055","sha1":"798ad555e1806ab78af40dbfe01f5179d7815a50","sha256":"a0d2ff4216ce8486634368fb90e31e24b32ccfd39e4d138f400322b55b196fcc","sha512":"ddd39107df30bbb4ac253e3452c21205499c49a9c9de6b5367dc7535ac22372b79883250f84c79b697518e2a423fa66a37321fa11a116387d5dc9df689bdb69f","ssdeep":"12288:Yjr4OhQbB3DvTc0FFwbb280oKXkwmx5zh:DB3DvTc0g2fpXFmXN","tlshash":"aee429ceb3c5b4769396e468943f018f697e20e3b44c9895f089ccd42e7056a6163fbe","size":659116,"data":"","first_seen":"2026-07-07T00:21:32.908136Z","last_seen":"2026-07-07T03:04:05.42925Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.ads-twitter.com/uwt.js","fqdn":"static.ads-twitter.com","domain":"ads-twitter.com","tld":"com"},"ip":{"addr":"199.232.172.157","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"6404fceba8a6f71ceb2342c923ae791f","sha1":"b041e15555e2c1940ad5a2794e3b924e958529d6","sha256":"fed344940a52670af96d23cd88e8fedf17c4db4adfeb66e284f36df2b14c1219","sha512":"1734d7c2f0a4fac3fd66005e9157eea73b9a81f912cc6ac990ffc584766cf9a7a25d4725d0ec220554c11a0b75425c0be777374564fa1710107bffeb02c5c533","ssdeep":"768:pvY/2/uISU5w9BOXDeivH3Izbm6XjQbHekuhOfDIaMfFSArOoqQT0VC+FI5kv5DS:pLM56MrQ3ZLnKNNL","tlshash":"6323e896b2d4f4b103d2a5e9543f011af23a5828301da1d4b3a8dcd66c29e5f9673f3e","size":48081,"data":"","first_seen":"2026-04-18T15:57:00.528457Z","last_seen":"2026-07-17T12:49:31.212215Z","times_seen":800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monitor.tapper.ai/bundle.js","fqdn":"monitor.tapper.ai","domain":"tapper.ai","tld":"ai"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acd39c46e642011954a9c0f00bf398b0","sha1":"60220392215579a8b52f71154b7f6149096603de","sha256":"9a3f0e83e7cf10e6bc4b44130b68129787df1f52c1290a8f3572155e96ad4dfa","sha512":"76a097c9a50946b4712834889fd4fecc17977ad36272accbed5281db2de844044768ad03647b93e836e7b50dfed43d58d7797455aeb571eef19f8ca148c1314a","ssdeep":"3072:WbbaxwXsXEgpFj+7RBotNqZV1MdLMHH0Yi6US:5vqGIHH0Yi6US","tlshash":"b7e36be472d2b07543b350b6507f0201b23a7d58740da495f1aacee93966e07923bfbe","size":149001,"data":"","first_seen":"2026-07-07T00:21:32.962519Z","last_seen":"2026-07-07T03:04:05.432317Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gum.criteo.com/syncframe?topUrl=dujaselcmpe.click\u0026origin=onetag#{%22bundle%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22cw%22:true,%22optout%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22origin%22:%22onetag%22,%22tld%22:%22dujaselcmpe.click%22,%22topUrl%22:%22dujaselcmpe.click%22,%22version%22:%225_46_0%22,%22ifa%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22lsw%22:true,%22pm%22:0,%22requestId%22:%2291656bc5-0f97-456c-a970-55abe95ff84c%22}","fqdn":"gum.criteo.com","domain":"criteo.com","tld":"com"},"ip":{"addr":"178.250.7.145","port":443,"asn":44788,"as":"Criteo Technology SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"a83cc3d5384e615b98e05f62d483923c","sha1":"37a21d9eda67840f8319db5978d7e832d6a580aa","sha256":"c2b2ca81c800fc2effc145d31ea6a1e20e24a724818e35e17301ae5b050249e0","sha512":"ac667411680b80f506d47c8ffb7d67ee8b15f4c1f18ebc7cbd95ba0847038e9c36505761fcaa567f1184b0fd155ef018c563eb1c0d7725a713a8335eab894849","ssdeep":"","tlshash":"c3e0868f06518520c63108404f49a30d3136eba69297dad17a0cc6416ffee4b469f7dd","size":330,"data":"","first_seen":"2026-06-08T04:30:19.118732Z","last_seen":"2026-07-15T03:01:18.496127Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gum.criteo.com/syncframe?topUrl=dujaselcmpe.click\u0026origin=onetag#{%22bundle%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22cw%22:true,%22optout%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22origin%22:%22onetag%22,%22tld%22:%22dujaselcmpe.click%22,%22topUrl%22:%22dujaselcmpe.click%22,%22version%22:%225_46_0%22,%22ifa%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22lsw%22:true,%22pm%22:0,%22requestId%22:%2291656bc5-0f97-456c-a970-55abe95ff84c%22}","fqdn":"gum.criteo.com","domain":"criteo.com","tld":"com"},"ip":{"addr":"178.250.7.145","port":443,"asn":44788,"as":"Criteo Technology SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ecc1284254d0de75c79758580e7dd22","sha1":"0b3b08e523ae937ff3b8cbb434546a8cbaf57e3f","sha256":"e52c73aaaba2d22f69c8c652896e281ee16350d39caff6633d052f1973245a4f","sha512":"97d3dda361c1d55676e34961327f8217975d2296dc2ddb7a18027a36e7b7942b13fc3c27d5c535c30afc8f443660801350428ac1877698f066ef41234727863d","ssdeep":"384:39zAkRQYxhk2YZKnKWjKMVKHDCXK/vmeKCXyXKkV:fRQYxhL/ODC2G9","tlshash":"704295caf6e3b024525391b0423f5d0ee33e7968684a81acb865cdd12d7d64e5633bbc","size":12449,"data":"","first_seen":"2026-06-08T04:30:19.12103Z","last_seen":"2026-07-15T03:01:18.499691Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/__ext?u=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Fsmartbanner.js%2F1.14.6%2Fsmartbanner.min.js","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dd74b8e555381aba9f392a6c18ef322","sha1":"735dbd5c6dfaeed0a9dace49d9797651896052a1","sha256":"9845b2b9eabf2f381f6c27580626e67e65bd4c263354dc0baa1923af5becd4c6","sha512":"a8483c17296a3651e6024ab5b3a9f3a9f31172128fd3618275b015a47fd7e06338e004e0a5f56f59fee3ae2a3f9ab22ab844097461ef82bcc526d37a2c16bf11","ssdeep":"192:3e73F9nkMfF9RduF9xM1te147IcMUF9qRYo3tVctWS:3e73F9kMfF9DuF9xote1gIUF9kYmIYS","tlshash":"dd42620e7ae0b1b0c28751ad696f150a70b4b92ac408c446e279dad86fb0a4643f7f7d","size":13142,"data":"","first_seen":"2024-05-01T18:22:04Z","last_seen":"2026-07-07T03:04:05.444802Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-cdn.trackier.com/js/trackier-websdk-init.js","fqdn":"static-cdn.trackier.com","domain":"trackier.com","tld":"com"},"ip":{"addr":"34.149.104.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98b24faac2fa0126fd3ae36310e0e847","sha1":"f23054f114b2540c3b547e0bd4f97b2a7955a489","sha256":"bee5491f89b37c3d92638f58b768087c34e76c43020b83503f879a1b41176e8e","sha512":"3f88466b1cdad9fedd91e75bc25f5f9641f4962a616d801ca58e1ec830e0a3e40cd4e722bf934871ced7158f7be73fdfb89c348769d0acf4a49c7a4ba99acf92","ssdeep":"","tlshash":"4ad0c22939925128441720e96b3ff72027328312201df161be6c8a48ef60d779d158a8","size":285,"data":"","first_seen":"2024-08-09T09:45:08Z","last_seen":"2026-07-16T10:45:36.198719Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-cdn.trackier.com/js/trackier-web-sdk.js","fqdn":"static-cdn.trackier.com","domain":"trackier.com","tld":"com"},"ip":{"addr":"34.149.104.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22bbb8900fb45e3a4c3b20b8c49b8a62","sha1":"29a551794a5ebfb8284a29e20f39722c6a50efb4","sha256":"aad3defbd0301bfaf750eb1f512c10bca06b6354d5b79b4148d5d9b4d1c88153","sha512":"bed34fe0cd9e5a86d7f4b071cafc9a71bd4f7625945e7dd209fdd287bc30e16fa5b7cd1f46b41e4a49936b00606b67c9b54557bb9f0c8d4140de3526cb34d25f","ssdeep":"384:43IX2vMBfTyulhzS5srgIPfFDqc+e30eob92ch2SkpfR:43IGQuu6sFW6","tlshash":"ea42f79f31577434a6c22075188f384ae1ba565c691d81a0e792daa13cbcc5f8373f9e","size":12430,"data":"","first_seen":"2026-06-06T03:08:13.632248Z","last_seen":"2026-07-16T10:45:36.323126Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.tiktok.com/i18n/pixel/events.js?sdkid=CAK6Q7RC77U1E8B1DB1G\u0026lib=ttq","fqdn":"analytics.tiktok.com","domain":"tiktok.com","tld":"com"},"ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a15c19324875d0ff608cb60b4dbd349","sha1":"633afceb88eb85a062899c78db213af6d163308a","sha256":"b0303958f8bbac63e92804547dd47c4a6387d1000ea803c635f523c0f223eac6","sha512":"08e9bc14f931877a50b518a20a61f618b6f2efefacab3a74f55a5508b644e0594df1fcdddc0ecc2b31e9255c81870cb9223793a82078572ed393077b592a8252","ssdeep":"192:JV4nn1kc0IOnqq/P+4RF4O249c5LKwuwDEVa3WX1+TWo0gkshJ5f4w6DeF7hgfgC:Qkc0IOqhDE1XYTW8kyj/7afgC","tlshash":"3f52856e121464bbd0e6cf83e3065a23d77d187fd100b5c563bd8798612f826c2aee4e","size":14242,"data":"","first_seen":"2026-07-07T03:03:14.837826Z","last_seen":"2026-07-07T03:03:14.837826Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadcallback\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7425ca005c7316f61b45059809059236","sha1":"9e1600a46f5f72eee06bc51dbf4fff2c7d9e330e","sha256":"2bd75dde8330c029f9b5501c4cb06d2f1859d6b73735c31a91f436053c11f01d","sha512":"9bb9e9c3c53a6eec109e5e5b1fca4c1309e01d8dd8e26162e2d84e5b4d4fb6c3c54dde28c3c098fffecc53330437903c2aa4ea969f74566b9ea494b9e513d4d8","ssdeep":"","tlshash":"d1111bb22a04f0384f3219e1e1fbcbb8e462702db15c85eca501cac42e7accbcf04456","size":1035,"data":"","first_seen":"2026-06-25T21:28:07.860638Z","last_seen":"2026-07-08T12:26:26.078001Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KJPLS3Q","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ca4a98d6906957bcf8f6ee16dd88bcf","sha1":"94de7c8897921f9308d491dd17563f703b2c41c0","sha256":"96abd5c8132bde8b5d88605199e36196641bf9d7f7a928e4d15f3aed3d5b8b32","sha512":"1be950ba27d2197c2b26e04cd1163cbf04bca1b6eff430424861129a5ee2688db27e36bacfb80d141345564bac98c3c7f9745c939867ccd1e71b8bc641820f09","ssdeep":"12288:Yjr4OhQbB3DvTc0FFwbb28nzKXkwmx5zh:DB3DvTc0g2sWXFmXN","tlshash":"62e429ceb3c5b4769396e468943f018f697e20e3b44c9895f089ccd42e7056a6163fbe","size":659145,"data":"","first_seen":"2026-07-07T03:02:30.744744Z","last_seen":"2026-07-07T03:03:14.83245Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49fabc6e91fd52472998c0d9d97a4bf6","sha1":"57b2713b0915385747263bfef9b065ef787f66fe","sha256":"9c7189609372877113e807cdaf4ccb851bab7c2746832b91bc848417f150ea6d","sha512":"6ba1aa07be5b4e71da3ca04049d2df88530ba71a96a2a4ada7b99ca0f8fff32cad243c1ea802b9a040f80f925e46160ea072d69a75c1a4968e4a941ec04c3a70","ssdeep":"","tlshash":"b3d02eaa3c32e4a002042eadb0bbf7086382222a9ca0909505c9c94ca530fd18e82982","size":265,"data":"","first_seen":"2025-11-25T05:36:36.375137Z","last_seen":"2026-07-07T03:04:05.454996Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.tiktok.com/i18n/pixel/static/main.MTIwMGUyODI1MQ.js","fqdn":"analytics.tiktok.com","domain":"tiktok.com","tld":"com"},"ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96710b3e3dd9ed48e3bf556946e75590","sha1":"3f4f7e5416adfcae43736cbe0a7c014d782e12ed","sha256":"92991e1d02298dc1f8c85b708f7301b1cff98dba799f6c9bd63320383514826e","sha512":"ca3baaa5483b03aa827ec97a8ca183ce146e010bab783ff50ebd787f37b74e12745efa0603a0a427a68e655d4808441887a76a5531dcf2e34d166b7cc6cfb9d1","ssdeep":"6144:cjB2pzW6CS7Li23nEqJkbckr2zbeaBK1DObFE/cu:cF2p3PYCkgkr/Vcu","tlshash":"f8a4d9c9f2d6f02543a36261902f110bf23f6a59b40d8098e265d9d1bcf998ad237f7d","size":487716,"data":"","first_seen":"2026-07-02T16:13:29.656268Z","last_seen":"2026-07-07T07:24:08.749617Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"20a3b1e1f6332005d3a00b47c6f3092d","sha1":"787e0ddbb05f6e6dc019f68dbcb5c641c628547a","sha256":"d6731c3de00cfe1d418f0905d5b78e1cc7c382a95e95cadd44aa22b81a98c5c5","sha512":"ffae73ac43daaf89b463ee47ddaddd2d7c9800a96bb1145b2afa59a352b3eb08e4e7c0d88b07585a54dd3ebdcc39e563b727a282015c4b002f230a6315102ce5","ssdeep":"12288:VOuNtbumQUfi2q0LWNLaXnymCAYIJ4wyzTmWRF8WdWT0KZ1HcezE9:hb9+kW2XheRmWdk0KZ1Hi9","tlshash":"a91549d97152b0a95362f6f564376159e33e5826c80c084e7288d8f02ef4879f1faeb7","size":895421,"data":"","first_seen":"2026-06-25T14:15:22.826378Z","last_seen":"2026-07-16T13:33:45.653776Z","times_seen":12261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.tiktok.com/i18n/pixel/static/identify_b8133453.js","fqdn":"analytics.tiktok.com","domain":"tiktok.com","tld":"com"},"ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"af5fd9d815364404d13c5c3c4f4227cf","sha1":"8382572d45a0b826d73605c32cded16833bb383b","sha256":"c222a1fcf344eb3ba3ad51666992a44f004a5f7e8531e05e5eb253312134fc79","sha512":"7ab2430a8ec59770a50fb62ba8383744b915515111f6f77e22a92cb6c22a4e76f5f8159bfd76d3934d706942b72fb7019f8140ba35adc0f3ec18b497b4a39cab","ssdeep":"3072:RFYSFOU03o4PwjhIBVT39uwZCsJLErU0iAh:PLFXhKVT8wZlLaU0b","tlshash":"b3e3a7b77a40bb2771b13b088e1ae28fafdc9c56dc48908c97e7c8db5c60921607d759","size":155651,"data":"","first_seen":"2026-01-08T17:14:42.21812Z","last_seen":"2026-07-17T13:10:59.079412Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWphc2VsY21wZS5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bfvkvcqw5uh7","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d8463112156f537e64bc0cc795dc133","sha1":"3b21c915761369b640a86538e29ba402098ba12a","sha256":"b270cb1a41b1cf6fda1dd535019b54da06652f28e7ea11037dcc4393c60647d7","sha512":"f9906d38d98f0ed74ab190030b94625a420425ffdd4cb75114c533d13eff6873af4def45fc015dd2be63d6c62793164fe93616183f43e3dd8ab0d65308c53ee9","ssdeep":"","tlshash":"c3d0a7eb1441cdf7cda09dab9743d1a678efd0b780a981f405e04c522ce1c9110245ac","size":252,"data":"","first_seen":"2026-05-25T21:58:32.98547Z","last_seen":"2026-07-17T12:06:55.356751Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"329272a3704401ea3578e1234387f374","sha1":"6f0ebd9cc0a6cb3746472d583f4bac609d270046","sha256":"42b15feb684388aed3f811e13a4a1814ebd7bf3f882d1dc45dc2f048f52bcec9","sha512":"4429d869f4f58573f67ffb545615f039f7277956b494d916481e45197d9f30e637c1439525bb9636b4b419fe79b5d909a0f844afc3d59d43e58622bf3cf61995","ssdeep":"","tlshash":"f711142d38f76808d60f9bfa365f978d2477b8115e80cd90c149c094a555fc840a1bbc","size":926,"data":"","first_seen":"2025-11-25T05:36:36.356824Z","last_seen":"2026-07-07T03:04:05.456077Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"tourist pagefalse","filename":"https://dujaselcmpe.click/webapp/static/js/main.541f8879.js?__cv=v39","line_number":2,"column_number":598484}]},"http":[{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWphc2VsY21wZS5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bfvkvcqw5uh7","date":"2026-07-07T03:02:37.215Z","timestamp":1783393357215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 383865\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 17:01:56 GMT\r\nexpires: Tue, 06 Jul 2027 17:01:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 36041\r\nlast-modified: Mon, 22 Jun 2026 00:01:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":895421,"size_decoded":384751,"mime_type":"text/javascript","magic":"data","md5":"20a3b1e1f6332005d3a00b47c6f3092d","sha1":"787e0ddbb05f6e6dc019f68dbcb5c641c628547a","sha256":"d6731c3de00cfe1d418f0905d5b78e1cc7c382a95e95cadd44aa22b81a98c5c5","sha512":"ffae73ac43daaf89b463ee47ddaddd2d7c9800a96bb1145b2afa59a352b3eb08e4e7c0d88b07585a54dd3ebdcc39e563b727a282015c4b002f230a6315102ce5","ssdeep":"12288:VOuNtbumQUfi2q0LWNLaXnymCAYIJ4wyzTmWRF8WdWT0KZ1HcezE9:hb9+kW2XheRmWdk0KZ1Hi9","tlshash":"a91549d97152b0a95362f6f564376159e33e5826c80c084e7288d8f02ef4879f1faeb7","first_seen":"2026-06-25T14:15:22.826378Z","last_seen":"2026-07-16T13:33:45.653776Z","times_seen":12261,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/__ext?u=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Fsmartbanner.js%2F1.14.6%2Fsmartbanner.min.js","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.400Z","timestamp":1783393356400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /__ext?u=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Fsmartbanner.js%2F1.14.6%2Fsmartbanner.min.js HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3inYpBlu%2Fj%2BKONjhMgYo7frPNkJqCzd%2Bna%2FOHHOyjimdxOYF55wNq8N8yLR%2B98hOMMxHQf61A1L58MZ61UzHlYa5f53UbYXQaG7o%2Fxnz%2FW47BM9x6hBiy%2Fmc0RuIHXovGBXzGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7d889e723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 41458\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:38 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083868551\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13143,"size_decoded":4258,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12997)","md5":"3dd74b8e555381aba9f392a6c18ef322","sha1":"735dbd5c6dfaeed0a9dace49d9797651896052a1","sha256":"9845b2b9eabf2f381f6c27580626e67e65bd4c263354dc0baa1923af5becd4c6","sha512":"a8483c17296a3651e6024ab5b3a9f3a9f31172128fd3618275b015a47fd7e06338e004e0a5f56f59fee3ae2a3f9ab22ab844097461ef82bcc526d37a2c16bf11","ssdeep":"192:3e73F9nkMfF9RduF9xM1te147IcMUF9qRYo3tVctWS:3e73F9kMfF9DuF9xote1gIUF9kYmIYS","tlshash":"dd42620e7ae0b1b0c28751ad696f150a70b4b92ac408c446e279dad86fb0a4643f7f7d","first_seen":"2024-05-01T18:22:04Z","last_seen":"2026-07-07T03:04:05.444802Z","times_seen":30,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/duCo_WHeadline16_Bd.2496de66e37e8637049a.woff2","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.780Z","timestamp":1783393356780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/duCo_WHeadline16_Bd.2496de66e37e8637049a.woff2 HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739c7fe8bb723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083812213\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7L29a3z74Op2U3hOLQ4yEB2qZJcb3gQf0g0cFP33UfLxLMmOtACIfIkmNlQb6CRcmvNhiPENRKQfmBonscXdDBL9lldMkAui1cb1fSch2ajg%2BJH9tYvPcMiKPz5Bl%2F8g1EAb6w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 74024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74024,"size_decoded":74799,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74024, version 2.0","md5":"9a96b6ad1b1def752fb3a28b1ef20018","sha1":"cb9e78650c1cd55fec0e9eaa888f58638cf81d95","sha256":"5fb213540c50030ca41727cd32fc61baf72aa170ed67bcd06f396a7d49e5144a","sha512":"cb959d89ea1b01f9605d3c03f79edf9281c296f85bbcbc94dddc9b6a3700206d99aa75c9da10461204e7f8f4d5ac17c11e8f2aeb2a5f35741f706d7d661b2ba1","ssdeep":"1536:fOvr2feojoL5aBi9kXIQp5XS5e+DWxrMHqF5qzSKtIcGr/Cs:fe2XjoL5miknKnDwrKqnqduv","tlshash":"0b7302f812066130b1b48210363ea4a15c4cbf367737226d98dbc9a9f3d666c545eecf","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.429957Z","times_seen":40,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWphc2VsY21wZS5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bfvkvcqw5uh7","date":"2026-07-07T03:02:37.468Z","timestamp":1783393357468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 02:29:48 GMT\r\nexpires: Thu, 09 Jul 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 433969\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-07-17T13:41:02.507075Z","times_seen":685897,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/favicon.ico","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.941Z","timestamp":1783393357941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/favicon.ico HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a; _gcl_au=1.1.75140856.1783393357; _twpid=tw.1783393357020.266502528348788865; __tr_luptv=1783393357056; _tt_enable_cookie=1; _ttp=01KWX8E3CSE4TJT5JP4F5FS3WS_.tt.1; ttcsid_CAK6Q7RC77U1E8B1DB1G=1783393357212::U0jQu6lA_XgMlKZeyiPi.1.1783393357430.0; ttcsid=1783393357213::2ifl0XFUA9TYIyjPSgG7.1.1783393357430.0::1.-5092.0::0.0.0.0::0.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w2%2FRnyb%2FFQ8HDJhe31dFpACVbED0MO1R7J0m23m4Iwt7XXpuhnOSC4EK%2FjCvE3Mxx21EjnEoy8xGAgl1WU2vw%2F0%2Fim32J88paG%2BSVUWSmSnL%2Bo8gHP5GfOjAAlsK%2BVsssDTnnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: zstd\r\ncf-ray: a1739c87292d723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nage: 41455\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:42 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083894705\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4118,"size_decoded":4895,"mime_type":"image/x-icon","magic":"PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced","md5":"c383fda46f09b9d7ef560733eafeb0b1","sha1":"bd6ccc1df01b1d8678b1c0bea55f9d9848b371c2","sha256":"0a2dc6f130f290ca8a7f1b48bee079fd3e035d244b959ee0dff7ec60d5d243a2","sha512":"a1acae034b91d97c92baa70dec721018a1121a189ad3f0918923cd7bcb700060d8fcb0695362c8ac21027c59d37cea4f0084fc2b3157755363faf25fd2b65acd","ssdeep":"96:WWEDa+Wk/BlZwqI2jKBa82YpR2q+hlCTOqzFpjngkvTgo:hk/BlDj18RRchITOqZp7Vz","tlshash":"0d815d4e2a90ecb3d0bc79f72b06564d98f8e86de086a0175008d1d559d1cf13de559a","first_seen":"2024-12-12T06:25:26.244914Z","last_seen":"2026-07-07T03:04:05.440011Z","times_seen":26,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/__dubill/presolve","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.411Z","timestamp":1783393356411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"POST /__dubill/presolve HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1,"data":"1"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSwykxmhP860hW86%2BEHbwH0IyXkm%2BfksOWWpC%2BDTIShPsmzcdjq%2FFR2mpvz51cUj5FZ1cnX2ZDQzzy%2BVau34%2BQ%2BtJkAbHlme%2BykcB2YG42mhXVMwpfJ2O%2BBo%2B1zyL%2B4eyn89xg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1739c7d98a2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1152,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t.co/1/i/adsctp","fqdn":"t.co","domain":"t.co","tld":"co"},"ip":{"addr":"172.66.0.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.040Z","timestamp":1783393357040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 09:46:43 GMT","end":"Sun, 09 Aug 2026 09:46:42 GMT"},"fingerprint":{"sha1":"65:E3:08:E7:E7:30:7D:47:E2:F9:BB:7B:16:BB:26:87:CE:C3:2C:C5","sha256":"CE:7B:C5:EF:84:EE:10:7D:51:0E:2C:99:A1:59:7B:03:AD:B4:D9:AC:B2:AB:A5:1A:60:4E:6E:A4:A7:28:63:34"}}},"request":{"raw":"POST /1/i/adsctp HTTP/1.1\r\nHost: t.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 480\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 03:02:43 GMT\r\ncontent-type: image/gif;charset=utf-8\r\ncontent-length: 43\r\nserver: cloudflare envoy\r\nset-cookie: muc_ads=5b786506-396f-4b83-822a-0887b44415ec; Max-Age=63072000; Expires=Thu, 06 Jul 2028 03:02:43 GMT; Path=/; Domain=t.co; Secure; SameSite=None\n__cf_bm=6CQNI9sPG6E4lMYcMspkz5wj3HifdXphRYTIOcjbWdU-1783393363.4691203-1.0.1.1-KW_a86mS2hs4Hge4MLeY5BY8vNKGHL3Bw5iXZb8lbkTzlw_8r5OyCmZivQQCFegkGD0_vmWuZ5aQpFDiUiF5nfBGq4lz.wxR7WyVpezV1jraDjz0EihGgiTAiiHLXMJj; HttpOnly; SameSite=None; Secure; Path=/; Domain=t.co; Expires=Tue, 07 Jul 2026 03:32:43 GMT\r\ncache-control: no-cache, no-store, max-age=0\r\nx-response-time: 7\r\norigin-cf-ray: a1739ca9ac6756a5-OSL\r\nstrict-transport-security: max-age=631138519; includeSubdomains\r\nx-served-by: t4_a\r\naccess-control-allow-origin: https://dujaselcmpe.click\r\naccess-control-expose-headers: X-Acted-As-User-Id,X-Rate-Limit-Limit,X-Rate-Limit-Remaining,X-Rate-Limit-Reset,X-TD-Mtime\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1739ca9ac6756a5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":1082,"mime_type":"image/gif; charset=utf-8","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-17T12:49:31.18809Z","times_seen":1339,"resource_available":false,"data":null}},"time_used":6585,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":158,"receive":0,"ssl":6423},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/ProximaNova-Regular.4d6b0ae73bbc0ee103b8.woff2","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.149Z","timestamp":1783393357149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/ProximaNova-Regular.4d6b0ae73bbc0ee103b8.woff2 HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a; _gcl_au=1.1.75140856.1783393357; _twpid=tw.1783393357020.266502528348788865; __tr_luptv=1783393357056\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739c8228e6723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41458\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:38 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811710\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8fYX5lYPggGKo99qKjffZCfyh13gXMSuBams0qWCE9LwKXmkYWSicgNTwDvHQ6hDZKoj5G1WjPKUwD4OrQDaaTWQtR2r0OirzyDxK3jshPEM96BrQQd%2BQKsFRsgV6xG3UtAXg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43624,"size_decoded":44397,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43624, version 1.0","md5":"4f34c6720cebe2013388679095970207","sha1":"d17557584ba2f660e908feeeab23c400f6e51bef","sha256":"61ecc328e428b3316f7810afeae429fd523c6bd8810b49aa1a7dcabc8beae527","sha512":"43bef86aefecb9a7e911286a95005a9ad80579b9aeb156b6f26058d407b46f9804460f359ec7a1ca20bd4078f9fe0c151b792c22e702035852f11fda8e386295","ssdeep":"768:ko+LKKXRSxeiABAANXjz1cNLeq5FsV1EfRai4YVeN6ccUxVclTrQ2710Xc:U/RieWWXjxwLeT6fRaiR06ccUMlr97ms","tlshash":"4113012f69114ba43c1df3fdeceb548b32b13a0e955439f9d5e6400eea8384dc887488","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.430497Z","times_seen":30,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T03:02:32.139Z","timestamp":1783393352139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJK13L9MJmkik%2BABcH1dK4UkA8yDwdXscNTs27N4q83qfV%2Fb4oJMW25y7agHBzcsXHFeZfpcR6pYxpus%2FCjXK8MlNrMelgJEijid1yKezmVZxDItvD4n8nqvwHu0AnYNgGcPjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a1739c7c088d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":4025,"timings":{"blocked":-1,"dns":4004,"connect":13,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/cc-amex-logo.648a329e891cf2e3116e3c0efcd19e75.svg","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.703Z","timestamp":1783393356703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/cc-amex-logo.648a329e891cf2e3116e3c0efcd19e75.svg HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTpB%2BKRC3olkLAs8WvjgAcf%2BBZZcRVBr8yuJSkLYH%2BDDMO%2FgspikAIDiYJBgMBzAGQzwj9ZT1P1lhE5eJIyupz%2BVdtD3fP1Iye7vEYjjkmEySU0rl2E7GBY0bkZW6BBikcU6CQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7f68b0723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811764\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7539,"size_decoded":3091,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56e74c8581d35533d684b42d96dd33f3","sha1":"e3056eee7eccaaddd1b6f364db391790d17e9df5","sha256":"6fb89b9b4777899a66f229fe91f71ab2ebaf8f37be14d18b5a77c55307944475","sha512":"9554bb44557090899702481e70180c2732818af9b524f047373e1d6445e46fb38cb811282a22f73ceda430daa582fac1431782075a6ef9b0d1697182208c3e75","ssdeep":"192:G9FO+rj1bdB+7/+wnTe/flsClbWmFtb3xgzozhgBDAZDp:mxtreyflsCVFtFg2","tlshash":"1ef198540360c9b1b4c5d5ec5e030c6535ba28c576d6475fbaef6bfbbf22894009a863","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.444323Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/DubaiW23-Regular.c56831cd808f5e4e0717.woff2","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.778Z","timestamp":1783393356778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/DubaiW23-Regular.c56831cd808f5e4e0717.woff2 HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739c7fd8b8723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083827342\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Toa2v%2F8Ql%2By0Y3D8BN7bfkVQ3jPvtu2K3iAypBhhEuZBxgKFypQLJMo2vJKgK6wg4QgkcjEgZD%2F6fofuVNEn1vVHwd%2BBmOd%2FmbavrUKPKZxC2vaLvWz1qIGPwrfDnc3dYc7iUQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64056\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64056,"size_decoded":64837,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64056, version 0.0","md5":"f435cc5251bd632ffe4ece7e663c6b14","sha1":"c954ab326bb7d02478e4a11b55bfff93db81af92","sha256":"df258432651535812b9de18555fd59d03b12594d58fbba950c200ec5763dd11e","sha512":"b5e19662d155f6d369bda3b1b10c0412fe94bad5f57415b78dad11d4b242b0f4d1573d1dbb4f6f4182d880e2342a034279dc94ab5824f874e7cd1fca242ea0f7","ssdeep":"1536:lMmts897Fg0xbkhn9JnsCMSw2ftoAo9ywEy1nYUe16Ds5r:3tH9J8auOAoQwEy1nYDoDs5r","tlshash":"6753f14808b3cd8afd5f063a857d5b97514145a162d8cdf35235d8bc89b2d282f329fe","first_seen":"2023-08-03T22:23:19Z","last_seen":"2026-07-07T03:04:05.438077Z","times_seen":244,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWphc2VsY21wZS5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bfvkvcqw5uh7","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.111Z","timestamp":1783393357111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWphc2VsY21wZS5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bfvkvcqw5uh7 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-security-policy: script-src 'nonce-bPskEnXMo-NQH4VpHKSUTQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":16860,"size_decoded":3173,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"971c713457e11eadfc5467c2d06a7316","sha1":"05b79a9805dffa22135c87229ecf4339ca894c5e","sha256":"deb301cf2b1eb6d8583f4746cd14f0fcce874cd0bb328cf4621f8b79dd3be765","sha512":"b47b07400fb45db4065684c6a0dcf8e843f717d7200b6e226c3602bc32e1b833ed4e43fbd46c3381633f3faf4e33f669eaafb56732d637fe259abda0845804c6","ssdeep":"384:OjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/U:OFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+T","tlshash":"63720d50041744009b835ce223ce7f30fe4e92517246d0b1abfd9b6beedbda6926939d","first_seen":"2026-07-07T03:03:14.826048Z","last_seen":"2026-07-07T03:03:14.826048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/__ext?u=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Fsmartbanner.js%2F1.14.6%2Fsmartbanner.css","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.399Z","timestamp":1783393356399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /__ext?u=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Fsmartbanner.js%2F1.14.6%2Fsmartbanner.css HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AqWHwrHs7gNNJ16QXalWvR0rU11qWddnAn6x5sIVYlCRneyzTnQqi94rtUOjRsAQGS9UjMpGO0qmnv%2Fy8mhQyfEKGmsikt8IvJ3CLvlsgUkt0tL0P7bO8Yp9AeZ4QIFUuh52VQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7d889d723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 41458\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:38 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782084029744\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11707,"size_decoded":4847,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (7577)","md5":"2187f7dae1a38dcba4053f4fbb01d112","sha1":"83af3b3c95632a67e0b893694905438108c8de8b","sha256":"7352e9c7fc39eef67250e8d02e123f00ff34655ac75d2d8d98110bc8bea89174","sha512":"e697d308af7e9a64da1a2d3ffb1d3e710f236da2b439e0b293f9e2db9f17be9960bc07131b86bc7485b1a91fd2dd56a750a995543aeb2a50d6ce848d317bf536","ssdeep":"192:3g+0X66t5KDuF1Q+Fkz1hf09AQZdAqBOQ/P8ssHOimnFmiqIjcOKLSqtdgUNPRrA:3SKSFmoD+czorTgUNJ4YLmpZ2K","tlshash":"ed32a6c2cdc62c38ab03521b268a59c752cdaf47e862c196b5ddf1820f7a94e53f072d","first_seen":"2025-06-09T10:47:56.357132Z","last_seen":"2026-07-07T03:04:05.43526Z","times_seen":21,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/logo-pci-certified.223b4cb726c97e1957f1ae36cec5ac6a.svg","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.707Z","timestamp":1783393356707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/logo-pci-certified.223b4cb726c97e1957f1ae36cec5ac6a.svg HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2OBLlHJy6iLa%2BsfCvo8tAuHaB4uMvvRo7c1CAgg%2BNd2H%2BZWpCglAwQXq6JVRcE1hpOEtlnZgeUMzmzSvq%2F5xIA8g0K2vW6SekxLJaHPJu4S3SGFZm82WZzCMcBmGErX4QfquA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7f68b3723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083812505\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9054,"size_decoded":3993,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"136b179ff510f7c80f2e039d676d9928","sha1":"447c8ac278c3ca95b98fec89a8da9bf1a0e8ce89","sha256":"0aec417e0a2b6c0e02aa016dc7904c7a8a7568a58eea31d1a89f7f288ee10150","sha512":"991a0709bd1dbbaed513fca3e407cfe403b09f4d004e7948eedcd7739f9d263500d052ee7448da44470a40643e934a995659895ce0b14eb08a5366859019189c","ssdeep":"192:d+oYMz1peokiWWosGq7Qz8hqaVSs/L8CN3sco3:RYMDkiW6Qzo9L8CXo3","tlshash":"8412ea18c273dccebd8d85ad9e5181a621322c627827a00ed5cfc6326e36de85df954f","first_seen":"2026-06-26T21:08:00.597438Z","last_seen":"2026-07-07T03:04:05.431655Z","times_seen":12,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/ProximaNova-Bold.5e38a54e924b84960be0.woff2","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.151Z","timestamp":1783393357151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/ProximaNova-Bold.5e38a54e924b84960be0.woff2 HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a; _gcl_au=1.1.75140856.1783393357; _twpid=tw.1783393357020.266502528348788865; __tr_luptv=1783393357056\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739c8238e7723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41458\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:38 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083810217\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0KPtdfgXfAuOMJXv59FUg7C8bM10439sIgg43%2BjYGwAk2RLY0j3wXEB%2FWxtNtOj2%2F5T0sQQPeSGR4sA84h3y5SazY6BOF%2BJxiDJPTOB%2FXuhUsxtnMCJB0i92Czk8W%2FB7JVGGA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43424\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43424,"size_decoded":44207,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43424, version 1.0","md5":"5d99a47a83c96b85f06907013656d8fa","sha1":"e4eb584839c5c279100dfab0a3e38ff4e4cf5556","sha256":"d7d572bcbbada558c49fd3c6be3c231e655878be0c001581a6908498e47e39b2","sha512":"e733a249485dc1ce691c4cce8c4a15cb4c5413a3a86d1bd903219090317c6bc22577be1891f9903f1df5a55d987faf9391a4e21df71a0050d3536e37484e4e5f","ssdeep":"768:vp/nKtOdtsRqeCe9q0f1fRf2N2KvoXVeqOzF5eLB/ETrjubw11:R1sRnj9qoxRc2KvEVeqOm9Wb","tlshash":"5b13f1a985e1b66afb460d2f0615b04fcaf709c31641c64cadb5c8cec284a257bddf46","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.443829Z","times_seen":30,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/duCo_WHeadline16_Bd.2496de66e37e8637049a.woff2","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.154Z","timestamp":1783393357154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/duCo_WHeadline16_Bd.2496de66e37e8637049a.woff2 HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a; _gcl_au=1.1.75140856.1783393357; _twpid=tw.1783393357020.266502528348788865; __tr_luptv=1783393357056\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739c8238e9723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083812213\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E07QCTfGDcr3uzAgcIm7BBsl3pl36KOo%2BZ43DrkbP2REy8lLYXT892xplYpA%2BwLE1rL5BNt0b%2B7u71jyrjspbNk5aGoObf37t%2BkeXzjVU2KT%2Fk2pggpYFHh3eYU%2FaNl2BDBkrg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 74024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74024,"size_decoded":74807,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74024, version 2.0","md5":"9a96b6ad1b1def752fb3a28b1ef20018","sha1":"cb9e78650c1cd55fec0e9eaa888f58638cf81d95","sha256":"5fb213540c50030ca41727cd32fc61baf72aa170ed67bcd06f396a7d49e5144a","sha512":"cb959d89ea1b01f9605d3c03f79edf9281c296f85bbcbc94dddc9b6a3700206d99aa75c9da10461204e7f8f4d5ac17c11e8f2aeb2a5f35741f706d7d661b2ba1","ssdeep":"1536:fOvr2feojoL5aBi9kXIQp5XS5e+DWxrMHqF5qzSKtIcGr/Cs:fe2XjoL5miknKnDwrKqnqduv","tlshash":"0b7302f812066130b1b48210363ea4a15c4cbf367737226d98dbc9a9f3d666c545eecf","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.429957Z","times_seen":40,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/cc-visa-logo.9de5ed976961133ab058d183b905b998.svg","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.700Z","timestamp":1783393356700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/cc-visa-logo.9de5ed976961133ab058d183b905b998.svg HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PEw%2BAv%2B40zTEgIoisX065V4K02io4NIQm6PhRdpmioA0PJUB9NYipofcTm7k6KCek59pRBHtBy9uY%2FCcUww1zBm60F0OJRy0KlwHNpqiolCoh7sxc3U0EBoNrExKmX3F%2BvM54A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7f68ae723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811195\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2637,"size_decoded":1958,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e97a102064a736e1e1f13a9f0d7f21aa","sha1":"65ed71e23ec0350913656ac265cb0a0c777ea0db","sha256":"b7b05ad1c3a308d4781fb953d46080e6ee5bfbacb166eb0e807105f3fefc79fa","sha512":"25f1eb1a39477bdcff822e0bde014e3aa060e98a6940020127909097dbb8ff0c511adb7d3ffa3b1e023bd5521a09c3677112a6bfbd8172eeb765f56621fa83c9","ssdeep":"","tlshash":"fd51759431e8d47992088e6596f2dc6fba71304e67d00868b0cc56450f2b0db0dbeb27","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.440541Z","times_seen":15,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KJPLS3Q\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.604Z","timestamp":1783393356604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:39:04 GMT","end":"Mon, 07 Sep 2026 08:39:03 GMT"},"fingerprint":{"sha1":"6D:E4:85:F4:01:A4:0B:02:E0:64:E2:F2:58:93:6D:3F:4C:AB:30:9D","sha256":"4A:07:79:34:AC:03:17:68:07:4A:CB:68:23:A7:E3:14:B2:DE:22:3C:E1:AE:8D:F5:2F:2E:2D:C6:28:58:47:CE"}}},"request":{"raw":"GET /gtm.js?id=GTM-KJPLS3Q\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\nexpires: Tue, 07 Jul 2026 03:02:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 189925\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":659116,"size_decoded":190509,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (42959)","md5":"279279ecae22f6a89e1c8ad830417055","sha1":"798ad555e1806ab78af40dbfe01f5179d7815a50","sha256":"a0d2ff4216ce8486634368fb90e31e24b32ccfd39e4d138f400322b55b196fcc","sha512":"ddd39107df30bbb4ac253e3452c21205499c49a9c9de6b5367dc7535ac22372b79883250f84c79b697518e2a423fa66a37321fa11a116387d5dc9df689bdb69f","ssdeep":"12288:Yjr4OhQbB3DvTc0FFwbb280oKXkwmx5zh:DB3DvTc0g2fpXFmXN","tlshash":"aee429ceb3c5b4769396e468943f018f697e20e3b44c9895f089ccd42e7056a6163fbe","first_seen":"2026-07-07T00:21:32.908136Z","last_seen":"2026-07-07T03:04:05.42925Z","times_seen":9,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clarity.ms/tag/xi5z3gxenb?ref=gtm","fqdn":"www.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.893Z","timestamp":1783393356893,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tag/xi5z3gxenb?ref=gtm HTTP/1.1\r\nHost: www.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=0\u0026frm=0\u0026ae=g\u0026auid=75140856.1783393357\u0026dt=du%20-%20My%20Account\u0026en=page_view\u0026dl=https%3A%2F%2Fdujaselcmpe.click%2Fwebapp%2Fen%2Fquick-recharge\u0026scrsrc=www.googletagmanager.com\u0026rnd=447299371.1783393357\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6711v898604534za200zd898604534xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~118897920~118897930~119027224\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1783393356926\u0026tfd=4805\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.932Z","timestamp":1783393356932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"POST /ccm/collect?rcb=0\u0026frm=0\u0026ae=g\u0026auid=75140856.1783393357\u0026dt=du%20-%20My%20Account\u0026en=page_view\u0026dl=https%3A%2F%2Fdujaselcmpe.click%2Fwebapp%2Fen%2Fquick-recharge\u0026scrsrc=www.googletagmanager.com\u0026rnd=447299371.1783393357\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6711v898604534za200zd898604534xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~118897920~118897930~119027224\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1783393356926\u0026tfd=4805\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://dujaselcmpe.click/\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://dujaselcmpe.click\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":546,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/servlet/duaediscovery/common/images/app-banner-desktop-EN.png","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.053Z","timestamp":1783393357053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /servlet/duaediscovery/common/images/app-banner-desktop-EN.png HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a; _gcl_au=1.1.75140856.1783393357; _twpid=tw.1783393357020.266502528348788865\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a1739c8198e1723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083825714\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1De6nVKEoZQMs8hcNNsN2CSz%2FXDiik4zfomAXRG2vcePLIAlJQkR6enDlnIFAgYTfTsJBQSv4NC7eSQKo7uQWGhY1b4ozAMQE0pyhN9G%2FQA0lw8VgeOv2dcrJgUreJ2E0GfkQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 515332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515332,"size_decoded":516104,"mime_type":"image/png","magic":"PNG image data, 1920 x 400, 8-bit/color RGBA, non-interlaced","md5":"60b6ef954bddf69534336b4a7a0ca005","sha1":"9fe651d46a89bffe4bc4370a41a258fdd0d90263","sha256":"1db49ce75b706f11e16479e840483856166a0454d43a26a3df01b400bc7bdc1f","sha512":"e4ad89bf299ea9011678a8aae929f55d25c44284c01c60f93ed2395ff8e2a3a19a77958f45498675309746aac044788849dc174b35a22582bd0ca0e9ef03f4a4","ssdeep":"12288:wI5COmILoBDWqbw1ddA7e+E+J9WHvjmMjeQlT3Xk4My3FPu:wyHmwoBDWqbkA7lE+2bJj/uM1Pu","tlshash":"a6b4232948fa320efd9d92f07bd4190a32dd7dbd18795828a143fc065bb6b914dbb708","first_seen":"2025-06-10T12:35:47.973996Z","last_seen":"2026-07-07T03:04:05.446241Z","times_seen":12,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dnacdn.net/dna","fqdn":"dnacdn.net","domain":"dnacdn.net","tld":"net"},"ip":{"addr":"178.250.7.145","port":443,"asn":44788,"as":"Criteo Technology SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gum.criteo.com/syncframe?topUrl=dujaselcmpe.click\u0026origin=onetag#{%22bundle%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22cw%22:true,%22optout%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22origin%22:%22onetag%22,%22tld%22:%22dujaselcmpe.click%22,%22topUrl%22:%22dujaselcmpe.click%22,%22version%22:%225_46_0%22,%22ifa%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22lsw%22:true,%22pm%22:0,%22requestId%22:%2291656bc5-0f97-456c-a970-55abe95ff84c%22}","date":"2026-07-07T03:02:44.731Z","timestamp":1783393364731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dnacdn.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 16 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:1A:D5:1F:DE:FB:82:32:49:09:09:60:E1:87:02:B3:16:8A:91:81","sha256":"36:EC:F9:52:70:3F:EF:98:44:30:E7:7E:C3:3C:BE:CF:53:A0:F8:68:B6:F9:0F:B4:A3:19:87:AB:60:62:0A:4C"}}},"request":{"raw":"GET /dna HTTP/1.1\r\nHost: dnacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gum.criteo.com/\r\nOrigin: https://gum.criteo.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: browser_data=zMAnEl9EazhDR3lkVFlWdk1ReXZ5VDh6eXVZb1c3JTJCOU1rdjdXbU1tMHo4JTJCNzlZSnNxNEtiJTJGdDIzbXJZOGs0MHZ6UWdKbG1xJTJCNnBJbzhnZlRrbEQ0SDZvMFN3JTNEJTNE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ndate: Tue, 07 Jul 2026 03:02:43 GMT\r\nserver: Kestrel\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: https://gum.criteo.com\r\ncache-control: private, no-cache, max-age=0, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\nset-cookie: browser_data=ysBBeV9EazhDR3lkVFlWdk1ReXZ5VDh6eXVZb1c3JTJCOU1rdjdXbU1tMHo4JTJCNzlZSnNxNEtiJTJGdDIzbXJZOGs0MHZ6UWdKU0FWTDl0WkFIVjdkSDhzQkhPWlklMkZnJTNEJTNE; expires=Sun, 01 Aug 2027 03:02:44 GMT; domain=dnacdn.net; path=/; secure; samesite=none\r\nserver-processing-duration-in-ticks: 162593\r\nstrict-transport-security: max-age=31536000; preload;\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":918,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d8c2504910cea8ae5d800b52e19dfbdd","sha1":"da0425a65f20a0aeb9d492369d4d0acd12a9917e","sha256":"f3842b35a93a27de7f20818abb30c923af02b44f6431e27869eab57b4db7c7d8","sha512":"bfb94900f35c7dbb31f1509cac65bb7c2ab795ce1f954b7005dcbb7ff12eab59af2e1d7c1589b8a301d494ab86e1b85396576b555ce7a79c709d475fd28bcde5","ssdeep":"","tlshash":"89c02bca0e3cf04a045ebffed614100cc1d8444c19ccd40cd6b0721c252cbac251c5b4","first_seen":"2026-07-07T03:03:14.831483Z","last_seen":"2026-07-07T03:03:14.831483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/__click","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:56.434Z","timestamp":1783393376434,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /__click HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 95\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a; _gcl_au=1.1.75140856.1783393357; _twpid=tw.1783393357020.266502528348788865; __tr_luptv=1783393357056; _tt_enable_cookie=1; _ttp=01KWX8E3CSE4TJT5JP4F5FS3WS_.tt.1; ttcsid_CAK6Q7RC77U1E8B1DB1G=1783393357212::U0jQu6lA_XgMlKZeyiPi.1.1783393367226.1; ttcsid=1783393357213::2ifl0XFUA9TYIyjPSgG7.1.1783393367220.0::1.-5092.0::0.0.0.0::0.0.0; SameSite=\"ENCAAAAAAXEmrHOTuOc2oKebM9j6P2G//gllX3GhCSqe6uZdHYlQTawUdSwi37Dj8RR2CRzAbY=\"; ADRUM_BTa=\"ENCAAAAAAXfkdax0x+42WX8EtugsZNlgifm8dXy5F8xqw2/L3Odnugu1MZ5AeOTGgjW8WkZdfti8FyKjykmOOatjro1TRjAiygZ3qnzpDx95sZSs7wTf4aD+i40c6BFf05iOetDVsJBHapjyOsXmYZySs7YrM7ptU8lLDmdQqJnFc91FL6KU8AzlxjX5PDtlxzwC6IK1y8=\"; ADRUM_BT1=\"ENCAAAAAAUGJCApOTCi7uUIlyYAJQZRoWzaz8JyCTB/fJ5Cp7WJ4nyaznLYXmP6YNJf7ROLtZ6cDTX5O9sW0M69E8Ui5FVt\"; 7046c9094c9e5a0446fdb51586a63f0a7df59c6e25ca7359861cf2ad2ab5493c=\"ENCAAAAAAWiYX+f60R/YIcDFROXIdWSL3vIf45JwPl81Mpr3BRZyi10rRtBINhitDpARmzabenCpIHMxMLO0eEbUWk+oILPLFT/3Ccxm/qLVgBweEL0ImZgo66HBn9qzKMTW98G2WKQ6JsrpT/rku1YvqtjasLv\"; 54e6ef1e44ecf3bdd6a3100628da47fb=\"ENCAAAAAAVoJL0VosNjJ5liD3LhO7zq9fa9QJQCwmTbyWIZ4CYUvPu6wLUzBypi+pK2UoHue7VLJTkDsPckuHDvRciXWm67UVKp8xkDO7ubOcG+oV49yA==\"; 3f02fdc1c0988888e8706218565eb98c72057030d663378e5bebc089aacbb4f3=\"ENCAAAAAAVp70YKLQiBm6IXFzOrkpFNg9d3O73at4zdOZsdExxtQO/wHGl0iKFOlDxtYJu5pWg4epe/+fvv6VMbFAP8me6uydpuxlx/QWkDiGNA2I/8eD4PthHT0kuTpqQNE2obXUW/fBEqhveMzSA8/M3JnfXZ\"\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":95,"data":"{\"kind\":\"ping\",\"path\":\"/webapp/en/quick-recharge\",\"vid\":\"6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\"}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KJPLS3Q","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.454Z","timestamp":1783393356454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:39:04 GMT","end":"Mon, 07 Sep 2026 08:39:03 GMT"},"fingerprint":{"sha1":"6D:E4:85:F4:01:A4:0B:02:E0:64:E2:F2:58:93:6D:3F:4C:AB:30:9D","sha256":"4A:07:79:34:AC:03:17:68:07:4A:CB:68:23:A7:E3:14:B2:DE:22:3C:E1:AE:8D:F5:2F:2E:2D:C6:28:58:47:CE"}}},"request":{"raw":"GET /gtm.js?id=GTM-KJPLS3Q HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\nexpires: Tue, 07 Jul 2026 03:02:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 189939\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":659145,"size_decoded":190543,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (42959)","md5":"7ca4a98d6906957bcf8f6ee16dd88bcf","sha1":"94de7c8897921f9308d491dd17563f703b2c41c0","sha256":"96abd5c8132bde8b5d88605199e36196641bf9d7f7a928e4d15f3aed3d5b8b32","sha512":"1be950ba27d2197c2b26e04cd1163cbf04bca1b6eff430424861129a5ee2688db27e36bacfb80d141345564bac98c3c7f9745c939867ccd1e71b8bc641820f09","ssdeep":"12288:Yjr4OhQbB3DvTc0FFwbb28nzKXkwmx5zh:DB3DvTc0g2sWXFmXN","tlshash":"62e429ceb3c5b4769396e468943f018f697e20e3b44c9895f089ccd42e7056a6163fbe","first_seen":"2026-07-07T03:02:30.744744Z","last_seen":"2026-07-07T03:03:14.83245Z","times_seen":2,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":44,"receive":61,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-cdn.trackier.com/js/trackier-web-sdk.js","fqdn":"static-cdn.trackier.com","domain":"trackier.com","tld":"com"},"ip":{"addr":"34.149.104.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.027Z","timestamp":1783393357027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackier.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:30:25 GMT","end":"Sun, 23 Aug 2026 07:30:24 GMT"},"fingerprint":{"sha1":"F4:3B:46:0D:DB:CF:92:D9:C3:CB:FC:1E:3D:10:71:09:47:56:A9:AD","sha256":"03:D5:4F:EA:4E:4B:27:9D:F8:7E:7F:59:BB:4D:21:A8:7E:63:F7:42:98:D9:72:8F:28:02:91:EF:D0:8A:C1:03"}}},"request":{"raw":"GET /js/trackier-web-sdk.js HTTP/1.1\r\nHost: static-cdn.trackier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-guploader-uploadid: AJ5rDhHA2R5pILI3IzFErQNsh_7AbCOCRt0eMOuhHuRpf4uQYNpCT6408QfIMl7nl5r8NBA\r\nx-goog-generation: 1780658579960293\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12430\r\nx-goog-hash: crc32c=f1x/Kg==, md5=Iru4kA+0XjpMOyC4xJuKYg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: none\r\nserver: UploadServer\r\ncontent-encoding: br\r\ndate: Tue, 07 Jul 2026 02:21:05 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:22:59 GMT\r\netag: W/\"22bbb8900fb45e3a4c3b20b8c49b8a62\"\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-length: 4564\r\nage: 2492\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":12430,"size_decoded":5280,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12430), with no line terminators","md5":"22bbb8900fb45e3a4c3b20b8c49b8a62","sha1":"29a551794a5ebfb8284a29e20f39722c6a50efb4","sha256":"aad3defbd0301bfaf750eb1f512c10bca06b6354d5b79b4148d5d9b4d1c88153","sha512":"bed34fe0cd9e5a86d7f4b071cafc9a71bd4f7625945e7dd209fdd287bc30e16fa5b7cd1f46b41e4a49936b00606b67c9b54557bb9f0c8d4140de3526cb34d25f","ssdeep":"384:43IX2vMBfTyulhzS5srgIPfFDqc+e30eob92ch2SkpfR:43IGQuu6sFW6","tlshash":"ea42f79f31577434a6c22075188f384ae1ba565c691d81a0e792daa13cbcc5f8373f9e","first_seen":"2026-06-06T03:08:13.632248Z","last_seen":"2026-07-16T10:45:36.323126Z","times_seen":38,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/servlet/duaediscovery/common/images/app-phone-desktop-EN.png","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.031Z","timestamp":1783393357031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /servlet/duaediscovery/common/images/app-phone-desktop-EN.png HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a; _gcl_au=1.1.75140856.1783393357\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a1739c8178d4723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41456\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:40 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083825919\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7RvU6g8ljZQXtGcuZRKysZb0dRENT2lHlZCsnBB%2F%2FPSQ9dFz1xt30xbelPA7NGMxCqh3dSBrwR1P0BX4kBKlfLqzA6RFlI5UiwrBZtkWVRs8wXLT8ml9cYczY6u88eaTSqwSlA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 74570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74570,"size_decoded":75341,"mime_type":"image/png","magic":"PNG image data, 239 x 390, 8-bit/color RGBA, non-interlaced","md5":"934d42580c789fc0243b3e8c4fbafa8d","sha1":"b5a2021ccff96d91c1d0b00dfade81936570e773","sha256":"eae2436d86f50aa647a7e37132d0f279947007835e123ecd46a8f4b24d57a5c0","sha512":"7867f69fcf0bd4916047d83ffbe78487e6de355d9047e989992c880b4acaca564cc2c72154121b26505751cda293a0c3f9b3f0f04ffe1edab0baad186aa7dbc0","ssdeep":"1536:XiyFpdqQq3MBCNUZWyfPbOi1Qfg69wf85P5o:XiU/q0UPuTbQBl5PK","tlshash":"647301837859abc13889f8bb313758e8600dd94afc34b53642946a6d947d35c38f1a6e","first_seen":"2025-06-10T12:35:48.041469Z","last_seen":"2026-07-07T03:04:05.42872Z","times_seen":12,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.twitter.com/1/i/adsctp","fqdn":"analytics.twitter.com","domain":"twitter.com","tld":"com"},"ip":{"addr":"172.66.0.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.046Z","timestamp":1783393357046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twitter.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 05:44:39 GMT","end":"Sat, 22 Aug 2026 05:44:38 GMT"},"fingerprint":{"sha1":"65:92:0C:4C:EF:65:F7:C4:1E:4D:7F:D3:39:49:8C:7A:AE:DA:D2:57","sha256":"84:6F:17:C2:E1:A3:45:B7:CF:3F:06:A1:B7:E4:0A:02:E1:E6:B8:6F:8F:EA:29:37:FE:80:C5:0F:ED:0C:2B:02"}}},"request":{"raw":"POST /1/i/adsctp HTTP/1.1\r\nHost: analytics.twitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 480\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"bci=4\u0026dv=UTC%26en-US%2Cen%26na%26Linux%20x86_64%26255%261280%261024%268%2624%261280%261024%260%26unspecified\u0026eci=3\u0026event=%7B%7D\u0026event_id=1d2f252e-a286-4e13-a372-352332d8b539\u0026integration=gtm\u0026p_id=Twitter\u0026p_user_id=0\u0026pl_id=4bf49e77-e656-447b-8801-32db406f0d12\u0026pt=du%20-%20My%20Account\u0026tw_document_href=https%3A%2F%2Fdujaselcmpe.click%2Fwebapp%2Fen%2Fquick-recharge\u0026tw_iframe_status=0\u0026tw_pid_src=1\u0026twpid=tw.1783393357020.266502528348788865\u0026txn_id=o5gkt\u0026type=javascript\u0026version=2.3.53"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-type: image/gif;charset=utf-8\r\ncontent-length: 43\r\nserver: cloudflare envoy\r\ncache-control: no-cache, no-store, max-age=0\r\nset-cookie: guest_id_marketing=v1%3A178339335711942590; Max-Age=63072000; Expires=Thu, 06 Jul 2028 03:02:37 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None\nguest_id_ads=v1%3A178339335711942590; Max-Age=63072000; Expires=Thu, 06 Jul 2028 03:02:37 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None\npersonalization_id=\"v1_IMZvaa45OYruM0ZzHULzfw==\"; Max-Age=63072000; Expires=Thu, 06 Jul 2028 03:02:37 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None\nguest_id=v1%3A178339335711942590; Max-Age=63072000; Expires=Thu, 06 Jul 2028 03:02:37 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None\n__cf_bm=goyR7fYO7hs_Xq2RlBrO5mbbFbptUUElnvMmK2HUMX8-1783393357.0628984-1.0.1.1-FpwF.4lNwzHfogQ3Qvsi1bd.hymA_BKDbpUN9HWCl5f327cK6dSxKCdOn3w9GAWdxex1ADA3iFa7TeLk8uG0is45O.Wk1SbR8l3dcuWYMdr7DYneYp3vgG1P8nO8Mk1K; HttpOnly; SameSite=None; Secure; Path=/; Domain=twitter.com; Expires=Tue, 07 Jul 2026 03:32:37 GMT\r\nx-response-time: 7\r\norigin-cf-ray: a1739c81a9fab1b8-ATL\r\nstrict-transport-security: max-age=631138519; includeSubdomains\r\nx-served-by: t4_a\r\naccess-control-allow-origin: https://dujaselcmpe.click\r\naccess-control-expose-headers: X-Acted-As-User-Id,X-Rate-Limit-Limit,X-Rate-Limit-Remaining,X-Rate-Limit-Reset,X-TD-Mtime\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1739c81a9fab1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":1541,"mime_type":"image/gif; charset=utf-8","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-17T12:49:31.18809Z","times_seen":1339,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":117,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/__click","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.409Z","timestamp":1783393356409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 95\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":95,"data":"{\"kind\":\"ping\",\"path\":\"/webapp/en/quick-recharge\",\"vid\":\"6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BS9CSgQ2qh1blfv03IDUYIan0apPSxg19g%2FPyfZqPW8NrO1mJGyRKvxeogsiT9dm5cbx3T%2BVHSSDtBwn%2BGQMfM1wOL3MXjawAm7U5xB1ooPq%2FaTGvw1oADv17SVsWMtElsjgMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1739c7d98a1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/ProximaNova-Bold.5e38a54e924b84960be0.woff2","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.449Z","timestamp":1783393356449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/ProximaNova-Bold.5e38a54e924b84960be0.woff2 HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739c7dd8a5723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:38 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083810217\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZqpZwR1E%2BCwB4N6KnvCJhLk7nVBowjTWFdyV2s%2BM5w7p6IjGoAAPFGsR5xXVdqcUo30D9DFPpu2gbOCd0RGMJYD8fb7KZ%2B5cme8W6UyGxGKGEQlPsZapci0LvudmQQreyBZ6eQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43424\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43424,"size_decoded":44201,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43424, version 1.0","md5":"5d99a47a83c96b85f06907013656d8fa","sha1":"e4eb584839c5c279100dfab0a3e38ff4e4cf5556","sha256":"d7d572bcbbada558c49fd3c6be3c231e655878be0c001581a6908498e47e39b2","sha512":"e733a249485dc1ce691c4cce8c4a15cb4c5413a3a86d1bd903219090317c6bc22577be1891f9903f1df5a55d987faf9391a4e21df71a0050d3536e37484e4e5f","ssdeep":"768:vp/nKtOdtsRqeCe9q0f1fRf2N2KvoXVeqOzF5eLB/ETrjubw11:R1sRnj9qoxRc2KvEVeqOm9Wb","tlshash":"5b13f1a985e1b66afb460d2f0615b04fcaf709c31641c64cadb5c8cec284a257bddf46","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.443829Z","times_seen":30,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/cc-samsung-pay.4c4f2008827273647ce1b99bbbde9f3a.svg","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.705Z","timestamp":1783393356705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/cc-samsung-pay.4c4f2008827273647ce1b99bbbde9f3a.svg HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9f1jbCgeDjiuaJBSaNCGDeyY8%2FoeSHyczi62r0SSoFNFthb%2F0WCO6r0MzDMbt%2BZvq2dMSzEOIyqF5RVj7tAemfkWk0yNNH18vfmeyTHqkcgHctgBW7hqDveWMJc4s93flC3iBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7f68b2723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811534\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":3165,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"931d457ed3d924bea889d2c3f6780dcd","sha1":"6d5324e2f404ec5311ea1e672a4448463d04631b","sha256":"95252dc7fa29cefd4d6ca742d89193cdc773d9842c358ee4caff4cf9d7254e48","sha512":"083ce9fa8bf2b4e9c0518f6bf49e8093023ffa3e1a79e9546034dc2c8ddbc0aa79c00784b9a16730b3fa339c5965e51e1802f0351f920fe7c08c3704187a79c7","ssdeep":"96:joDcoJ/gJAjp4hF+LuqHQzMjORaZki8mzFe7jcdCq59cTfk77w9C20z8OET4h9:84qqAjGWuqHdSk3HqQ77w9Ctz8Kh9","tlshash":"42b185f6b3d490e5e50aebf6da126431b93324ba6f15c2cc43d5d8e5e52649d8c8dcc0","first_seen":"2025-06-10T12:35:48.067088Z","last_seen":"2026-07-07T03:04:05.436465Z","times_seen":13,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.782Z","timestamp":1783393356782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 383865\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 17:01:56 GMT\r\nexpires: Tue, 06 Jul 2027 17:01:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 36040\r\nlast-modified: Mon, 22 Jun 2026 00:01:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":895421,"size_decoded":384771,"mime_type":"text/javascript","magic":"data","md5":"20a3b1e1f6332005d3a00b47c6f3092d","sha1":"787e0ddbb05f6e6dc019f68dbcb5c641c628547a","sha256":"d6731c3de00cfe1d418f0905d5b78e1cc7c382a95e95cadd44aa22b81a98c5c5","sha512":"ffae73ac43daaf89b463ee47ddaddd2d7c9800a96bb1145b2afa59a352b3eb08e4e7c0d88b07585a54dd3ebdcc39e563b727a282015c4b002f230a6315102ce5","ssdeep":"12288:VOuNtbumQUfi2q0LWNLaXnymCAYIJ4wyzTmWRF8WdWT0KZ1HcezE9:hb9+kW2XheRmWdk0KZ1Hi9","tlshash":"a91549d97152b0a95362f6f564376159e33e5826c80c084e7288d8f02ef4879f1faeb7","first_seen":"2026-06-25T14:15:22.826378Z","last_seen":"2026-07-16T13:33:45.653776Z","times_seen":12261,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":18,"receive":67,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic.criteo.com/js/ld/ld.js?a=102684","fqdn":"dynamic.criteo.com","domain":"criteo.com","tld":"com"},"ip":{"addr":"178.250.7.41","port":443,"asn":44788,"as":"Criteo Technology SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.910Z","timestamp":1783393356910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.criteo.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 04 Jun 2026 00:00:00 GMT","end":"Wed, 02 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:4B:07:9E:CD:CF:2D:83:A3:1D:ED:D5:4E:02:D4:90:A2:82:AA:EE","sha256":"9E:46:CF:35:AA:C7:66:65:1F:59:29:7C:83:F9:E7:EE:DA:95:0E:CA:77:6A:6B:AF:EE:06:86:74:98:7A:5F:5F"}}},"request":{"raw":"GET /js/ld/ld.js?a=102684 HTTP/1.1\r\nHost: dynamic.criteo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 07 Jul 2026 03:02:39 GMT\r\nserver: Kestrel\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=10800\r\ncontent-encoding: br\r\nvary: Origin, Accept-Encoding\r\nx-criteo-endpoint-controller: Ld\r\nx-criteo-endpoint-action: Get\r\nx-criteo-endpoint-version: none\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; preload;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":75062,"size_decoded":25566,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64400)","md5":"76d1ab600d5117efa8f96dcff1b504fa","sha1":"bb7559958923f0d1d6c62f5aaace0acf4d7fcc20","sha256":"287765618b065f9fa812327101796928863498fc37ae743b39e3b366a76c3fb2","sha512":"198b83d9a73635e35642b97873ae152a29e30b2208450409f965d4da9783bc5929fd25e2604baf3b211a191cda457096b058f2c7ac7bee35b2508144dbc76d8c","ssdeep":"768:LED1NsH/XStA9JTHkNI+6M76XKzGG/GGdtMjLXB/3/o4zNGVg45dJqAvMfv9ZIKX:4XsvzHk6k6JgvMNZHX4eWiXyxDs5kO","tlshash":"1173f889b6d67039439390b4903f1205b33b2a6d640c84acb995d9e53cb9e0b6637ffd","first_seen":"2026-06-22T04:42:38.415509Z","last_seen":"2026-07-07T03:03:14.834767Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3665,"timings":{"blocked":-1,"dns":2,"connect":27,"send":0,"wait":55,"receive":0,"ssl":3578},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/android-store-btn.978ed20444cf83f4d0f5.png","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.030Z","timestamp":1783393357030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/android-store-btn.978ed20444cf83f4d0f5.png HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a; _gcl_au=1.1.75140856.1783393357\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a1739c8178d1723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41456\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:40 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083826509\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SaofqcjUUrtFPdKxYfCS3cRmgI1zoIxrx%2F2zwLpjWVo1D0OUhTiSdiJhxTRRQyL8wBsbqCZHsNsgJGTldwtNDLg0dyYcsyuzukEz4A%2FwpWyNcBf8ejGEUuDKw%2B5KrOH1sNqRuw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10928\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10928,"size_decoded":11701,"mime_type":"image/png","magic":"PNG image data, 408 x 120, 8-bit/color RGBA, non-interlaced","md5":"48563a9f94e89f1923d46dfaaa3b2da5","sha1":"8df284d3f33e4cac17d1c8eaa19d88f0e7a32bc2","sha256":"d95034d55902498597af4e8cc2fee8618e4a043be568f450f018c3249f8b9935","sha512":"96d170019dbca6abdd78bb5630423f67073e6d623dd430fc810b858d8b1c021bfd7b32164bf6ff1e7c48c11ea5110f2097376394af2d48f444c1d4678336bd89","ssdeep":"192:Fv8ULMtxPPrDseOR9DbKlVbRa5YRor6rpUY/XYoZhPJH+j/CNVwu:xjLMtlPcp9DO3a5Y+2VUYw8hN+TCNVwu","tlshash":"6732bf6e300fa5bff5319332d373996da6585abe5635a048688a31390c447f9d78c0b7","first_seen":"2025-06-10T12:35:48.010816Z","last_seen":"2026-07-07T03:04:05.433424Z","times_seen":12,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.495Z","timestamp":1783393357495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://dujaselcmpe.click/\r\nContent-Length: 130\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":140,"data":"\n(6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0012\u0000\u001a\u0018TnA7HacJFoBWt9hnlunBlYfK\":\u0018\u0001*,\n\b\b\u0003\u0010ô\u0026\u0018‚\u0003\n\u0007\b\u0014\u0010Ý#\u00180\n\b\b\u0012\u0010¯$\u0018Ž\u0001\n\u0007\b\u0013\u0010ô\u0026\u0018!\u0012\u0004\b\u0001\u0010\u00018\u0002@ œ\u0001H°ê\u0001"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":1261,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/js/main.541f8879.js?__cv=v39","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.402Z","timestamp":1783393356402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/js/main.541f8879.js?__cv=v39 HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5HYasuJi8g8d%2BpgORsfFxlcuonqxWDQNXIfhUHBt9UmAz5ZKB6LIzAcDgbZhnDrnCtq%2FB1KHuY7qnPUzkmfbRH862ofmnX7rNHCtPd%2Bpk5M583cXBrWbQQqje%2BLQiQMrI3KuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7d889f723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:38 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083809130\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":838014,"size_decoded":267871,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"ea180fed1e7d68cbee7b36538551fd73","sha1":"dec2b23a798eccaa7770931f6d383c42086db778","sha256":"7fcdebbbcf9e1271f2ddabbbfa097e9fe04646e5a4b6d0461343af4f1b5bd941","sha512":"e1c892f13c4d6a989d980105a9e81913e73ba35b4b239315e3ee8f80696b3b81e088b7be18b851772d0a99bb4a2428b87b3b12663eab82181072e4f21cfd3b52","ssdeep":"12288:5y7IST5H80dGLTc0hwBC2TwJyRMAadAw5B4+bFif+3vyX50v7nzmGLYj5U:5MHP0wBnbdahjg2KX50PmfU","tlshash":"5c057dc47291b4a66eab45c650bf854db33e1d09b40e8870f325fd98256d9c8b027fee","first_seen":"2026-06-26T21:08:00.605723Z","last_seen":"2026-07-07T03:04:05.442059Z","times_seen":12,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-cdn.trackier.com/js/trackier-websdk-init.js","fqdn":"static-cdn.trackier.com","domain":"trackier.com","tld":"com"},"ip":{"addr":"34.149.104.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.895Z","timestamp":1783393356895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackier.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:30:25 GMT","end":"Sun, 23 Aug 2026 07:30:24 GMT"},"fingerprint":{"sha1":"F4:3B:46:0D:DB:CF:92:D9:C3:CB:FC:1E:3D:10:71:09:47:56:A9:AD","sha256":"03:D5:4F:EA:4E:4B:27:9D:F8:7E:7F:59:BB:4D:21:A8:7E:63:F7:42:98:D9:72:8F:28:02:91:EF:D0:8A:C1:03"}}},"request":{"raw":"GET /js/trackier-websdk-init.js HTTP/1.1\r\nHost: static-cdn.trackier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJ5rDhFgIvyMunvBkcvBLvJrkxFQHPOEJsV7-dnZOu-KqH-gbhXtWXCqM9B1FwOFr1RGxlHf\r\nx-goog-generation: 1710238638167460\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 285\r\nx-goog-hash: crc32c=Hd49Xw==, md5=mLJPqsL6ASb9OuNjEODoRw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 285\r\nserver: UploadServer\r\ndate: Tue, 07 Jul 2026 02:31:59 GMT\r\nage: 1837\r\nlast-modified: Tue, 12 Mar 2024 10:17:18 GMT\r\netag: \"98b24faac2fa0126fd3ae36310e0e847\"\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":285,"size_decoded":948,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"98b24faac2fa0126fd3ae36310e0e847","sha1":"f23054f114b2540c3b547e0bd4f97b2a7955a489","sha256":"bee5491f89b37c3d92638f58b768087c34e76c43020b83503f879a1b41176e8e","sha512":"3f88466b1cdad9fedd91e75bc25f5f9641f4962a616d801ca58e1ec830e0a3e40cd4e722bf934871ced7158f7be73fdfb89c348769d0acf4a49c7a4ba99acf92","ssdeep":"","tlshash":"4ad0c22939925128441720e96b3ff72027328312201df161be6c8a48ef60d779d158a8","first_seen":"2024-08-09T09:45:08Z","last_seen":"2026-07-16T10:45:36.198719Z","times_seen":250,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":15,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.tiktok.com/i18n/pixel/events.js?sdkid=CAK6Q7RC77U1E8B1DB1G\u0026lib=ttq","fqdn":"analytics.tiktok.com","domain":"tiktok.com","tld":"com"},"ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.926Z","timestamp":1783393356926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktok.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:EB:BE:51:46:14:51:C9:7D:1E:60:F3:37:13:C4:8C:34:CF:B7:EF","sha256":"05:B2:3F:E8:A1:ED:CE:46:2F:23:17:84:3D:34:79:DF:7B:99:43:04:87:15:44:9D:20:43:54:12:03:0F:92:E5"}}},"request":{"raw":"GET /i18n/pixel/events.js?sdkid=CAK6Q7RC77U1E8B1DB1G\u0026lib=ttq HTTP/1.1\r\nHost: analytics.tiktok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-tt-logid: 20260707030236D2E4707CB711613B1F37\r\ncross-origin-resource-policy: cross-origin\r\nx-tt-trace-host: 01a4cc430180ad9be9e8bde30ccd3e74c4b42451150528946e6286bd25b73d8677ce3526ce6b4c22b05301fdc63508053f11efb6da0162c4e8a90740df0eae6b021a1d3390d65d82a3ac1225d65b4d7960f47f5ac6c82d98bb8df19c160688dbeb\r\nx-tt-trace-id: 00-260707030236D2E4707CB711613B1F37-074F3FFCBFBF4AB7-00\r\ncontent-encoding: gzip\r\nexpires: Tue, 07 Jul 2026 03:02:37 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\nx-cache: TCP_MISS from a23-36-79-21.deploy.akamaitechnologies.com (AkamaiGHost/22.5.4-e2b2230ea5a6543481b6c2e5e3518506) (-)\r\nvary: Accept-Encoding\r\nset-cookie: _ttp=3G9otB5FRJmIlGCx9HDGSTyydXk; Path=/; Domain=tiktok.com; Max-Age=7776000; Secure; SameSite=None\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=dyn\r\nserver-timing: inner; dur=4, cdn-cache; desc=MISS, edge; dur=1, origin; dur=117\r\nx-origin-response-time: 117,23.36.79.21\r\nx-akamai-request-id: 30a60ebb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14242,"size_decoded":4934,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (11825)","md5":"9a15c19324875d0ff608cb60b4dbd349","sha1":"633afceb88eb85a062899c78db213af6d163308a","sha256":"b0303958f8bbac63e92804547dd47c4a6387d1000ea803c635f523c0f223eac6","sha512":"08e9bc14f931877a50b518a20a61f618b6f2efefacab3a74f55a5508b644e0594df1fcdddc0ecc2b31e9255c81870cb9223793a82078572ed393077b592a8252","ssdeep":"192:JV4nn1kc0IOnqq/P+4RF4O249c5LKwuwDEVa3WX1+TWo0gkshJ5f4w6DeF7hgfgC:Qkc0IOqhDE1XYTW8kyj/7afgC","tlshash":"3f52856e121464bbd0e6cf83e3065a23d77d187fd100b5c563bd8798612f826c2aee4e","first_seen":"2026-07-07T03:03:14.837826Z","last_seen":"2026-07-07T03:03:14.837826Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":123,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/du/common/myaccount/common/images/magic-campaign-en.jpg","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.001Z","timestamp":1783393357001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /du/common/myaccount/common/images/magic-campaign-en.jpg HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a; _gcl_au=1.1.75140856.1783393357\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a1739c8148ca723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083814616\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5foy%2FOCJpsg9xBqB8DkRYpNTeodobEy2%2Fm2E7QLtdcO%2FYSLtFcaXYrO0lkfKjJhqxIKe0lqjIJDHm5JJ0w6pFgvIjAAkVhXhY2MzNx2zcMtve7IdOIyhHj4tbT%2BrY4aq%2FhesxQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8119,"size_decoded":8896,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 470x177, components 3","md5":"c15348b28f3cbe36fd392747663c8d8e","sha1":"644819def3f55d4c58a48a565b28c5170dcc6198","sha256":"a46ddf6079306b6d7459c323dc1bc3ce418f5f6744e979e8fd3e8fd6674d3871","sha512":"63a1b4181da200e71544ead303f37ca2664c8335d851624ba1f4f3e407498876d8a130279235695422beabc89c434de744adb70c38da628bcbb3564127bd7977","ssdeep":"192:Bx0FUbBGbAbOWOtotD/LQyY+ba2hnl1zo10BVQD1sHcJv9:HPbiAbOvtotD/LQr+W2R3oOwD0cR9","tlshash":"fef1afc5f72b116aa2e7e53c5018cfb32b85c102a850d3be3489d7a68b73896a496400","first_seen":"2026-06-26T21:08:00.598291Z","last_seen":"2026-07-07T03:04:05.437572Z","times_seen":11,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWphc2VsY21wZS5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bfvkvcqw5uh7","date":"2026-07-07T03:02:37.213Z","timestamp":1783393357213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42362\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 16:35:21 GMT\r\nexpires: Tue, 06 Jul 2027 16:35:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37636\r\nlast-modified: Mon, 22 Jun 2026 00:01:17 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":83001,"size_decoded":43208,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dd05231d82d5cf63ee9cf378e72532b5","sha1":"71c5d4c7fdba84f55b9c14679299a73dc8d03543","sha256":"fadd39c9c553b8c98b6b01f733c9d8ba7f2f1f972b8608e4cb3e46c4a9bf50b0","sha512":"ed55ed71458fade33399d72d80fc579e3b096a993754c98321a64c96be3a60d1f5fb4215f70b99164edc63df0e5ff34203d118f994aacf5079d3aa2cca1e9d22","ssdeep":"1536:a7Rpgh9C9ToL9gTNfWNfK4Rx9nHZzhXwWxlW1bx7:a7ArC9ULiTYNC4Rt9X4","tlshash":"a2837e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-06-25T14:15:22.819013Z","last_seen":"2026-07-15T15:59:20.299673Z","times_seen":13530,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics-ipv6.tiktokw.us/ipv6/enrich_ipv6","fqdn":"analytics-ipv6.tiktokw.us","domain":"tiktokw.us","tld":"us"},"ip":{"addr":"23.214.96.66","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.219Z","timestamp":1783393357219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokw.us","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Jun 2026 00:00:00 GMT","end":"Thu, 24 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:15:F2:B7:ED:E0:A5:4A:A7:1B:E7:C7:32:5D:D2:15:17:69:B6:2E","sha256":"27:02:38:A6:76:DA:D1:B0:B4:51:F2:CF:E9:9A:94:9D:6D:D9:74:A0:15:1A:46:5F:3C:B4:A1:A2:69:B3:90:C9"}}},"request":{"raw":"POST /ipv6/enrich_ipv6 HTTP/1.1\r\nHost: analytics-ipv6.tiktokw.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1461\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1461,"data":"{\"event\":\"EnrichIpv6\",\"event_id\":\"\",\"message_id\":\"messageId-1783393357214-4504006978773-CAK6Q7RC77U1E8B1DB1G#source=2\",\"is_onsite\":false,\"timestamp\":\"2026-07-07T03:02:37.214Z\",\"context\":{\"ad\":{\"sdk_env\":\"external\",\"jsb_status\":2},\"device\":{\"platform\":\"pc\"},\"user\":{\"anonymous_id\":\"01KWX8E3CSE4TJT5JP4F5FS3WS_.tt.1\"},\"pixel\":{\"code\":\"CAK6Q7RC77U1E8B1DB1G\",\"runtime\":\"1\"},\"page\":{\"url\":\"https://dujaselcmpe.click/webapp/en/quick-recharge\",\"referrer\":\"\",\"load_progress\":\"1\"},\"library\":{\"name\":\"pixel.js\",\"version\":\"2.2.1\"},\"session_id\":\"4ee60f1a-79b0-11f1-80e8-02001701d8ba::9R23qzQODgrjjiM6M_JZ-CAK6Q7RC77U1E8B1DB1G\",\"pageview_id\":\"4ee60f1a-79b0-11f1-80e8-02001701d8ba-UIg9Z.0.0::4ee5eca8-79b0-11f1-80e8-02001701d8ba-CAK6Q7RC77U1E8B1DB1G\",\"variation_id\":\"default\",\"csid\":\"1783393357212::U0jQu6lA_XgMlKZeyiPi\",\"page_csid\":\"1783393357213::2ifl0XFUA9TYIyjPSgG7\",\"csct\":1,\"css\":1,\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"_inspection\":{\"vids\":\"\",\"inter_id\":\"1.-5092.0::0.0.0.0::0.0.0\"},\"properties\":{},\"signal_diagnostic_labels\":{\"raw_email\":{\"label\":\"missing\"},\"raw_auto_email\":{\"label\":\"missing\"},\"raw_phone\":{\"label\":\"missing\"},\"raw_auto_phone\":{\"label\":\"missing\"},\"hashed_email\":{\"label\":\"missing\"},\"hashed_phone\":{\"label\":\"missing\"},\"raw_eb_email\":{\"label\":\"missing\"},\"raw_eb_phone\":{\"label\":\"missing\"},\"hashed_eb_email\":{\"label\":\"missing\"},\"hashed_eb_phone\":{\"label\":\"missing\"}},\"trigger_event\":\"Pageview\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-length: 0\r\naccess-control-allow-headers: Authorization,*\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,DELETE,HEAD,OPTIONS,UPDATE\r\naccess-control-allow-origin: *\r\nx-tt-logid: 20260707030237208D5869445FCAF27626\r\ncross-origin-resource-policy: cross-origin\r\nx-tt-trace-host: 01a4cc430180ad9be9e8bde30ccd3e74c42dec6c29085f59db49b76e48e1f312e223bae895c2007ef0fd45001208a8bc1ac1481c038e5cf3a648b8068cd7d176f2b176946344e6d0c8616c96e502309208f4ef1590f754ff322bbe5367020cc69661ee42cf06bf88e2d7cba9268063a415\r\nx-tt-trace-id: 00-260707030237208D5869445FCAF27626-41304FF374E18863-00\r\nx-origin-response-time: 61,23.44.237.202\r\nx-akamai-request-id: 13d87c46.43dd6429\r\nexpires: Tue, 07 Jul 2026 03:02:37 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\nx-cache: TCP_MISS from a23-213-134-66.deploy.akamaitechnologies.com (AkamaiGHost/22.5.4-b620ca40a6c21d08122eeb20d0541579) (-)\r\nx-cache-remote: TCP_MISS from a23-44-237-202.deploy.akamaitechnologies.com (AkamaiGHost/22.5.5-8c318eda7de60ea8af8bd39459c0c9be) (-)\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=dyn\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=83, origin; dur=61, inner; dur=58\r\nx-parent-response-time: 144,23.213.134.66\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":3359,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":146,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.tiktok.com/api/v2/pixel","fqdn":"analytics.tiktok.com","domain":"tiktok.com","tld":"com"},"ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.226Z","timestamp":1783393357226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktok.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:EB:BE:51:46:14:51:C9:7D:1E:60:F3:37:13:C4:8C:34:CF:B7:EF","sha256":"05:B2:3F:E8:A1:ED:CE:46:2F:23:17:84:3D:34:79:DF:7B:99:43:04:87:15:44:9D:20:43:54:12:03:0F:92:E5"}}},"request":{"raw":"POST /api/v2/pixel HTTP/1.1\r\nHost: analytics.tiktok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1452\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nCookie: _ttp=3G9otB5FRJmIlGCx9HDGSTyydXk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1452,"data":"{\"event\":\"LandingPageView\",\"event_id\":\"\",\"message_id\":\"messageId-1783393357216-3966912534061-CAK6Q7RC77U1E8B1DB1G\",\"is_onsite\":false,\"timestamp\":\"2026-07-07T03:02:37.216Z\",\"context\":{\"ad\":{\"sdk_env\":\"external\",\"jsb_status\":2},\"device\":{\"platform\":\"pc\"},\"user\":{\"anonymous_id\":\"01KWX8E3CSE4TJT5JP4F5FS3WS_.tt.1\"},\"pixel\":{\"code\":\"CAK6Q7RC77U1E8B1DB1G\",\"runtime\":\"1\"},\"page\":{\"url\":\"https://dujaselcmpe.click/webapp/en/quick-recharge\",\"referrer\":\"\",\"load_progress\":\"1\"},\"library\":{\"name\":\"pixel.js\",\"version\":\"2.2.1\"},\"session_id\":\"4ee60f1a-79b0-11f1-80e8-02001701d8ba::9R23qzQODgrjjiM6M_JZ-CAK6Q7RC77U1E8B1DB1G\",\"pageview_id\":\"4ee60f1a-79b0-11f1-80e8-02001701d8ba-UIg9Z.0.0::4ee5eca8-79b0-11f1-80e8-02001701d8ba-CAK6Q7RC77U1E8B1DB1G\",\"variation_id\":\"default\",\"csid\":\"1783393357212::U0jQu6lA_XgMlKZeyiPi\",\"page_csid\":\"1783393357213::2ifl0XFUA9TYIyjPSgG7\",\"csct\":1,\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"_inspection\":{\"trigger_source\":\"pixel_self\",\"vids\":\"\",\"inter_id\":\"1.-5092.0::0.0.0.0::0.0.0\"},\"properties\":{},\"signal_diagnostic_labels\":{\"raw_email\":{\"label\":\"missing\"},\"raw_auto_email\":{\"label\":\"missing\"},\"raw_phone\":{\"label\":\"missing\"},\"raw_auto_phone\":{\"label\":\"missing\"},\"hashed_email\":{\"label\":\"missing\"},\"hashed_phone\":{\"label\":\"missing\"},\"raw_eb_email\":{\"label\":\"missing\"},\"raw_eb_phone\":{\"label\":\"missing\"},\"hashed_eb_email\":{\"label\":\"missing\"},\"hashed_eb_phone\":{\"label\":\"missing\"}}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-length: 0\r\naccess-control-allow-headers: Authorization,*\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,DELETE,HEAD,OPTIONS,UPDATE\r\naccess-control-allow-origin: *\r\nx-tt-logid: 202607070302375B24743B65FAC4E1C0E2\r\ncross-origin-resource-policy: cross-origin\r\nx-tt-trace-host: 01a4cc430180ad9be9e8bde30ccd3e74c4b42451150528946e6286bd25b73d8677f50018bb2bc3e8bbf88df16716ceb4889288161211765f7748ea26f1e8151833a16284b79a203c3c1afef32faa913ca909e4350575b8c4c21838f55c4dcab0c6\r\nx-tt-trace-id: 00-2607070302375B24743B65FAC4E1C0E2-16DB220CB213EA8F-00\r\nexpires: Tue, 07 Jul 2026 03:02:37 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\nx-cache: TCP_MISS from a23-36-79-21.deploy.akamaitechnologies.com (AkamaiGHost/22.5.4-e2b2230ea5a6543481b6c2e5e3518506) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=dyn\r\nserver-timing: inner; dur=27, cdn-cache; desc=MISS, edge; dur=3, origin; dur=123\r\nx-origin-response-time: 123,23.36.79.21\r\nx-akamai-request-id: 30a60ef6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":3097,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.tiktok.com/api/v2/pixel/act","fqdn":"analytics.tiktok.com","domain":"tiktok.com","tld":"com"},"ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.433Z","timestamp":1783393357433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktok.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:EB:BE:51:46:14:51:C9:7D:1E:60:F3:37:13:C4:8C:34:CF:B7:EF","sha256":"05:B2:3F:E8:A1:ED:CE:46:2F:23:17:84:3D:34:79:DF:7B:99:43:04:87:15:44:9D:20:43:54:12:03:0F:92:E5"}}},"request":{"raw":"POST /api/v2/pixel/act HTTP/1.1\r\nHost: analytics.tiktok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1649\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nCookie: _ttp=3G9otB5FRJmIlGCx9HDGSTyydXk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1649,"data":"{\"event_id\":\"\",\"message_id\":\"messageId-1783393357431-5814927409337\",\"is_onsite\":false,\"timestamp\":\"2026-07-07T03:02:37.431Z\",\"context\":{\"ad\":{\"sdk_env\":\"external\",\"jsb_status\":2},\"device\":{\"platform\":\"pc\"},\"user\":{\"anonymous_id\":\"01KWX8E3CSE4TJT5JP4F5FS3WS_.tt.1\"},\"pixel\":{\"code\":\"CAK6Q7RC77U1E8B1DB1G\",\"runtime\":\"1\",\"codes\":\"CAK6Q7RC77U1E8B1DB1G\"},\"page\":{\"url\":\"https://dujaselcmpe.click/webapp/en/quick-recharge\",\"referrer\":\"\",\"load_progress\":\"1\"},\"library\":{\"name\":\"pixel.js\",\"version\":\"2.2.1\"},\"session_id\":\"4ee60f1a-79b0-11f1-80e8-02001701d8ba::9R23qzQODgrjjiM6M_JZ\",\"pageview_id\":\"4ee60f1a-79b0-11f1-80e8-02001701d8ba-UIg9Z.0.0::4ee5eca8-79b0-11f1-80e8-02001701d8ba\",\"variation_id\":\"default\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"index\":0,\"sessions\":[{\"csid\":\"1783393357212::U0jQu6lA_XgMlKZeyiPi\",\"page_csid\":\"1783393357213::2ifl0XFUA9TYIyjPSgG7\",\"csct\":1,\"pixel_code\":\"CAK6Q7RC77U1E8B1DB1G\"}]},\"_inspection\":{\"vids\":\"\",\"inter_id\":\"1.-5092.0::0.0.0.0::0.0.0\"},\"properties\":{},\"signal_diagnostic_labels\":{\"raw_email\":{\"label\":\"missing\"},\"raw_auto_email\":{\"label\":\"missing\"},\"raw_phone\":{\"label\":\"missing\"},\"raw_auto_phone\":{\"label\":\"missing\"},\"hashed_email\":{\"label\":\"missing\"},\"hashed_phone\":{\"label\":\"missing\"},\"raw_eb_email\":{\"label\":\"missing\"},\"raw_eb_phone\":{\"label\":\"missing\"},\"hashed_eb_email\":{\"label\":\"missing\"},\"hashed_eb_phone\":{\"label\":\"missing\"}},\"action\":\"Metadata\",\"auto_collected_properties\":{\"page_trigger\":\"PageView\",\"content_data\":{\"open_graph\":\"{}\",\"microdata\":\"[]\",\"json_ld\":\"[]\",\"meta\":\"{\\\"title\\\":\\\"du - My Account\\\",\\\"meta:description\\\":\\\"du - myaccount\\\"}\"}}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-length: 0\r\naccess-control-allow-headers: Authorization,*\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,DELETE,HEAD,OPTIONS,UPDATE\r\naccess-control-allow-origin: *\r\nx-tt-logid: 20260707030237D2E4707CB711613B1F68\r\ncross-origin-resource-policy: cross-origin\r\nx-tt-trace-host: 01a4cc430180ad9be9e8bde30ccd3e74c4b42451150528946e6286bd25b73d8677ce3526ce6b4c22b05301fdc63508053fa910b626c4d8028841d4f7b8a18d09408950ed16f0e992951a8c49cf26a39ec1917d80d7f3e9e570b6f0f5bfddb9f62a\r\nx-tt-trace-id: 00-260707030237D2E4707CB711613B1F68-3C14C6287B9616CA-00\r\nexpires: Tue, 07 Jul 2026 03:02:37 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\nx-cache: TCP_MISS from a23-36-79-21.deploy.akamaitechnologies.com (AkamaiGHost/22.5.4-e2b2230ea5a6543481b6c2e5e3518506) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=dyn\r\nserver-timing: inner; dur=60, cdn-cache; desc=MISS, edge; dur=4, origin; dur=167\r\nx-origin-response-time: 167,23.36.79.21\r\nx-akamai-request-id: 30a60f32\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":3298,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWphc2VsY21wZS5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bfvkvcqw5uh7","date":"2026-07-07T03:02:37.480Z","timestamp":1783393357480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 02:17:07 GMT\r\nexpires: Fri, 02 Jul 2027 02:17:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 434730\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-17T13:41:02.541306Z","times_seen":930491,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":2,"connect":28,"send":0,"wait":16,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.tiktok.com/api/v2/monitor","fqdn":"analytics.tiktok.com","domain":"tiktok.com","tld":"com"},"ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.727Z","timestamp":1783393357727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktok.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:EB:BE:51:46:14:51:C9:7D:1E:60:F3:37:13:C4:8C:34:CF:B7:EF","sha256":"05:B2:3F:E8:A1:ED:CE:46:2F:23:17:84:3D:34:79:DF:7B:99:43:04:87:15:44:9D:20:43:54:12:03:0F:92:E5"}}},"request":{"raw":"POST /api/v2/monitor HTTP/1.1\r\nHost: analytics.tiktok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 950\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nCookie: _ttp=3G9otB5FRJmIlGCx9HDGSTyydXk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":950,"data":"{\"metric_name\":\"custom_info\",\"pixel_code\":\"CAK6Q7RC77U1E8B1DB1G\",\"platform\":0,\"app_name\":\"external\",\"net_type\":\"\",\"placement\":\"non\",\"lib\":{\"lib_version\":\"2.2.1\",\"ttq_name\":\"ttq\"},\"in_iframe\":1,\"time_to_last_start\":790,\"time_to_navigation_start\":5593,\"latency\":0,\"page_url\":\"https://dujaselcmpe.click/webapp/en/quick-recharge\",\"att_status\":3,\"pageview_id\":\"4ee60f1a-79b0-11f1-80e8-02001701d8ba-UIg9Z.0.0\",\"session_id\":\"4ee60f1a-79b0-11f1-80e8-02001701d8ba::9R23qzQODgrjjiM6M_JZ\",\"variation_id\":\"default\",\"vids\":\"\",\"load_id\":\"4ee5eca8-79b0-11f1-80e8-02001701d8ba\",\"ad_id\":\"undefined\",\"creative_id\":\"undefined\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"pixel_monitor_version\":\"v2\",\"custom_name\":\"form_funnel\",\"custom_enum\":\"form_visible\",\"partner\":\"non\",\"ext_json\":{\"performance\":[],\"pixel_list\":\"CAK6Q7RC77U1E8B1DB1G\",\"pixel_api_conflict_flag\":false,\"message\":\"form_1|1.-5092.0::0.0.0.0::0.0.0|\"}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-length: 0\r\naccess-control-allow-headers: Authorization,*\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,DELETE,HEAD,OPTIONS,UPDATE\r\naccess-control-allow-origin: *\r\nx-tt-logid: 202607070302379A15D596C1DD73344D86\r\ncross-origin-resource-policy: cross-origin\r\nx-tt-trace-host: 01a4cc430180ad9be9e8bde30ccd3e74c4b42451150528946e6286bd25b73d86771d92066783a4ca188ffc6443d4ae18dacc342755a6a520bf5cc20031dcc0ec4a2b3bb60c39c3c80fb57f5ccee8587448e9b037328824aed99a529fc7dc8d5ce1\r\nx-tt-trace-id: 00-2607070302379A15D596C1DD73344D86-2B62A9421EBBEABC-00\r\nexpires: Tue, 07 Jul 2026 03:02:37 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\nx-cache: TCP_MISS from a23-36-79-21.deploy.akamaitechnologies.com (AkamaiGHost/22.5.4-e2b2230ea5a6543481b6c2e5e3518506) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=dyn\r\nserver-timing: inner; dur=23, cdn-cache; desc=MISS, edge; dur=3, origin; dur=123\r\nx-origin-response-time: 123,23.36.79.21\r\nx-akamai-request-id: 30a60f6c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":2596,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/css/main.e5272e92.css","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.403Z","timestamp":1783393356403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/css/main.e5272e92.css HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FFWfkQ29wjyaQbBw3et9lP66G7CO58nQsKLxuRYnOceAAwvskAfsQB4MSMdqPk39dCmz3Af6KvJcMA%2BRfG96RQLtdyv24i35sCU6hIztqTJVlL2iIQ8M9xj9NtTrtMUF%2F94%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7d88a0723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 41458\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:38 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083808184\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5595,"size_decoded":2386,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5550)","md5":"b706f3d51beced113f607dbd6b2bb63a","sha1":"31db84b2f611aee27f0043ccab2db1e124a64097","sha256":"96b077338f6b0e6eac23b955c83385a2c1d7f9149650cfcfc895901e835033a1","sha512":"7089465b7a2dc770d0e24e843585db9f8d0dbfe0a34de06d6b9723a17b418ea941e9a26c657d9539a99b1ee85a17ffb0d9a551d8652da6fd9305cd1d256bd7ee","ssdeep":"96:FF9kdLFbhLdPBtvVYIQmjp97j1iWB7j1iWc7kDrfU9F/W:FF9KLFX7S4jp9ZJPmW","tlshash":"4bb13f12df872401f9b7464131ce6bb5ae4dec2cb038a852f91d9d75cca288f4352f29","first_seen":"2026-06-26T21:08:00.600547Z","last_seen":"2026-07-07T03:04:05.445278Z","times_seen":12,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/cc-master-logo.0fced2f492f163434103b9c040995d7c.svg","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.702Z","timestamp":1783393356702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/cc-master-logo.0fced2f492f163434103b9c040995d7c.svg HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYu9B2V2NyPaqkaEs5pGS9RjGqZap6P9bBLI3vuOUAct1gyBrq63Tylv3Of0ZjDTVg1OzY6UNXuxyiFr3%2FloTjQ7EQWdR1nrRZUT%2BJFcWW5p1tCaeKLEsFzqgf1IZVkciycY1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7f68af723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811850\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1731,"size_decoded":1524,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5c37f44662f4be81f93272cacb53c7","sha1":"981cd962cd20e921e75fc6133ecfe62c4dff7d64","sha256":"28bd53cec442bda2a970bfd4d1b058fd202cbd3438c05550f4c949fe5f6f3918","sha512":"4d15a69aa2bf689ed260dcf411073fe77da2ce248bf93e87cb9b0342496afea47639f53419b16fe09cd2f25a2987094f1000502d0d5c7686273bd0034051369d","ssdeep":"","tlshash":"153150c822fed0a8f2528300d2f17ac7e9aeb0cbc3c18554b15d26682f16ea609c901c","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.445741Z","times_seen":15,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dnacdn.net/dna","fqdn":"dnacdn.net","domain":"dnacdn.net","tld":"net"},"ip":{"addr":"178.250.7.145","port":443,"asn":44788,"as":"Criteo Technology SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gum.criteo.com/syncframe?topUrl=dujaselcmpe.click\u0026origin=onetag#{%22bundle%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22cw%22:true,%22optout%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22origin%22:%22onetag%22,%22tld%22:%22dujaselcmpe.click%22,%22topUrl%22:%22dujaselcmpe.click%22,%22version%22:%225_46_0%22,%22ifa%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22lsw%22:true,%22pm%22:0,%22requestId%22:%2291656bc5-0f97-456c-a970-55abe95ff84c%22}","date":"2026-07-07T03:02:44.608Z","timestamp":1783393364608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dnacdn.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 16 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:1A:D5:1F:DE:FB:82:32:49:09:09:60:E1:87:02:B3:16:8A:91:81","sha256":"36:EC:F9:52:70:3F:EF:98:44:30:E7:7E:C3:3C:BE:CF:53:A0:F8:68:B6:F9:0F:B4:A3:19:87:AB:60:62:0A:4C"}}},"request":{"raw":"GET /dna HTTP/1.1\r\nHost: dnacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gum.criteo.com/\r\nOrigin: https://gum.criteo.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\ndate: Tue, 07 Jul 2026 03:02:44 GMT\r\nserver: Kestrel\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: https://gum.criteo.com\r\ncache-control: private, no-cache, max-age=0, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\nset-cookie: browser_data=zMAnEl9EazhDR3lkVFlWdk1ReXZ5VDh6eXVZb1c3JTJCOU1rdjdXbU1tMHo4JTJCNzlZSnNxNEtiJTJGdDIzbXJZOGs0MHZ6UWdKbG1xJTJCNnBJbzhnZlRrbEQ0SDZvMFN3JTNEJTNE; expires=Sun, 01 Aug 2027 03:02:44 GMT; domain=dnacdn.net; path=/; secure; samesite=none\r\nserver-processing-duration-in-ticks: 118863\r\nstrict-transport-security: max-age=31536000; preload;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":684,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":3,"connect":27,"send":0,"wait":27,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/ProximaNova-Regular.4d6b0ae73bbc0ee103b8.woff2","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.447Z","timestamp":1783393356447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/ProximaNova-Regular.4d6b0ae73bbc0ee103b8.woff2 HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739c7dc8a3723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:38 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811710\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIFpcp9dB5BRCKdR2oe3ahWV9nzJHjTX3HxGcOezDjNa3eaX5L%2FRe5BM1cOPzUr%2FvYrwROexCDbPwMqWJNmYqiPPyXpbmPikBYskcLdYMtn5tfy%2FPsyxqYJ47xKAsA%2F%2BASdRaw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43624,"size_decoded":44405,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43624, version 1.0","md5":"4f34c6720cebe2013388679095970207","sha1":"d17557584ba2f660e908feeeab23c400f6e51bef","sha256":"61ecc328e428b3316f7810afeae429fd523c6bd8810b49aa1a7dcabc8beae527","sha512":"43bef86aefecb9a7e911286a95005a9ad80579b9aeb156b6f26058d407b46f9804460f359ec7a1ca20bd4078f9fe0c151b792c22e702035852f11fda8e386295","ssdeep":"768:ko+LKKXRSxeiABAANXjz1cNLeq5FsV1EfRai4YVeN6ccUxVclTrQ2710Xc:U/RieWWXjxwLeT6fRaiR06ccUMlr97ms","tlshash":"4113012f69114ba43c1df3fdeceb548b32b13a0e955439f9d5e6400eea8384dc887488","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.430497Z","times_seen":30,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadcallback\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.696Z","timestamp":1783393356696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadcallback\u0026render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 07 Jul 2026 03:02:36 GMT\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1035,"size_decoded":1304,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1035), with no line terminators","md5":"7425ca005c7316f61b45059809059236","sha1":"9e1600a46f5f72eee06bc51dbf4fff2c7d9e330e","sha256":"2bd75dde8330c029f9b5501c4cb06d2f1859d6b73735c31a91f436053c11f01d","sha512":"9bb9e9c3c53a6eec109e5e5b1fca4c1309e01d8dd8e26162e2d84e5b4d4fb6c3c54dde28c3c098fffecc53330437903c2aa4ea969f74566b9ea494b9e513d4d8","ssdeep":"","tlshash":"d1111bb22a04f0384f3219e1e1fbcbb8e462702db15c85eca501cac42e7accbcf04456","first_seen":"2026-06-25T21:28:07.860638Z","last_seen":"2026-07-08T12:26:26.078001Z","times_seen":172,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":3,"connect":23,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.ads-twitter.com/uwt.js","fqdn":"static.ads-twitter.com","domain":"ads-twitter.com","tld":"com"},"ip":{"addr":"199.232.172.157","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.912Z","timestamp":1783393356912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-twitter.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 02:04:39 GMT","end":"Sun, 13 Sep 2026 02:04:38 GMT"},"fingerprint":{"sha1":"BC:6A:70:5A:A3:8D:54:27:04:9D:30:0B:97:E3:D2:84:41:81:FA:F9","sha256":"7B:4F:B6:A3:F8:6E:CF:0F:FA:3C:B0:6A:EC:E6:3A:A2:2B:49:08:0F:FD:15:07:BF:0C:EF:5C:2E:98:33:B9:BE"}}},"request":{"raw":"GET /uwt.js HTTP/1.1\r\nHost: static.ads-twitter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 18 Apr 2026 01:08:42 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: no-cache\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\netag: \"6404fceba8a6f71ceb2342c923ae791f+gzip+gzip\"\r\naccept-ranges: bytes\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\nx-served-by: cache-iad-kcgs7200155-IAD, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding,Host\r\np3p: CP=\"CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT\"\r\nx-tw-cdn: FT\r\ncontent-length: 13407\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48081,"size_decoded":13981,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48081), with no line terminators","md5":"6404fceba8a6f71ceb2342c923ae791f","sha1":"b041e15555e2c1940ad5a2794e3b924e958529d6","sha256":"fed344940a52670af96d23cd88e8fedf17c4db4adfeb66e284f36df2b14c1219","sha512":"1734d7c2f0a4fac3fd66005e9157eea73b9a81f912cc6ac990ffc584766cf9a7a25d4725d0ec220554c11a0b75425c0be777374564fa1710107bffeb02c5c533","ssdeep":"768:pvY/2/uISU5w9BOXDeivH3Izbm6XjQbHekuhOfDIaMfFSArOoqQT0VC+FI5kv5DS:pLM56MrQ3ZLnKNNL","tlshash":"6323e896b2d4f4b103d2a5e9543f011af23a5828301da1d4b3a8dcd66c29e5f9673f3e","first_seen":"2026-04-18T15:57:00.528457Z","last_seen":"2026-07-17T12:49:31.212215Z","times_seen":800,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":2,"connect":11,"send":0,"wait":9,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monitor.tapper.ai/bundle.js","fqdn":"monitor.tapper.ai","domain":"tapper.ai","tld":"ai"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.931Z","timestamp":1783393356931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tapper.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 07:21:30 GMT","end":"Sat, 26 Sep 2026 08:20:51 GMT"},"fingerprint":{"sha1":"3B:F9:37:3E:CF:D2:A5:C5:1B:49:21:0B:DE:66:6C:C2:8E:B0:6B:A5","sha256":"1A:F1:F2:04:1D:16:FC:BB:68:42:C4:23:CE:28:40:A5:E2:6E:15:19:AE:06:74:4D:21:98:F9:52:48:44:D9:43"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: monitor.tapper.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"d2b059f720816973698781a06520dded595edaa3e7d6590b9585c17935a0e3b5-br\"\r\nlast-modified: Sat, 04 Jul 2026 15:41:35 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\nx-served-by: cache-bma-essb1270071-BMA\r\nx-cache: HIT\r\nx-cache-hits: 14\r\nx-timer: S1783393357.995399,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":149001,"size_decoded":44840,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51484)","md5":"acd39c46e642011954a9c0f00bf398b0","sha1":"60220392215579a8b52f71154b7f6149096603de","sha256":"9a3f0e83e7cf10e6bc4b44130b68129787df1f52c1290a8f3572155e96ad4dfa","sha512":"76a097c9a50946b4712834889fd4fecc17977ad36272accbed5281db2de844044768ad03647b93e836e7b50dfed43d58d7797455aeb571eef19f8ca148c1314a","ssdeep":"3072:WbbaxwXsXEgpFj+7RBotNqZV1MdLMHH0Yi6US:5vqGIHH0Yi6US","tlshash":"b7e36be472d2b07543b350b6507f0201b23a7d58740da495f1aacee93966e07923bfbe","first_seen":"2026-07-07T00:21:32.962519Z","last_seen":"2026-07-07T03:04:05.432317Z","times_seen":9,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":32,"connect":10,"send":0,"wait":9,"receive":9,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/DubaiW23-Regular.c56831cd808f5e4e0717.woff2","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.152Z","timestamp":1783393357152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/DubaiW23-Regular.c56831cd808f5e4e0717.woff2 HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a; _gcl_au=1.1.75140856.1783393357; _twpid=tw.1783393357020.266502528348788865; __tr_luptv=1783393357056\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739c8238e8723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083827342\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zJEYyvTSW%2F0%2FN039MTt%2Frynx5oW%2BZFc4qU4aFBcKfWS1bq4gQU8svLur7LSTWnTIWn14YbaFBq7XzMAkPBhfI8ctnBcUl6liqUwb%2Fok9f57dfidq3gVvVC4OBXZuzu8ki%2BvJNQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64056\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64056,"size_decoded":64839,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64056, version 0.0","md5":"f435cc5251bd632ffe4ece7e663c6b14","sha1":"c954ab326bb7d02478e4a11b55bfff93db81af92","sha256":"df258432651535812b9de18555fd59d03b12594d58fbba950c200ec5763dd11e","sha512":"b5e19662d155f6d369bda3b1b10c0412fe94bad5f57415b78dad11d4b242b0f4d1573d1dbb4f6f4182d880e2342a034279dc94ab5824f874e7cd1fca242ea0f7","ssdeep":"1536:lMmts897Fg0xbkhn9JnsCMSw2ftoAo9ywEy1nYUe16Ds5r:3tH9J8auOAoQwEy1nYDoDs5r","tlshash":"6753f14808b3cd8afd5f063a857d5b97514145a162d8cdf35235d8bc89b2d282f329fe","first_seen":"2023-08-03T22:23:19Z","last_seen":"2026-07-07T03:04:05.438077Z","times_seen":244,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/du/common/myaccount/backend-routine/json/landingPageData.json","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.730Z","timestamp":1783393356730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /du/common/myaccount/backend-routine/json/landingPageData.json HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncache-control: public, max-age=120\r\nx-cached-at: 1783393256295\r\nx-proxy-cache: R2-HIT\r\nx-proxy-source: r2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KNuRx41B4afPjGi9X1ARaZulQcAn0DndZeQ%2B7X%2BuWexXc1FnI9MVc5SxLF24Z4qqOaa%2FfxeyBJCEK6xBXVVP0wPMYJiEb4ZfGz4YxN3Tx4cLwUGWtDi%2FlQyaJ7et%2BBubM96%2Bxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7f98b5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16250,"size_decoded":4776,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"aa330608a6379e53ee7aa35714355f9c","sha1":"ea0cc8bc58e7d850435b859c1e4c325d1dbbefcc","sha256":"3b6023a46d436ee39e973c5556c951ad09795462ceac181a3895e733c6e755f0","sha512":"df32edf19dc034adf4e582e0b18eb199138b8a91143596f32a20d3639249b91a523e9dbf92de137383b1b59cdfa7e4792b4dc23c8da1c72e849b2c5afa3b9e31","ssdeep":"192:92F/qIryorUcEZFp4sZLvppsRwFmnGt2sRwFmoJQ+lIMr/BD7jGNeAafEgeyoKyL:cMIaSaLf2nIADnAafm","tlshash":"0672ef55d9b00ce3064a9d18a07a6096e9348d6b8f59bc28399d351c0faf93f50ee7fc","first_seen":"2026-06-26T21:08:00.594752Z","last_seen":"2026-07-07T03:04:05.442876Z","times_seen":11,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.clarity.ms/tag/wir9adrh38?ref=gtm","fqdn":"www.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.891Z","timestamp":1783393356891,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tag/wir9adrh38?ref=gtm HTTP/1.1\r\nHost: www.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.tiktok.com/i18n/pixel/static/main.MTIwMGUyODI1MQ.js","fqdn":"analytics.tiktok.com","domain":"tiktok.com","tld":"com"},"ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.112Z","timestamp":1783393357112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktok.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:EB:BE:51:46:14:51:C9:7D:1E:60:F3:37:13:C4:8C:34:CF:B7:EF","sha256":"05:B2:3F:E8:A1:ED:CE:46:2F:23:17:84:3D:34:79:DF:7B:99:43:04:87:15:44:9D:20:43:54:12:03:0F:92:E5"}}},"request":{"raw":"GET /i18n/pixel/static/main.MTIwMGUyODI1MQ.js HTTP/1.1\r\nHost: analytics.tiktok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nCookie: _ttp=3G9otB5FRJmIlGCx9HDGSTyydXk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-tt-logid: 202607011018354CEF8DB2A7F8A0F43095\r\ncross-origin-resource-policy: cross-origin\r\nx-tt-trace-host: 01ecad359ead41bc70a8b109d2685e4862a7232b76c11627abcad19f5c9db10d2113e80d23fecf8e14779fd655288e7a388bd4ab32b258a24cf1761eb4c5406bbb41832eb353eb954e8510bada660a4e6a11da2e5c3395ecd5fddcc9c311460584\r\nx-tt-trace-id: 00-2607011018354CEF8DB2A7F8A0F43095-1AB2EEDB632504C9-00\r\ncontent-encoding: gzip\r\ncontent-length: 115063\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\nx-cache: TCP_MEM_HIT from a23-36-79-21.deploy.akamaitechnologies.com (AkamaiGHost/22.5.4-e2b2230ea5a6543481b6c2e5e3518506) (-)\r\nvary: Accept-Encoding\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0, inner; dur=2\r\nx-akamai-request-id: 30a60ed9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":487716,"size_decoded":115989,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"96710b3e3dd9ed48e3bf556946e75590","sha1":"3f4f7e5416adfcae43736cbe0a7c014d782e12ed","sha256":"92991e1d02298dc1f8c85b708f7301b1cff98dba799f6c9bd63320383514826e","sha512":"ca3baaa5483b03aa827ec97a8ca183ce146e010bab783ff50ebd787f37b74e12745efa0603a0a427a68e655d4808441887a76a5531dcf2e34d166b7cc6cfb9d1","ssdeep":"6144:cjB2pzW6CS7Li23nEqJkbckr2zbeaBK1DObFE/cu:cF2p3PYCkgkr/Vcu","tlshash":"f8a4d9c9f2d6f02543a36261902f110bf23f6a59b40d8098e265d9d1bcf998ad237f7d","first_seen":"2026-07-02T16:13:29.656268Z","last_seen":"2026-07-07T07:24:08.749617Z","times_seen":31,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/servlet/myaccount/en/mya-quick-pay-payment.html","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.729Z","timestamp":1783393356729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /servlet/myaccount/en/mya-quick-pay-payment.html HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: SameSite=\"ENCAAAAAAXEmrHOTuOc2oKebM9j6P2G//gllX3GhCSqe6uZdHYlQTawUdSwi37Dj8RR2CRzAbY=\"; Max-Age=30; Expires=Tue, 07 Jul 2026 03:03:06 GMT; Path=/; SameSite=Lax; Secure; HttpOnly\nADRUM_BTa=\"ENCAAAAAAXfkdax0x+42WX8EtugsZNlgifm8dXy5F8xqw2/L3Odnugu1MZ5AeOTGgjW8WkZdfti8FyKjykmOOatjro1TRjAiygZ3qnzpDx95sZSs7wTf4aD+i40c6BFf05iOetDVsJBHapjyOsXmYZySs7YrM7ptU8lLDmdQqJnFc91FL6KU8AzlxjX5PDtlxzwC6IK1y8=\"; Expires=Tue, 07 Jul 2026 03:03:07 GMT; Path=/; Secure; HttpOnly\nADRUM_BT1=\"ENCAAAAAAUGJCApOTCi7uUIlyYAJQZRoWzaz8JyCTB/fJ5Cp7WJ4nyaznLYXmP6YNJf7ROLtZ6cDTX5O9sW0M69E8Ui5FVt\"; Expires=Tue, 07 Jul 2026 03:03:07 GMT; Path=/; Secure; HttpOnly\nJSESSIONID=\"ENCAAAAAAXyquKTi67hJ+Ssos9HvSTD/cM41GwTsQAB4vQDhBcn+nSH6ZMTMTawBFj+Pgt44ugZlV57g9XEM5/eczoxQVqoom3BBhE36a9Sk/LyaHXfO7H114Pa3MX8BzgC1WUrwdIwWthySQCYrLzOw/kc0LyG\"; Path=/servlet; Secure; HttpOnly\n7046c9094c9e5a0446fdb51586a63f0a7df59c6e25ca7359861cf2ad2ab5493c=\"ENCAAAAAAWiYX+f60R/YIcDFROXIdWSL3vIf45JwPl81Mpr3BRZyi10rRtBINhitDpARmzabenCpIHMxMLO0eEbUWk+oILPLFT/3Ccxm/qLVgBweEL0ImZgo66HBn9qzKMTW98G2WKQ6JsrpT/rku1YvqtjasLv\"; Expires=Tue, 07 Jul 2026 03:04:37 GMT; Path=/; Secure; HttpOnly\n54e6ef1e44ecf3bdd6a3100628da47fb=\"ENCAAAAAAVoJL0VosNjJ5liD3LhO7zq9fa9QJQCwmTbyWIZ4CYUvPu6wLUzBypi+pK2UoHue7VLJTkDsPckuHDvRciXWm67UVKp8xkDO7ubOcG+oV49yA==\"; Path=/; Secure; HttpOnly\n3f02fdc1c0988888e8706218565eb98c72057030d663378e5bebc089aacbb4f3=\"ENCAAAAAAVp70YKLQiBm6IXFzOrkpFNg9d3O73at4zdOZsdExxtQO/wHGl0iKFOlDxtYJu5pWg4epe/+fvv6VMbFAP8me6uydpuxlx/QWkDiGNA2I/8eD4PthHT0kuTpqQNE2obXUW/fBEqhveMzSA8/M3JnfXZ\"; Expires=Tue, 07-Jul-2026 03:04:38 GMT; Path=/; Secure; HttpOnly\r\nx-cached-at: 1783393358461\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQxT%2BkrIukO2i4IRHj608bNW84B%2FynNNRtgHC8xXr3uy7koINEGCEv7oAdKhonZzptja2gW21srZjqioX5RiFiO0fSSgc4DIMv1uKKG%2FuZeTGu8CWUdqWx7mYf9NZBz1FNGLRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7f98b4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThreatMetrix","description":"LexisNexis ThreatMetrix is an enterprise solution for online risk and fraud protection ('digital identity intelligence and digital authentication').","website":"https://risk.lexisnexis.com/products/threatmetrix","common_platform_enumeration":"","icon":"threatmetrix.png","categories":["Security","Browser fingerprinting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265608,"size_decoded":53239,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61496), with CRLF line terminators","md5":"5cd9d6800832e98e7d891faf0c314c31","sha1":"b904003cfae301fd3480f6e7620d647fa79f2979","sha256":"15a8a8c23abab6b63d4fdf2ad0a002b94e824ef43f6bdc85048a1e9886882d23","sha512":"a305ccd79bce5637218982f5fe6d69df396b7ce3c5f717a4ae58eb91c4a34787a17c603727943ed939355a4f77da65453bba191fcaa0cf5659f9cd887ad111ea","ssdeep":"1536:J/OSJFTREuqn9SJQq4pPhGzWELEgK7T1oPhHfovWJkXkIq2781BjaW+7x2fQDCDL:JDJFNESJybl7QAL8XaZ78fXZaG","tlshash":"53441758b3ce043a53b703a9a93a5f00f878c633c6068150b5ad6fa37ff5d445a27a9d","first_seen":"2026-07-07T03:03:14.844871Z","last_seen":"2026-07-07T03:03:14.844871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/__click","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.797Z","timestamp":1783393356797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"kind\":\"render\",\"ok\":1,\"why\":\"\",\"path\":\"/webapp/en/quick-recharge\",\"vid\":\"6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWYXwdT2xC%2BW0%2BCQgSTgF%2FsNMRg8rI4zFe5YO0CqaLCjwBdO5eZDHOR%2BTq%2BAvA0v5OOfO9XsmICqZY0vxTzP1%2FtfbWJPXQja2My2%2BJLoqZCaJM86SRKkHAijeREzRlx%2BNt0QiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1739c7ff8bd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1249,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.tiktok.com/i18n/pixel/static/identify_b8133453.js","fqdn":"analytics.tiktok.com","domain":"tiktok.com","tld":"com"},"ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.211Z","timestamp":1783393357211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktok.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:EB:BE:51:46:14:51:C9:7D:1E:60:F3:37:13:C4:8C:34:CF:B7:EF","sha256":"05:B2:3F:E8:A1:ED:CE:46:2F:23:17:84:3D:34:79:DF:7B:99:43:04:87:15:44:9D:20:43:54:12:03:0F:92:E5"}}},"request":{"raw":"GET /i18n/pixel/static/identify_b8133453.js HTTP/1.1\r\nHost: analytics.tiktok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nCookie: _ttp=3G9otB5FRJmIlGCx9HDGSTyydXk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-tt-logid: 20260615122712E5A6857F7F8820527BE3\r\ncross-origin-resource-policy: cross-origin\r\nx-tt-trace-host: 0111dff6714d0e8cab3875e2fe8e83bc49e0b33604fce399710e46797c09ec9912b393cbb5dcb4c0179a7ab75daa55f470447fd819442895b18615a423231740b196d43edb658d5abab0dd0a2e4553101df7a6443e8f7897943d13781fdd68de69\r\nx-tt-trace-id: 00-260615122712E5A6857F7F8820527BE3-2E5155CB43FF84D8-00\r\ncontent-encoding: gzip\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\ncontent-length: 39866\r\nx-cache: TCP_MEM_HIT from a23-36-79-21.deploy.akamaitechnologies.com (AkamaiGHost/22.5.4-e2b2230ea5a6543481b6c2e5e3518506) (-)\r\nvary: Accept-Encoding\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0, inner; dur=51\r\nx-akamai-request-id: 30a60ef4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155651,"size_decoded":40792,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"af5fd9d815364404d13c5c3c4f4227cf","sha1":"8382572d45a0b826d73605c32cded16833bb383b","sha256":"c222a1fcf344eb3ba3ad51666992a44f004a5f7e8531e05e5eb253312134fc79","sha512":"7ab2430a8ec59770a50fb62ba8383744b915515111f6f77e22a92cb6c22a4e76f5f8159bfd76d3934d706942b72fb7019f8140ba35adc0f3ec18b497b4a39cab","ssdeep":"3072:RFYSFOU03o4PwjhIBVT39uwZCsJLErU0iAh:PLFXhKVT8wZlLaU0b","tlshash":"b3e3a7b77a40bb2771b13b088e1ae28fafdc9c56dc48908c97e7c8db5c60921607d759","first_seen":"2026-01-08T17:14:42.21812Z","last_seen":"2026-07-17T13:10:59.079412Z","times_seen":1669,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gum.criteo.com/syncframe?topUrl=dujaselcmpe.click\u0026origin=onetag#{%22bundle%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22cw%22:true,%22optout%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22origin%22:%22onetag%22,%22tld%22:%22dujaselcmpe.click%22,%22topUrl%22:%22dujaselcmpe.click%22,%22version%22:%225_46_0%22,%22ifa%22:{%22identifierExtractor%22:{%22origin%22:0},%22value%22:null},%22lsw%22:true,%22pm%22:0,%22requestId%22:%2291656bc5-0f97-456c-a970-55abe95ff84c%22}","fqdn":"gum.criteo.com","domain":"criteo.com","tld":"com"},"ip":{"addr":"178.250.7.145","port":443,"asn":44788,"as":"Criteo Technology SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:40.836Z","timestamp":1783393360836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.criteo.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 04 Jun 2026 00:00:00 GMT","end":"Wed, 02 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:4B:07:9E:CD:CF:2D:83:A3:1D:ED:D5:4E:02:D4:90:A2:82:AA:EE","sha256":"9E:46:CF:35:AA:C7:66:65:1F:59:29:7C:83:F9:E7:EE:DA:95:0E:CA:77:6A:6B:AF:EE:06:86:74:98:7A:5F:5F"}}},"request":{"raw":"GET /syncframe?topUrl=dujaselcmpe.click\u0026origin=onetag HTTP/1.1\r\nHost: gum.criteo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 07 Jul 2026 03:02:44 GMT\r\nserver: Kestrel\r\ncache-control: private, no-cache, max-age=0, must-revalidate\r\nset-cookie: uid=9b6d6771-61d1-450f-af0d-edbfba0643b7; expires=Sun, 01 Aug 2027 03:02:44 GMT; domain=.criteo.com; path=/; secure; samesite=none\r\nx-robots-tag: noindex\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nserver-processing-duration-in-ticks: 234159\r\nstrict-transport-security: max-age=31536000; preload;\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":12958,"size_decoded":5489,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12457)","md5":"8f73cc1f1b83c9e602eaad598c4647c9","sha1":"6970110908af0d657e34d29e1f5fd134380d2863","sha256":"3983aa60e6e898c9915a9c367c55811f970ae188585714384029334039deea7d","sha512":"bc99d16bf54f1dc83be01a393fed4a9a44d95b87606e458a00743fb24f2a59a1de7e32e4f398f4ff6bb59dab57e0bce04e7f0d0e3866365c44ef935c32fa981a","ssdeep":"384:A9zAkRQYxhk2YZKnKWjKMVKHDCXK/vmeKCXyXKkN:qRQYxhL/ODC2GF","tlshash":"e642a5caf6e3b014425391b0423f5d0ee33e7968680981acb869cdd12e7d64e5637bbc","first_seen":"2026-01-14T12:46:50.222084Z","last_seen":"2026-07-15T03:01:18.36372Z","times_seen":517,"resource_available":false,"data":null}},"time_used":3678,"timings":{"blocked":-1,"dns":34,"connect":28,"send":0,"wait":30,"receive":0,"ssl":3585},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/en/quick-recharge","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T03:02:36.176Z","timestamp":1783393356176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/en/quick-recharge HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WC0bIdrlDspNCpmlEc5dNdCqj5hClDF5NbxdG%2Bx2plXUWhuZCJ81BJEPJv0lQF4vvjc6axhfN9pc47ym43DPtXl4tTMYIYgwu5mVouo6Z9kSABAA7xNd9Wtxd7Ts2chr7o11xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7c188e723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i\r\nage: 172\r\ncache-control: public, max-age=60, stale-while-revalidate=604800\r\nlast-modified: Tue, 07 Jul 2026 02:59:43 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783393183619\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":73536,"size_decoded":22508,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64256), with no line terminators","md5":"6f85f99a57a60f05feac05451e3a73e1","sha1":"2145b653864c8ffa515d99ed876119d45825548d","sha256":"e75f43996ebec9eb67cb83fb299e942ea106f92a9651022814e4b32f0ae5f3dd","sha512":"ff95b56716b99372851d73b6de346913036807c1e528b7b6e66a1775667670b84659b1cb6321ef744557fa25edbe9236964366f8493479537295d5729cd7dc39","ssdeep":"1536:L/OSJFTREuqn9SJQq4pPhGzWELEgK7T1oPhZZ2:LDJFNESJybl7u2","tlshash":"75732ab1b3d1243463e38864b07f6b45b0718b83ce0a8594c95aed617ce8e974677eec","first_seen":"2026-07-07T03:03:14.846912Z","last_seen":"2026-07-07T03:03:14.846912Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dujaselcmpe.click/webapp/static/media/cc-gpay.13c2633fad5a00954ea3556fe54ba8e5.svg","fqdn":"dujaselcmpe.click","domain":"dujaselcmpe.click","tld":"click"},"ip":{"addr":"104.21.89.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.704Z","timestamp":1783393356704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dujaselcmpe.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:00:05 GMT","end":"Sat, 26 Sep 2026 23:59:45 GMT"},"fingerprint":{"sha1":"E7:DA:BD:E5:7D:09:7D:91:D4:7C:63:A1:8E:23:83:15:DB:51:7E:30","sha256":"21:33:2E:65:DB:0D:C2:8D:FB:5A:69:06:51:06:A8:9C:8E:16:44:3B:D4:14:26:54:25:1C:BA:58:7F:96:BB:07"}}},"request":{"raw":"GET /webapp/static/media/cc-gpay.13c2633fad5a00954ea3556fe54ba8e5.svg HTTP/1.1\r\nHost: dujaselcmpe.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/webapp/en/quick-recharge\r\nCookie: __om_vid=6c6e7eb7-ba99-4fb9-93e4-f23f2432137a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y8vPM7Z49fXDrdwyY6C3jhk5l6ZcwwDNjri6l%2FYatyJ6J7KiOlZHS6QcQyHBPxwS5oNCTlVzvnYc%2B1JQS0e6Wz6p0ajPSXvxyLCBXmPvzl%2FqmaX1cdlueCzie66pudBEF6douQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739c7f68b1723c-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 41457\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:39 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083813084\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2642,"size_decoded":2004,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"192928058258bfd16d50e7862cda352e","sha1":"9425961bc3de4c481cdbf971478be0aac00850e2","sha256":"12b202bf544bcf07c2a1518593744311d84ad54b4efba0e9c6130afa89e0fa63","sha512":"8d82a16a23a03c202d7b18c2a1a7c77a358e3970c88d35b2161fc5d9df8dcce3360171e4ad6ef59b0c1ebd14e20b3c9b233bd58bdf3de94601e3b3c545ad6f6f","ssdeep":"","tlshash":"7d5174ea7055f2c5ca07f7e0e03b5c3a1a69bcac3781c28d8580b241d6555ad9ba8c97","first_seen":"2025-06-10T12:35:48.062667Z","last_seen":"2026-07-07T03:04:05.439056Z","times_seen":13,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"dujaselcmpe.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"dujaselcmpe.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ad.doubleclick.net/ccm/s/collect?auid=75140856.1783393357\u0026gtm=45He6711v898604534za200zd898604534xea","fqdn":"ad.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.178.38","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:36.902Z","timestamp":1783393356902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.doubleclick.net","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:39:02 GMT","end":"Mon, 07 Sep 2026 08:39:01 GMT"},"fingerprint":{"sha1":"8B:08:74:EE:3A:0E:3D:8C:8C:E5:F3:F8:AA:D6:EE:D4:F8:57:4D:C9","sha256":"78:9E:7D:02:45:C8:CA:B3:72:F5:0E:D9:BC:13:93:0A:BD:57:1F:95:C1:06:FF:38:FE:48:D1:C0:D2:82:AF:BA"}}},"request":{"raw":"POST /ccm/s/collect?auid=75140856.1783393357\u0026gtm=45He6711v898604534za200zd898604534xea HTTP/1.1\r\nHost: ad.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://dujaselcmpe.click/\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 07 Jul 2026 03:02:36 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\ncontent-type: text/html\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://dujaselcmpe.click\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":545,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":2,"connect":37,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.tiktok.com/api/v2/pixel","fqdn":"analytics.tiktok.com","domain":"tiktok.com","tld":"com"},"ip":{"addr":"23.36.79.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dujaselcmpe.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:37.227Z","timestamp":1783393357227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktok.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:EB:BE:51:46:14:51:C9:7D:1E:60:F3:37:13:C4:8C:34:CF:B7:EF","sha256":"05:B2:3F:E8:A1:ED:CE:46:2F:23:17:84:3D:34:79:DF:7B:99:43:04:87:15:44:9D:20:43:54:12:03:0F:92:E5"}}},"request":{"raw":"POST /api/v2/pixel HTTP/1.1\r\nHost: analytics.tiktok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1423\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://dujaselcmpe.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dujaselcmpe.click/\r\nCookie: _ttp=3G9otB5FRJmIlGCx9HDGSTyydXk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1423,"data":"{\"event\":\"Pageview\",\"event_id\":\"\",\"message_id\":\"messageId-1783393357214-4504006978773-CAK6Q7RC77U1E8B1DB1G\",\"is_onsite\":false,\"timestamp\":\"2026-07-07T03:02:37.214Z\",\"context\":{\"ad\":{\"sdk_env\":\"external\",\"jsb_status\":2},\"device\":{\"platform\":\"pc\"},\"user\":{\"anonymous_id\":\"01KWX8E3CSE4TJT5JP4F5FS3WS_.tt.1\"},\"pixel\":{\"code\":\"CAK6Q7RC77U1E8B1DB1G\",\"runtime\":\"1\"},\"page\":{\"url\":\"https://dujaselcmpe.click/webapp/en/quick-recharge\",\"referrer\":\"\",\"load_progress\":\"1\"},\"library\":{\"name\":\"pixel.js\",\"version\":\"2.2.1\"},\"session_id\":\"4ee60f1a-79b0-11f1-80e8-02001701d8ba::9R23qzQODgrjjiM6M_JZ-CAK6Q7RC77U1E8B1DB1G\",\"pageview_id\":\"4ee60f1a-79b0-11f1-80e8-02001701d8ba-UIg9Z.0.0::4ee5eca8-79b0-11f1-80e8-02001701d8ba-CAK6Q7RC77U1E8B1DB1G\",\"variation_id\":\"default\",\"csid\":\"1783393357212::U0jQu6lA_XgMlKZeyiPi\",\"page_csid\":\"1783393357213::2ifl0XFUA9TYIyjPSgG7\",\"csct\":1,\"css\":1,\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"_inspection\":{\"vids\":\"\",\"inter_id\":\"1.-5092.0::0.0.0.0::0.0.0\"},\"properties\":{},\"signal_diagnostic_labels\":{\"raw_email\":{\"label\":\"missing\"},\"raw_auto_email\":{\"label\":\"missing\"},\"raw_phone\":{\"label\":\"missing\"},\"raw_auto_phone\":{\"label\":\"missing\"},\"hashed_email\":{\"label\":\"missing\"},\"hashed_phone\":{\"label\":\"missing\"},\"raw_eb_email\":{\"label\":\"missing\"},\"raw_eb_phone\":{\"label\":\"missing\"},\"hashed_eb_email\":{\"label\":\"missing\"},\"hashed_eb_phone\":{\"label\":\"missing\"}}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-length: 0\r\naccess-control-allow-headers: Authorization,*\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,DELETE,HEAD,OPTIONS,UPDATE\r\naccess-control-allow-origin: *\r\nx-tt-logid: 2026070703023796C42F4CB945C59D1C8C\r\ncross-origin-resource-policy: cross-origin\r\nx-tt-trace-host: 01a4cc430180ad9be9e8bde30ccd3e74c461611ffeef39939af3930dee32aaec1f2f01635cf64f67a734d16bf75ca8b577dedcaeb4a5c582e50a8fc992486832f8ec2f08964c7ddf60618e84ffb983ac00a2c43fb21aa5808b8b138768a353e99b38add1decdc0f66fc1f532d75a77844d\r\nx-tt-trace-id: 00-26070703023796C42F4CB945C59D1C8C-0EF0317E8CB7763A-00\r\nx-origin-response-time: 40,23.3.12.97\r\nx-akamai-request-id: ff222d81.30a60ef7\r\nexpires: Tue, 07 Jul 2026 03:02:37 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Tue, 07 Jul 2026 03:02:37 GMT\r\nx-cache: TCP_MISS from a23-36-79-21.deploy.akamaitechnologies.com (AkamaiGHost/22.5.4-e2b2230ea5a6543481b6c2e5e3518506) (-)\r\nx-cache-remote: TCP_MISS from a23-3-12-97.deploy.akamaitechnologies.com (AkamaiGHost/22.5.4-e2b2230ea5a6543481b6c2e5e3518506) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=dyn\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=87, origin; dur=40, inner; dur=30\r\nx-parent-response-time: 122,23.36.79.21\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":3279,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}