{"report_id":"a08a2727-eb66-4cce-aaf2-18bff78bc2fb","version":6,"status":"done","tags":["suspicious"],"date":"2026-02-14T18:05:32Z","url":{"schema":"https","addr":"zumaabudhabireserve.com/","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"104.21.74.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zumaabudhabireserve.com/","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"title":"Zuma Abu Dhabi Restaurant","dom":{"size":27250,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14199)","md5":"62d76cf5a7ad3aec4d47ca30f0370c8a","sha1":"098397799ff97c696ecd3fcd0c998c03920c58f4","sha256":"2dac547918316269e647cfe6c31d104138aeb135c6ec81b479a8fe5a83533827","sha512":"b70a935160e4272ac273c323bade42ab095ea8865836eee27caa42179f3b3fcb8290e937e49ca7ca10963eee0e9c0324e7551c8621b4bc5c687acbcb3f900fdb","ssdeep":"192:4Q1fGtTTQBsDofbjK9y2qyKlHDP7KxEepUfw7PHmJrj8uFGUUT4l:1CTQzbe05Hs/PmhQucP4l","tlshash":"e7c27150a4201e7a2d23aea2a2dcdf2cd06bd1c6c8eb599d7fee004a07c6fd51f61345","dom_hash":"domhash325abd0b95239a52b82294e800e86018","first_seen":"2026-02-14T17:37:29.121689Z","last_seen":"2026-02-14T18:05:35.322664Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"zumaabudhabireserve.com/","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"104.21.74.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T18:05:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"zumaabudhabireserve.com/static/js/main.4dbffe8a.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"zumaabudhabireserve.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-11","domain_rank":0,"first_seen":"2026-02-14T17:37:20.178243Z","last_seen":"2026-02-14T17:37:20.178243Z","alert_count":18,"request_count":16,"received_data":3033553,"sent_data":7294,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"adcbtemka.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-30","domain_rank":0,"first_seen":"2025-10-10T09:38:26.740784Z","last_seen":"2026-02-12T21:27:49.564879Z","alert_count":0,"request_count":1,"received_data":595,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.142.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-08T22:26:16.428236Z","alert_count":0,"request_count":2,"received_data":1012,"sent_data":1897,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-08T22:20:44.026892Z","alert_count":0,"request_count":1,"received_data":402182,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"zumaabudhabireserve.com/","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"185017c3769c350968cdd6c632bd0056","sha1":"393931465e602b730a9dff404140551f357f93f0","sha256":"a9f0e435f602303716e42a5a674d660413eaa4c4c4eb4a77a80471a605a90e31","sha512":"11cf1a7b05a178f2252b79c5f81d23264a5e3dba59cf5428f094aa67d9d667c2600f2a62de04cdb0295f644c2995aa59ef9526495617f1692ba07e4b26fd037c","ssdeep":"","tlshash":"75c092f83a879ca196ef4f920fafa204245123159a903a380926b2892663d636296d94","size":131,"data":"","first_seen":"2026-02-14T17:37:29.154493Z","last_seen":"2026-02-14T18:05:35.331534Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/static/js/main.4dbffe8a.js","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4be0768f1a9f51a620cb9c146affc30b","sha1":"a4fc77eb830fa733e5d4bc641e5ca8aacecf54c8","sha256":"6b6fc102831bd55ad82f505d8a6eab25caa635695d857ff2b2646d8efca599cd","sha512":"068771a9bc98817c240692dbe9cdb1aa19d543cc3aaa66e7c2a10cac22fd42e7d0163e9cf10dc7b153e1c347f5bc3c484aefb1428e94378409df8a9958acb0ec","ssdeep":"6144:ti26RBWHUz0o9z+n0lWtI6JvquQEiuNgyPPuXEltk0JXt328TR5lZOeixJGEbj:cxupTgAPuuXJXt35TR5lZOTJGEbj","tlshash":"30d44bc97141f5a5abf301a2407f450ab33e590e780dc864b279fcce78a454aa2b7f79","size":598771,"data":"","first_seen":"2026-02-14T17:37:29.131755Z","last_seen":"2026-02-14T18:05:35.323376Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"zumaabudhabireserve.com/static/js/main.4dbffe8a.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17352608015","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac1d97e5f3f426e68d4f5568f88a600e","sha1":"a47a7a82e5a98cb9cae91cc4bc185d7c0c8742a4","sha256":"745de7aad9e28e0f806872857efe7ec2df0d97d3db5adaf22e393b9a6aa3365b","sha512":"f3b3b97c2895599d632db40889481e4db54443030082da8a5a1725d82dca08281bc70c451941a498f747c747b2dd6a387776658a891f2bcd0c6af7f97457a000","ssdeep":"6144:vjNMmuYRpw8UENXaP8gM7SgP14j9Vk74Bqq471:5juYRkmKP8So4BD2","tlshash":"8b8419dd73d674225393a478403f018ba57b68a2f48cc899f18acce42d74a9a4277f7d","size":401578,"data":"","first_seen":"2026-02-14T18:05:35.329074Z","last_seen":"2026-02-14T18:05:35.329074Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zumaabudhabireserve.com/static/js/main.4dbffe8a.js","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:09.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /static/js/main.4dbffe8a.js HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:28 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698c8ec4-922f3\"\r\nexpires: Sun, 15 Feb 2026 05:36:56 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1693\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gFte40ABlFe2%2B58P35RXAEf%2FK5g8XKei1ADFqVXTsFZ0fCkq%2Fd93PsbhEBoi9r6YIcmVs2pOetn5XrOp3MgmyygoflszyIysuwOam9%2B7%2FD8k2LguWQnO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7df81945aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598771,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"4be0768f1a9f51a620cb9c146affc30b","sha1":"a4fc77eb830fa733e5d4bc641e5ca8aacecf54c8","sha256":"6b6fc102831bd55ad82f505d8a6eab25caa635695d857ff2b2646d8efca599cd","sha512":"068771a9bc98817c240692dbe9cdb1aa19d543cc3aaa66e7c2a10cac22fd42e7d0163e9cf10dc7b153e1c347f5bc3c484aefb1428e94378409df8a9958acb0ec","ssdeep":"6144:ti26RBWHUz0o9z+n0lWtI6JvquQEiuNgyPPuXEltk0JXt328TR5lZOeixJGEbj:cxupTgAPuuXJXt35TR5lZOTJGEbj","tlshash":"30d44bc97141f5a5abf301a2407f450ab33e590e780dc864b279fcce78a454aa2b7f79","first_seen":"2026-02-14T17:37:29.131755Z","last_seen":"2026-02-14T18:05:35.323376Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"zumaabudhabireserve.com/static/js/main.4dbffe8a.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/1.webp","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /1.webp HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/1.webp","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /1.webp HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 260630\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:20 GMT\r\npriority: u=4,i=?0\r\netag: \"698c8ebc-3fa16\"\r\naccept-ranges: bytes\r\nage: 1693\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OIfkMhnqzpyd%2BFFa0XipK7lyhvjso0YSN93ps1Jw%2BFM%2FC6DUWnMmkYBl9%2BD9ukwUbmOrq2PWuIxMK%2Fsu3K2z9vkV4xcJH8SsVU%2BPPb%2BGo8Yb%2FhEmpKhb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7df9de31aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260630,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"185ddf211d053c9cff5f75ff759ba06d","sha1":"bfa525e2ec01b51d02cc8c64e24be818750b0d01","sha256":"5857fc51410e58899aa13d572eb9bdf3cd9284e5edf7b2ed8d3fe8b30fd78444","sha512":"1907d5ead617bcb49b4f0c8609ad321fad38754411b0466747ce150c34e70831e69fda5008aabd68b76b781694771ec6f08f73adcb75ca95e7a60d27fd27ca3a","ssdeep":"6144:0iyVxoTzyFAG/ylKYGT0zcwXdbyKXfII9GeA:jOmEKcYGwVXdGOQIzA","tlshash":"894423ceafd51ebaf292cc5a3aa07fd0a2a3b3589c10353c7f6405728b4a1549f709c5","first_seen":"2026-02-14T17:37:29.148702Z","last_seen":"2026-02-14T18:05:35.324491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/main.webp","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /main.webp HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 376184\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:24 GMT\r\npriority: u=4,i=?0\r\netag: \"698c8ec0-5bd78\"\r\naccept-ranges: bytes\r\nage: 1693\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RO4toOCSURs%2F4YxcdFnj8jorHsYtPxLq0Ul4MoQeKKDyhRFqN12WXFLNh1B8Ylr0L5c5p8%2BNZEylzuFkOjAdL6vG%2BkbJmlYifKBUsbpifqXz4B9LN5c9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7df9fe91aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376184,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x878, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a6fc9a95478e6f9f89898c30885308c8","sha1":"234f58eeec1a00c40ad8d5d5159ff8fbb6a8a804","sha256":"3f955bade82cfdf157fcc8ef1ab46b88eccec2a76f1eeecb518b3e780b1b1bb7","sha512":"5567f2189891e0fce2dbbead0222900f1d4442ee6294c7752dcbea98d1020902ac84b2d8370dba0172a3e5ab6ad73accc30f04a1e75f29613c6a1abb53a89894","ssdeep":"6144:yt1jwKlB5kng7Rb0kioHieIhGEWwF3QbfscJuxXzN1y7WIfxF+bcMOTmAO:ytqKxGgFb0kiFPhL8fscJIXzPy7WIfH4","tlshash":"668423fe464d7a2cc786e733a792a29fa554fecdb8fd96e390f348010a80e681d51704","first_seen":"2026-02-14T17:37:29.143136Z","last_seen":"2026-02-14T18:05:35.325056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":60,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"adcbtemka.cc/","fqdn":"adcbtemka.cc","domain":"adcbtemka.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adcbtemka.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 10:11:58 GMT","end":"Thu, 26 Mar 2026 11:09:37 GMT"},"fingerprint":{"sha1":"22:89:8E:82:94:C9:5C:4F:5B:DA:64:5C:CB:8B:B0:4A:4A:A1:C2:4A","sha256":"97:82:B9:0F:11:4A:28:9B:F7:A5:17:E7:FD:BA:5F:4F:DD:2D:B9:C5:B6:1F:F1:47:41:EA:65:FD:CC:DB:AA:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: adcbtemka.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zumaabudhabireserve.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: IShmBArKZeod5qQ7O1wsQQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 14 Feb 2026 18:05:10 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: c3VS67oPd5B7fNAWFrnwPQKpA+M=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=y8z6hI0tAwRFK1Z9ndPyLmcWhZBzzufPSTxh5B12k7E6sDnqkSq7MJ4ll2mh%2FpEZipiKt%2BYc0UdzKKyt0xp%2Bsvx2nevfXfYwxS61PTWUAu2kYLY9HmLPs%2BZxKmcrhjU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9cde7dfb5df9c124-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":13,"dns":55,"connect":63,"send":0,"wait":75,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/logo192.png","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:23 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698c8ebf-14e3\"\r\nexpires: Mon, 16 Mar 2026 17:36:57 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1693\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2BJBI7OG0GOOl3k1FATgax47JtSc%2BloAExKNkWN%2BFaJcxocVNa2Zal1JkPYTLvptuQWcQA%2FojPD6ymYEibh19l5ySNahs87hRo9odmz%2FMzH1eO1uRVdH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7dfac956aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-08-16T20:24:38.474954Z","times_seen":14131,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/favicon.png","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:22 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698c8ebe-1090\"\r\nexpires: Mon, 16 Mar 2026 17:36:57 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1693\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92hHsWZrBdI1ZDkXeHVSC7%2BrckTdulyhgcwCIEtiYPMlydIdDEFoU251NjAL%2FTHzThnFULHde1MG0A9kIfqXr2hJOdg7urkmEY3YROW8xxV6c4xZbRQg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7dfac958aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, interlaced","md5":"640f9afd2ca965e9ab7786018a8b8ce9","sha1":"30b90722cadacb546ef639d4792f871842f2c153","sha256":"1a2fc42c96610dafa4bb93c76de7412420126114b16376fb04f40e0d8fc31da0","sha512":"0626b11d6a63be572554198ec11131ae6c58a9442b703807d63969c92fa171f694d7aa7e758c4521ae418d35646a24ba56fbfc6709d6e0ba04fd282e1619b272","ssdeep":"96:hllcHitlIxv9vk7C1+I4wWHLihk/xTP2sxicRkSdlO:CIIHUCD4waVtOSdw","tlshash":"e1915d49e941c502114d978524ff9907463b5980d294ad6c69efc14f8a20db17c3e7df","first_seen":"2026-02-14T17:37:29.146582Z","last_seen":"2026-06-28T11:41:26.986424Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T18:05:09.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:09 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBuvSerHEkIM3xdBtlHIRfvjbjALUZaEzqetdgpC4o%2B5oWO7BChFoLcha44awFtDZKF0DbuugQlq8aicATl1x4PuGFzwxq2RiPxw0W1IsUN7COM%2FzoYV\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cde7df668424eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1008), with no line terminators","md5":"4f1bf749632005051ac6fc8af589cf3e","sha1":"c4698c8e5139f97193665f1c269bc5c46a626392","sha256":"d94a0b97ebe857d6781a4543d3537d58fca89881018a5cc12c77e0a4a9a66180","sha512":"0d03a091a6d636e07a54b3f3ffae2913032e733bdb0bcd5e7bf2c5a22f8676768ce1d49545f49e05c6cfd9c8d8232e0a622c68df6ba782011785893e094a41dd","ssdeep":"","tlshash":"031121a58c02c48c977047a32eb6f50cd40a700cad91bc20acae24ae5de1fe38a41f26","first_seen":"2026-02-14T17:37:29.138775Z","last_seen":"2026-02-14T18:05:35.326775Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":66,"dns":40,"connect":8,"send":0,"wait":88,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/static/css/main.bade72bc.css","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:09.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /static/css/main.bade72bc.css HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:27 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698c8ec3-1665f\"\r\nexpires: Sun, 15 Feb 2026 05:36:56 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1693\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k74B5CuTRs7FZnxiQjdJgbovrjUTlVdMZKb4MCgPsr0PbTEKbjixh4R%2BknBAaH7MFafU%2B1pnQr2qbbZVIUBKjyiwFnf%2Bd%2F0dXgsabSEl%2BjXq1IYbOt%2Bx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7df81950aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91743,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"775f44dd0eaa412d9f4671ece75c4575","sha1":"0ee2adc8ecb3ca7e39914fe88371eea42912d278","sha256":"1ffc98da03bad238d1369f06b49a32b53dcb411bfbee7d7c4c2c1c91304f7f2e","sha512":"9981726ca5602bdf2993544a7721ecf8098b1e9dc813baa58c9fcb01263ffb8e816bfb00c9423a3bcad9af9525a287c405ad316cb9a0712796b37c21f6d361ae","ssdeep":"768:VFggiNN01Mwhw26ZTVDrE2drkjGyXibfL3bH19TSowv7FONGBwApyS+tJOrY7rt:VFggv6Z502Fkj74LbH19TSoGT5YS+tft","tlshash":"2e93ea0847c4107abc13d8f2d1d86b98e12eb1c4dd6a1bfd7c8a754a92c27ea0b77e51","first_seen":"2026-02-14T17:37:29.124994Z","last_seen":"2026-02-14T18:05:35.327366Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/3.webp","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /3.webp HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/3.webp","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /3.webp HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 528106\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:21 GMT\r\npriority: u=4,i=?0\r\netag: \"698c8ebd-80eea\"\r\naccept-ranges: bytes\r\nage: 1693\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I2fSUSK3OaHFyYg0XHWi5yAtYhtzA%2F7RR19u%2BQk1oxdgtz%2BBjIz9dKKhSUj3o09b7iMltnTQPMzmjEuyfhaOmp1tpwbfWAmrtTduaVN4sI7YwFcySeU6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7df9de44aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528106,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e2c9ea16f02c592f197ddbd69d42898","sha1":"6e27a2926cb6746fd88b40a858185a225ac7fee4","sha256":"83ab5c29f08e65449cff575094fccf0326f88b639682380da8d6b75b0c87823d","sha512":"98d9d3c0f09d51b4023d0e94b69573206d23c25a580fba176fa3cf1e758346e9f7506100964fa886f34fcddade68235c91b6c505a8f2828d9f9b9369dd7b8a71","ssdeep":"12288:Daf0T72ix5xcUC4skOyOgGBbBU2vsm/AvtgxdUl87xi9+DlyRZn3r5qc:Dafe72mXxmgGnUFax57xpDl8n3F","tlshash":"5eb423c50bbe6658e816df04af590e66100684d9e5c6118d8c468cbb0df7b39ce3ebb7","first_seen":"2026-02-14T17:37:29.150811Z","last_seen":"2026-02-14T18:05:43.587004Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/2.webp","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /2.webp HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 198754\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:21 GMT\r\npriority: u=4,i=?0\r\netag: \"698c8ebd-30862\"\r\naccept-ranges: bytes\r\nage: 1693\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAJDbJeAMyIfJ0iZKREiR3QDZtHRu9WIpD5TWglYdqMHLnsv2pGI89WBtBTUu0eNHvkZMjpBiWw2KDE9dKDDAKTiM87F0wGbc3IL5khKRuFAcVfnH0SL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7df9de37aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b2049d51bf9ee41cd3e926f01e28b54f","sha1":"cde02f3325f12d1ffcee15858edae1a817c6240f","sha256":"aa737b3cc6f6bc8b2793a9b43854984fef515786c09144be9f2d1b44644d47db","sha512":"a290add742db8433667fcccc2040e1fec16e00cb2fc0d261d9f00ccfbfaac59a14676b39820dd0e5bbf6de9be85c003cccb85ec9ea879c1243c717fff481a0f6","ssdeep":"3072:qQJdTmEnWTbR+unKLYTGVcQE0u3F/nVHAuO4geLl2t1itE8x2oFPKYjq0MX3fc:qQJdf0R/nKDVcpR3F/VKeRx9q1U","tlshash":"a1142217b2414edb8f3c7c2a47149e061790413b2e5830407da732bf95bffeba60559a","first_seen":"2026-02-14T17:37:29.136348Z","last_seen":"2026-02-14T18:05:43.583738Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fzumaabudhabireserve.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1489502431.1771092310\u0026dt=Zuma%20Abu%20Dhabi%20Restaurant\u0026auid=1492655669.1771092310\u0026navt=n\u0026npa=1\u0026gtm=45be62b1v9226342903za200zd9226342903xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115938466~115938469~116988315~117384405~117527105\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17352608015\u0026tid=AW-17352608015\u0026tft=1771092310315\u0026tfd=897","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fzumaabudhabireserve.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1489502431.1771092310\u0026dt=Zuma%20Abu%20Dhabi%20Restaurant\u0026auid=1492655669.1771092310\u0026navt=n\u0026npa=1\u0026gtm=45be62b1v9226342903za200zd9226342903xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115938466~115938469~116988315~117384405~117527105\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17352608015\u0026tid=AW-17352608015\u0026tft=1771092310315\u0026tfd=897 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zumaabudhabireserve.com/\r\nOrigin: https://zumaabudhabireserve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://zumaabudhabireserve.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":111,"dns":1,"connect":21,"send":0,"wait":30,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fzumaabudhabireserve.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1489502431.1771092310\u0026dt=Zuma%20Abu%20Dhabi%20Restaurant\u0026auid=1492655669.1771092310\u0026navt=n\u0026npa=1\u0026gtm=45be62b1v9226342903za200zd9226342903xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115938466~115938469~116988315~117384405~117527105\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17352608015\u0026tid=AW-17352608015\u0026tft=1771092310315\u0026tfd=897\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fzumaabudhabireserve.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1489502431.1771092310\u0026dt=Zuma%20Abu%20Dhabi%20Restaurant\u0026auid=1492655669.1771092310\u0026navt=n\u0026npa=1\u0026gtm=45be62b1v9226342903za200zd9226342903xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115938466~115938469~116988315~117384405~117527105\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17352608015\u0026tid=AW-17352608015\u0026tft=1771092310315\u0026tfd=897\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17352608015","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:09.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=AW-17352608015 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 18:05:09 GMT\r\nexpires: Sat, 14 Feb 2026 18:05:09 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 136389\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401578,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"ac1d97e5f3f426e68d4f5568f88a600e","sha1":"a47a7a82e5a98cb9cae91cc4bc185d7c0c8742a4","sha256":"745de7aad9e28e0f806872857efe7ec2df0d97d3db5adaf22e393b9a6aa3365b","sha512":"f3b3b97c2895599d632db40889481e4db54443030082da8a5a1725d82dca08281bc70c451941a498f747c747b2dd6a387776658a891f2bcd0c6af7f97457a000","ssdeep":"6144:vjNMmuYRpw8UENXaP8gM7SgP14j9Vk74Bqq471:5juYRkmKP8So4BD2","tlshash":"8b8419dd73d674225393a478403f018ba57b68a2f48cc899f18acce42d74a9a4277f7d","first_seen":"2026-02-14T18:05:35.329074Z","last_seen":"2026-02-14T18:05:35.329074Z","times_seen":1,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":94,"dns":0,"connect":9,"send":0,"wait":34,"receive":25,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/2.webp","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /2.webp HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/logo.svg","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/logo.svg","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:23 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1693\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spzKswiC9I5lW8Hkl%2FuyA0KAiU4QcQUhWAcAfjukZCP%2BkNgIe17jKWn%2Bsdbc01eeWLxbUw%2Fk5FP9dE1A0uo5cREZA9xxX2qd2EfIdivsgbbGmSpCsQTe\"}]}\r\netag: W/\"698c8ebf-3f7\"\r\ncontent-encoding: br\r\ncf-ray: 9cde7df9de2daa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"78a845c9a6949ed786d48882a9c4a587","sha1":"9c251357ae22023d411345d8a6fc1b8afb1bfe91","sha256":"3dc9b94037e3fa8e8f9f834561c27884cb7d7c580e60a7073414fa37dbd6b12f","sha512":"95e0f9aaf1e1b74077bcb3c4ffd6002a35068fc291b502a9aaf13d4dc1d3509a5ecf35faacc159aef2e172b23d2b34f545f52783d6baab7ff6478cc2acf8b579","ssdeep":"","tlshash":"24110ee833acc274ab0cfbad853c2436452aa5f73c74900de7e6e21614bc69f4c28645","first_seen":"2026-02-14T17:37:29.141001Z","last_seen":"2026-06-28T11:41:26.97877Z","times_seen":5,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/award.png","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /award.png HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:22 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698c8ebe-dd14d\"\r\nexpires: Mon, 16 Mar 2026 17:36:56 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1693\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OZ7moWPKM1oAoXUaWUEoxKq5B2U4GX1OsJfV3T0uIaoG0muu0dmGeEuIF%2BMEH%2FeAR4B07rnvKXKb%2BXH8xPlutzVvW46bI%2BiSgJc1UKy%2FNMyNI%2Bu8V0s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7df9fe93aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":905549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 867, 8-bit/color RGBA, non-interlaced","md5":"927631e7fbea17b0884ebbf6f0a32399","sha1":"cb6a268bb14b014a6d7959e6eeabbb71d4093df5","sha256":"60a5343ad09212e342e8fd8bf3bd62e5d526749a1e39655120169b3f5a1aca76","sha512":"c95bfedaf36d86de50eae61d94b82daf111fbb5cb698970aacd2c68c824d4be457c0c34a0e80391210f3331e10c90844768c5e9018dbd4bfd97a442266da2778","ssdeep":"24576:RciEuUML5ci+hy/7NnISe60SMl3wGxOUSJrr:RcixUML5P4yTKrSQxOZv","tlshash":"811533a9979f8bdf2a352c7333e6121cf39ba542e4652f915c22d0d98af0c1d4837d52","first_seen":"2026-02-14T17:37:29.12762Z","last_seen":"2026-06-28T11:41:26.984619Z","times_seen":5,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumaabudhabireserve.com/fonts/Moderat-Medium.woff2","fqdn":"zumaabudhabireserve.com","domain":"zumaabudhabireserve.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zumaabudhabireserve.com/","date":"2026-02-14T18:05:10.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumaabudhabireserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:14:28 GMT","end":"Tue, 12 May 2026 14:13:15 GMT"},"fingerprint":{"sha1":"0D:7B:77:28:A1:D1:72:8E:2F:5C:DF:5A:F1:72:EB:49:D7:6A:3E:61","sha256":"3C:C8:2C:56:8D:64:D4:D4:5E:5E:42:3D:93:83:B3:13:32:68:08:59:DF:61:A9:AA:3D:3B:23:12:81:E5:0A:5A"}}},"request":{"raw":"GET /fonts/Moderat-Medium.woff2 HTTP/1.1\r\nHost: zumaabudhabireserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumaabudhabireserve.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 53820\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:14:26 GMT\r\npriority: u=4,i=?0\r\netag: \"698c8ec2-d23c\"\r\naccept-ranges: bytes\r\nage: 1693\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWgnasWBAJGTHqwabZGpTpcB%2BWa5KYnxoljielSpomMHwFIUUo7c%2Bj01yj2U%2BHGcw%2BcbffWQ6ABFyA3M6pqaYdIgbkfzAkC4XacRQW9taJkcr%2BLJCQRq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7dfa0ea7aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 53820, version 3.0","md5":"7e410815615b294be3b009bd720d565f","sha1":"525454c05af2380f8d32eefaf801b8da83f23403","sha256":"1e97f77cf7a48645114a3700a079500e1fea23203ed70e3439d2533558979328","sha512":"72cbc079557755d419731f61c6d0988e1c66ea7d9dad6f11b992885dcc62de4032dc385333ed3d77d4aa6ca744f44554dd3fac635191d5bebf483ea30359896e","ssdeep":"768:eClrM1Z7UuvPh4K0WNyX7s1z55aIDB7FnBfpI6o0b7pxNTPpSaauwRA67y:7yZIuvPpNss1zHJ97FnBfCq39pSaavuT","tlshash":"eb33028430fdc220466e72764d270023dc61649b85ee5eeee397e3af773a35a1805d6b","first_seen":"2023-05-10T14:48:25Z","last_seen":"2026-08-16T19:17:15.468669Z","times_seen":221,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumaabudhabireserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}