{"report_id":"c857c863-c509-41bc-8e4a-db2df71c3096","version":6,"status":"done","tags":[],"date":"2026-01-20T06:31:33Z","url":{"schema":"http","addr":"dtodito-gsm.com/","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"104.21.48.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dtodito-gsm.com/","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"title":".:: DTodito GSM ::.","dom":{"size":119483,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2626)","md5":"5670b56723f56bf841742130961420d2","sha1":"8b784926c36b14627ddb7e81dbfe02f7bf0681c2","sha256":"ffedeaad341294116b679be8ea687aae01eb2fc29d188c60dcf12588085e6d91","sha512":"4225a66a77f6d76f32112cacfca8e74c63311874c9b38a654838e49ff7b939ff1f8cb2edf7ec7ad761ccbae1cfb757d0f89d1bec3b4dec0539cd1cd799d30c7d","ssdeep":"1536:XQyr5mhp3dk+/8Z9Mb9W7HszvzozdnSb8KayS1JAmnsNUv8u:XQyr5mhp3d5W7Mj8dG8EaXvN","tlshash":"e2c33a229eea2867162322e366bd17177b5cd153c103ce56f6be578c4fcee80598722c","dom_hash":"domhashedb92fde2115f6f025a33d52b9909c25","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dtodito-gsm.com/","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"104.21.48.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-24T06:31:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dtodito-gsm.com","ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-27","domain_rank":0,"first_seen":"2021-04-27T18:44:31Z","last_seen":"2025-02-26T13:57:08.361651Z","alert_count":47,"request_count":47,"received_data":8214942,"sent_data":25259,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Chosen","description":"Chosen is a jQuery plugin that makes long, unwieldy select boxes much more user-friendly.","website":"https://harvesthq.github.io/chosen/","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":1,"received_data":434992,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/bootstrap-datepicker.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"241a419bd65535b6569f46797779c43e","sha1":"fedbca6ccfe569995315c4f599c981cd8f6a503e","sha256":"b56e4bcc40bb423846d02880bf196c78c4ecdaa252eeedc344f6ae0e3149df3a","sha512":"70e18bea0234d4a2b6070b36d755bc4b708e873ae8ac16f32af2cf598395b521187addf21b57f326b8a6b7087cad4caf332f6a8e06367bb46de88c326a25f532","ssdeep":"768:iT/yMzcli2Tu6VYpnUelZdOv5U3+R02WzSop3tQ1FcD0+wVYQhnFovea8:iTAlLTuNpnU1v3YtQG0+wVrhnFWX8","tlshash":"79e2968d31957915827791b4802b1303b633d8ae9c89883cbdac89d66e7dd1e21bdf7c","size":33599,"data":"","first_seen":"2023-03-07T01:38:25Z","last_seen":"2026-06-24T08:28:39.633221Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/table-cell-selector.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddd760da99520ac7aa0b7fef6c009a15","sha1":"7131c2a295f7f513165645270fd158314a6371f2","sha256":"3d07be80899e66d7ad654650529428e60c5f74c8a547bcb8cee07768651657d7","sha512":"0ab91fcd675d2b53ae9e51763b625fecf8407dc32207d239a2796a48d68b13fb746ebc99bc957443db6bd56511b65aebbd0ba022a10f2c8001c0c512e075a2d0","ssdeep":"768:fkPTsSFF+L/TU53AzhrRYDv//UgqOMFDczm1EhjAFVl9E0:fCzH+L/63UYr//UnFsm12jAFq0","tlshash":"081381c9b2d2b0b102ebb0b4403f810af277a899749985d4e236d4d1bdb998e5077f3d","size":43957,"data":"","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.027391Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/jquery.steps.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c5e9f4e84d32b7df69af7420b355e03","sha1":"14e1e287ec98e8cc0a992ee996783b0c42f9ec0f","sha256":"c9459a9e11e4c63fb7a30d2a644e80b733fc9599302ef3da8142cbe8f9d9333d","sha512":"6c4d27700dc329698a685df0e614230aaec4ac71623dd1f62068d74725d76523a891b8a6b54bae7e181e0cf7903ece75008e17b2a0d950aeeabeb3d9e716e866","ssdeep":"384:RQ5Gr3Xzu+9zb2FbYN3RSSCJ6RYVYO2o+13eX4SO9:1uRYNBSSSeJ4m","tlshash":"1f52d794f6517079b3e360a440af941fb536ee72ec044820a0d6d9747dfcea4a72bf1a","size":13857,"data":"","first_seen":"2023-03-07T01:35:25Z","last_seen":"2026-06-25T02:09:28.186759Z","times_seen":3372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4bbd3ba58771230bf38e62c5c3bed5d0","sha1":"7b008ad67335a71be2bfb2a05613f90d88141f7c","sha256":"f53eecc873c788eefc6fc33bfc61b6867965ae65f741d651b31ebadc9e75f64e","sha512":"90be97e7d876d0f0c8721ab593a9f1018e5cdde6025d88253d9e4990e2b7113b7408c460d3e0f73f154647bc9c2274d89b5edf1ef7c4a77452eb1150754a840d","ssdeep":"","tlshash":"5180003ccc2ba0822e08802e02ac00a008cfc03328fae080b028a00a0fc0b00802a3c3","size":29,"data":"","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-06T05:52:57.728372Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNF0J710V5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9ac0e8a31dba9eb84d7b00ae899d7b0","sha1":"eba1e849c67bade03401752cad85ea8255c1c63d","sha256":"f9498d9af998d4498cb7bf940f86d06e44675cc59e47e2484fbc7a899a34f93f","sha512":"dcd1cd140e3408a527a4cc27fe19e345547b4ff81c667b5a2058be8c88d5ed48130b8c39fbbc29a6c81a77084ecf2c38b9c03bb9fb2701fc91aa51976b789866","ssdeep":"6144:JxRnbh1DGvjHjUG2tonsYDfc1YgdxBX83ospS2VK7GO:RbTDwjFBns3X83Vu","tlshash":"9c941a8e73c674265396f078503f018ba57b29e2b45cc896f189cce42e74a9a4277f7c","size":434388,"data":"","first_seen":"2026-01-20T06:31:39.585104Z","last_seen":"2026-01-20T06:31:39.585104Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/popper.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33088d18ba6e6c92617c32d1e72b8b0e","sha1":"de37cafd81f1ccaeda4f8383c9099ac81bbe8ad2","sha256":"116cff9b4552900945e922c257322cc348ff57bb3f84c5fa75d91ddda3ae369a","sha512":"0f50515b51aa4d8784f602f50f8c0133a5b33acb53c67b0a573e2c2fa48f2f82154c75b601a66ad4123ed86f374ee2427f738ebce11a66e97dd6f1325ea9e7ed","ssdeep":"384:f5LFrVVVnCQvIR/CFU4hHPV4kdxXvYqo2D75zCx+vI2am3MxGpGTgd/9jt9+Db90:hNVVVnyiU41xXvlD7wx+v0xyGTgnZO90","tlshash":"2992a2cc3294b06647e791a7a07f960eb2339875650e9410f299f2e97c30ef9913bc79","size":20497,"data":"","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.019383Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/includes/js/imei.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3b0647045299fd93a560685c5caad8e","sha1":"801634575911a1fcb2355999fbcaecee4532dea9","sha256":"202f5dbd5c191f7400b36873296bac72138fc1e8222815cd955cf4b7254fce1e","sha512":"ed847711b100bcbb0111113f2231132651641beba6ec7b741f3588e01cf5e32b5d6575bc13ebe6c76e23026fc468059a1f458d96c372ca52ba808e196f25d969","ssdeep":"96:I+xE+wlLF+wE+/jX4Dpqqs3H0Vk6pofsEAMbW9mMRcMAMnMUd6UgMR1MGMnMU2I:tYlLLnjXeqh3H0Vk6pofsnyW9mMqMAMm","tlshash":"fa81f04bb3d3ac204bba266a0d37da843c2981273c36e643bc5e5954cbe0e55d237b60","size":4120,"data":"","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.030034Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/jquery-3.2.1.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-25T02:11:25.900522Z","times_seen":95156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/chosen.jquery.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2a25e264161099bff1c456efdae8530","sha1":"f3ae2600af2aa04cbc08a9be19592cbd54132650","sha256":"ca4d1b82c04b875c3a71c534f03e10f081f567a6eb1848e44b34744667df57db","sha512":"197b4803007c0b83b15c8b5ac8aeb4f3d4e1ffa75bf8f71106bf19a071380fe2ca2cee1a80e4c417c95c060811d78a1629ca703b098f838e44bf56007f3b7569","ssdeep":"768:VXtj9bumwogXCzkTp9HND9LwI2dNlb2DvHrqgtu:VXRUsm9HND9x2dNlb2DPugtu","tlshash":"9bd23198fab1a12041f755f5a65ba185e337a49ce80c89acfd3dddd25868c0db02fb34","size":30138,"data":"","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.023176Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/jquery.lightSlider.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40617654fa2b0b6d2d62006c516324ee","sha1":"38b3a18a1aa428240df43f6effd6d64cb5d0692b","sha256":"a61e10bb7fd0d0f68e65b8dbe6dbba82bbbd27165ec20254b24e34b4a27cf219","sha512":"64dfe258302a6ff9ccc3d7771b13391537b05a86e69306c45aef6f82efbd9514b1021768eb612239b5b26cd7ed8f1b71134e58ccbf2c76869aeb62f1ae0a7c8d","ssdeep":"96:jkJVqbF/TmxBaBEd3Yn4sdo2K2HUppmUF+zIyXZt8rbJBjK/wjX4yqFfDrpyMW:gJMbMzs6sW52HkjCZt8rqNyqFfDc","tlshash":"40c1e8b6ac7e3d590326f28b5597c2c363d94ea93f2f9075f0969601108c8bd02d73ae","size":5788,"data":"","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.034715Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/wow.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a26a117ff59c944bbb654bf506f69786","sha1":"237c90127c99e91347536835096276b0add6d018","sha256":"cfa1739ee346d63a3d3cfdff8c18cbe8fdedbcb32d4b0895028c193ce828e7a5","sha512":"11a93fdbd393a5bdfa2cba36af8ec8a55ccf04b5e700c3c0572a5b499899e1091ff29ffb4bf5d11b9c69ece2963cf61f253ea67ad23e20e4644791bc17dd34fa","ssdeep":"96:irZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:iry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"04f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","size":8182,"data":"","first_seen":"2023-03-07T01:10:38Z","last_seen":"2026-06-24T23:09:43.533698Z","times_seen":7719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"79ec5b0b3d580bccc561dc14841d3d21","sha1":"a9fdf3e2cbb978d0c901baa5b8cbadbdfbc660f0","sha256":"0d511ae157b659f78e5c54fa28d7acbad51a72e4c3e6ccff4f16d1b8b9dcbc20","sha512":"1e99107275053c3d9bd23ef72ae2851cb248737624ca5e1a569ea349169460d5cd3b488cdd259e18b63b21ff200c5c61bb6ec6b922a6c959abe431265ac88573","ssdeep":"","tlshash":"c2c08c8c22060c7041a736004b2fb600b202321494d1a821780e23844f20e139b84850","size":157,"data":"","first_seen":"2026-01-20T06:31:39.617008Z","last_seen":"2026-01-20T06:31:39.617008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a745310962503fd16f9cdc4f37456fb7","sha1":"dba7f7e649f2ccb1d02e71da4977949357617fe5","sha256":"850b197295cec80ef2d7f37c735706bd243f3a1a12b75cf3da78587362c4f52f","sha512":"a9200fd9d92a5175de7c70993d327d88ee31cc7522a9d4fd9af0d04a4a4f765a06fe52c3baa8be50fab8d26b70b52580ccd0ddc161ec858dcb9341ccefa638a3","ssdeep":"","tlshash":"e2611d2a78fb11604233607e57af8242bb7c40574404ddc4fe6c62866fa5f256aecede","size":3451,"data":"","first_seen":"2026-01-20T06:31:39.617929Z","last_seen":"2026-01-20T06:31:39.617929Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/bootstrap.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","size":51039,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-06-25T02:01:21.521822Z","times_seen":124818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/theme.js?57fdad6851467bc85aa55b88c0690d58cff7489e","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89497079f39d6f33d268ede60bede6b6","sha1":"c9a9ecb3902de223e71263227da4567ecc65153f","sha256":"19c126f6733b199c4c24256a01522d20a8e6d7934f0ba902249d9c6fde2fa0e6","sha512":"178493fca86dc8b32977a42613660577324e4a108425f7dfc4a4eb6b66f9100ec13c328309299c902ce0a3e10f726ac471ffc3797165bb9f041559cb2cfb9341","ssdeep":"192:F/MVslUywZmULTgxvuuhSifkiclKi1rWLysFz7LulG7LKdznVQGyf7ySryeIKjyX:5Zsv/aP5u/7iV331R9L/rEPp403","tlshash":"e8b2521cb4f3116884b3707a5bff59043ebc602b5109cd107d6e99d19f80a65b2abbaf","size":23556,"data":"","first_seen":"2023-11-12T03:50:08Z","last_seen":"2026-04-04T16:37:24.882568Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/includes/js/custom.js?57fdad6851467bc85aa55b88c0690d58cff7489e","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66c2acda4f70d25631902dade40ca656","sha1":"b89d7b7a16ebd457c02dd4d340997b0e071c0b92","sha256":"da514316aaa7d3401a29d5eb3cb817183b1df87d3385a1e8a96d975aa6557b61","sha512":"133a013285e5363976284e2c5d0a63bfcb73ec344c71fdfa924b17819ebe99278b72fe2563aa93cec5a215fca0c5cabca15b72b19e3006a2007ba05fc0b3eae9","ssdeep":"768:1GZjti0VT5zMknO/aoO8H8muA6tK6BAXUjUkcOtB/fs9qejKcRd361B3:OB8H8z0fkTc8/","tlshash":"71235448b1f32d5459b7b9ba0e6f62113c2da11f642cd8067cbc4bca8fd4748e722b59","size":48896,"data":"","first_seen":"2025-08-04T03:29:59.102857Z","last_seen":"2026-06-06T05:52:57.722116Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/Chart.bundle.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"857fc46bdca5bf534cf9ed111e732a01","sha1":"81639a5f38c61eda919d85f55cddc5befec6946b","sha256":"5c5dbd081c14d4c58b686127b042e8814e98eab71ce670a4861c7cf6714c2034","sha512":"98c5f0ebba1c53773728b5bda6966419114bd290bb990a5ed5123dd04fef65729460690b79ed8222d61b116f0172d33940f4930630f96fdeecba70531e10cc47","ssdeep":"1536:UaK0ul2eJsniEfMmseMvjOmf3qKs3YHpVcPlNIRSCpvYqGl2IY8tv+YMrq94y3T1:POodfe/v/fl3M7fK6jqVcnJ9XNn","tlshash":"3b2408c97281b026437362e4142f150be23b7954680f8a58f6b6d5d27cbc98e61bbf3d","size":211133,"data":"","first_seen":"2023-03-07T12:11:34Z","last_seen":"2026-06-22T08:53:31.03401Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-25T02:14:23.192268Z","times_seen":377696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50d35b974a885c139d6a8b9d6aee6bc0","sha1":"e3bdb1359eaf0ba11ddc7c1176a445f19c0a7230","sha256":"68e48e6a4aca53225bd9854c124a56543d59df548a9473581afadc814120debf","sha512":"c382b3001f82c9c8844081d4feb422d51750e0a32581c1d8944904128c4eddef99178655924a3b3af953e926fdb866db3d596fdc92474ca5734c387692fe30c2","ssdeep":"","tlshash":"3eb0112830fa0a80eaa32aa0082b228028223003000a80003c2ce2a00f2a2388a8a20e","size":99,"data":"","first_seen":"2023-03-13T02:41:51Z","last_seen":"2026-06-06T05:52:57.72905Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"addefc6930622bf10f49424aedd01aac","sha1":"091ba79a7a218c3260c5e7b7c5beee4efee00a52","sha256":"bd2e873859de859e0c73ecca20fb13829e79aea748a4c9ded4c80a512f37c243","sha512":"2f62436b3247ba1da067b6469ce5d30c4c82e936a80d8475fe685f14e90a4406c2b3b49f752f699b80ed29d423e03bc2322e36564f4f550f1e12a492c1a2b298","ssdeep":"96:iIrbLy5a4xw78s1fNMd7bsc3xQyfz/Zzm7n0FNOntW35g42ug1ZG+NrIjfHQAQi:iIrbLy0LB1E7bdBQybRUHvG+Nr6wQ","tlshash":"d7e1c985f73a3584d96b319621afd15842fb8da02e03c0a4f1a5c4d509bee5d0271fde","size":7435,"data":"","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.047755Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/jquery.lightSlider.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/jquery.lightSlider.min.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zfJ3m8p3%2FYEXakXImwzE%2BU%2BIhFhLa13qHYCymE296w7QGECQQJQ11lW5sTAVAnsNfy50MCiIO4STLF8FifLhfmgutbiBORt1sNLgJxUEg%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f99b9c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5788,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5706)","md5":"40617654fa2b0b6d2d62006c516324ee","sha1":"38b3a18a1aa428240df43f6effd6d64cb5d0692b","sha256":"a61e10bb7fd0d0f68e65b8dbe6dbba82bbbd27165ec20254b24e34b4a27cf219","sha512":"64dfe258302a6ff9ccc3d7771b13391537b05a86e69306c45aef6f82efbd9514b1021768eb612239b5b26cd7ed8f1b71134e58ccbf2c76869aeb62f1ae0a7c8d","ssdeep":"96:jkJVqbF/TmxBaBEd3Yn4sdo2K2HUppmUF+zIyXZt8rbJBjK/wjX4yqFfDrpyMW:gJMbMzs6sW52HkjCZt8rqNyqFfDc","tlshash":"40c1e8b6ac7e3d590326f28b5597c2c363d94ea93f2f9075f0969601108c8bd02d73ae","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.034715Z","times_seen":38,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/css/theme.css?257fdad6851467bc85aa55b88c0690d58cff7489e","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/css/theme.css?257fdad6851467bc85aa55b88c0690d58cff7489e HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 12630\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Z9zHhO%2FNDcRBVESYZcQl%2Bz8da9odsi57PPsod9kf2aYDUUI4GZ2YlJCnGVGGhQJ4oHlAp0GEr9GSOn7B0ashse%2FATwF1ImTrYTAZvMkvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9bbaa3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55503,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (748)","md5":"1fe856c78ab5a03eaad6c6a4f094e851","sha1":"5d747c01120ffac7b2377388832d5e3ed5a4c5d6","sha256":"52e412e17a1d12dbba3af0265479ce318081f18a6f47034430bf6627b30feed0","sha512":"d1938657118d6f0c55d842d7dec91bf58e621e43537b2dbcb7eaa8ee847b7a5242b75bc4f66ba7b69898fe9f7756130bda2a40baab2dd20ddd35e823a815ac0a","ssdeep":"1536:B9Dk6AMx+qtyQwzpFtYadKI+sDYZXaA1cwauu:B9Dk6x+qtyndKOEXaA1cwa1","tlshash":"0b43b9daaa711804766ac658b4da6fed172d6052ea09ddfdf8a2344cc3cd2c590b3f48","first_seen":"2026-01-20T06:31:39.579634Z","last_seen":"2026-03-10T11:03:40.220764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/includes/icons/flags/flags.png","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /includes/icons/flags/flags.png HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/includes/icons/flags/flags.css\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Feb 2022 14:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78832\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0XIyJlTi2wZRk%2BSfVoBW8SeT11k4Q%2FaLi4ez0rffm2MUzhx5kgxazQtg2cnbLEQZGudameRB0GlvSGlJZRL3FzgF2Prxa5Mek%2BTOUbGWXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c0c8702ec7a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78832,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 176, 8-bit/color RGBA, non-interlaced","md5":"54f6638b4bf4fb298498f9b4ac7a71b2","sha1":"3cf58d523dacd74a247f0308c2c592ac6e20e533","sha256":"9588eba3827745ea2d8685c504b841bf48e7ca5db22be3013204f94466c749b5","sha512":"22e0ab496c552aa0ad1e8a686d25f63372ba7bee240139e69525373ab47c4f81ab20f9b080ab0c4181ca1cd2f22cd30e4f084c33bbea4dae97a197351cc5dc14","ssdeep":"1536:iY8IMjg1tD1NxXJ1SVkixwuxIEh4KhAXA+Bet6FEb:iY1MjgrD31dmHmErPBa0","tlshash":"7073025929f2b7ca771a889468fc6728fab73ac8c565c0c9000dc5c62b46f87bf453b4","first_seen":"2023-05-14T09:40:08Z","last_seen":"2026-06-22T08:53:31.044005Z","times_seen":262,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":337,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/fonts/myriad-pro-bold.ttf","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/fonts/myriad-pro-bold.ttf HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/templates/default/css/typekit-offline.css\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc; _ga_PNF0J710V5=GS2.1.s1768890670$o1$g0$t1768890670$j60$l0$h0; _ga=GA1.1.296169770.1768890671\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\ncontent-length: 47798\r\npriority: u=4,i=?0\r\ncontent-type: font/ttf\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3K4P4tcaR45BjeNRuffAoHACBz%2B76m63FQ5GAOXx5Ju%2FhIOgK7WOan2Sh6KB4neu0FYGJHbKyLt%2BQ6FYPLT330VJyEFBZgaJN09bda5Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c8704fcb33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47872,"size_decoded":0,"mime_type":"font/ttf","magic":"Web Open Font Format (Version 2), TrueType, length 47872, version 2.7536","md5":"570db9d9dec19b747f8f35805b926877","sha1":"f4f27727a29960b5c89153427dbac9cb2e0d2930","sha256":"3bebcba2325773385b0e1dedd393c414ad91a5e3a25eedd52f12f6e346a438f7","sha512":"0e107ddcfa7fe062d15fd37cfbbbd276c4551e17986555be3e2ea6be8cef56648463db3c13235fa077246c74cb95fdd2fe3e79d9e877fe709ca3e79b8cf72fb1","ssdeep":"768:STJSiuMP3t/ASIssheovcKZtBLLzFtPoioi6I96C74pVSNETs7ENSj:STJSgP3KVTMiXBnzPoioCICE9o7E+","tlshash":"be23f1950e1f9549f8f01572d6081da65054ef8cc9d3ce02b2ca694a8b86e9fc38dedf","first_seen":"2023-04-23T04:16:12Z","last_seen":"2026-06-22T08:53:31.039069Z","times_seen":14,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":80,"receive":337,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/images/gallery/perfildtodito/XXX1.png","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:11.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /images/gallery/perfildtodito/XXX1.png HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc; _ga_PNF0J710V5=GS2.1.s1768890670$o1$g0$t1768890670$j60$l0$h0; _ga=GA1.1.296169770.1768890671\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:11 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jun 2023 15:48:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 609678\r\ncache-control: public, max-age=2592000\r\npriority: u=6,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bZzycf00cshuxNm%2BxYa1XX0DrPkTswqX7LwzlCjIM2%2F4W4qLBdVW%2B%2F9ZlZGDL84znhISYG9VZoObLc5St%2FEK1jPx0XgzEm1VBzTk5GVAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c0c8708cd403181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1996 x 1000, 8-bit/color RGBA, non-interlaced","md5":"c8cf448307f51554ccfb03b5aabae71c","sha1":"13272d5d30aeec6091c0bcb0f3f0aa80563f9653","sha256":"aa9699147d927c208e6a3331b2451a1966a10d235e77194b0f014b79164982de","sha512":"81d2057fe4cc118b25b7a85cb82a5390900a76f3b231ab657d0ceeca2eb7210926ce52359cd49703748a51e973ac5e31f6039a9d00f161ad9bf756ec9fdc8954","ssdeep":"12288:12WX9e8fTmHjpK0FsJSamktkKqvN17psA56xFlbQpENtAOfWfL3J:p8/HNKhSamkt0vxsA56jJQpE0OeTZ","tlshash":"fed42346cbf3c6902ebd690f0b756fa587f720a854626e2daa0824391d1f8f4d650cdf","first_seen":"2026-01-20T06:31:39.581903Z","last_seen":"2026-01-20T06:31:39.581903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":807,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/chosen.jquery.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/chosen.jquery.min.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8zzWA0%2FDjpMrqKqe6l%2Bwf9bbH0ME%2BnNRxcj62zoecjtUMkZAwi%2F%2FDRlal%2Biv%2F2sosZXwcgWzyqTQTVY%2B0urzxP%2B2K317T4dKSHcYmnd9g%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f99b993181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30138,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (30016)","md5":"e2a25e264161099bff1c456efdae8530","sha1":"f3ae2600af2aa04cbc08a9be19592cbd54132650","sha256":"ca4d1b82c04b875c3a71c534f03e10f081f567a6eb1848e44b34744667df57db","sha512":"197b4803007c0b83b15c8b5ac8aeb4f3d4e1ffa75bf8f71106bf19a071380fe2ca2cee1a80e4c417c95c060811d78a1629ca703b098f838e44bf56007f3b7569","ssdeep":"768:VXtj9bumwogXCzkTp9HND9LwI2dNlb2DvHrqgtu:VXRUsm9HND9x2dNlb2DPugtu","tlshash":"9bd23198fab1a12041f755f5a65ba185e337a49ce80c89acfd3dddd25868c0db02fb34","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.023176Z","times_seen":61,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/css/lightSlider.css","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/css/lightSlider.css HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 979\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gl5xcPXT4xcmTImsR3llle%2F1FsS9jUYBjLnxWO8SYD6r%2FQt29tYidpbZuO3jOwjl6JzrwAZZO8ET4sBQKz%2BcH4JDExIkKPvUHi5RNaCwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9bba33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3452,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"412c51d32565461d8e2b448257c54c21","sha1":"90f5c33c9c7fe2eb01b2b4852f9ebe700c0967b8","sha256":"895638ad8baed3469e8edcfe45b839a845518e929fed9a0c262e4d68ad89202b","sha512":"7762ce35196cc3150ec2d6f2ce87c550d453ddaa33f531a09e2da11c53d2f9aa986a741c6de4866ce0a3e646d2ef3c456c9ba3c4097ecce87d91ce3af93a0d80","ssdeep":"","tlshash":"7961e11847223a48903785593bdfc2d5437e6031fd12fccda24a692ad3cbe64a663bd7","first_seen":"2023-06-29T11:05:56Z","last_seen":"2026-06-22T08:53:31.035275Z","times_seen":36,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/css/animate.min.css","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/css/animate.min.css HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 4106\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgZAlaFeywMpgdVddxQe%2Fipg1hNFhBRHcwyPkZJeozLdAE8s4NRaZf3TA%2B%2BUeFl2g6nOugqosq81s3LLkehwoTwl7XPB1HxGXczaHyfW0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9bba53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52789,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52592)","md5":"178b651958ceff556cbc5f355e08bbf1","sha1":"97afa151569f046b2e01f27c1871646e9cd87caf","sha256":"8fe3fa119255adb5e0c12479331f9e092e85bcff56ab6ecc0510bfa2056b898d","sha512":"4f251a31b62b28565f41fa7ef67406384b7ebc6bb89caccb93429a5779c589f2f72bc9fb9736fc0dac93ccb38ad29372cf1189cc6452c3bf1ef31a89854449dd","ssdeep":"768:KkZcIOIVjl2eIWInPywe1aAvkqDX3oyq5BrieD0OTbsysV:KkZ8Pywe1aAvkqDX3oyq5BrieD0OTq","tlshash":"253305ae5891129950274f67c7cc5ea8872dc7a714621cde33826c4b8b47fde33da607","first_seen":"2023-04-05T13:46:05Z","last_seen":"2026-06-25T02:09:28.147801Z","times_seen":15893,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/images/gallery/borneo/gf.png","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /images/gallery/borneo/gf.png HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Apr 2025 02:22:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2069810\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbdMOYuvow89ypZ58t%2FOQnXaRqXJ8eHK1AsRZ7EG618%2B3ldY%2FpWT7veXxpClFdDL4vJhw%2FFsCA5JFdFg8JDSdK2KdAiWPf%2F7o%2FnLkl9T%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c0c86fa1bba3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2069810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2561 x 1441, 8-bit/color RGBA, non-interlaced","md5":"bd802a2a816e6e6d7fc3855df2f78b1e","sha1":"f368d8938b3bbdf16ee6ba69890e26405896d10f","sha256":"94273cd0fdd9e308a7931aba13fdc06f4249494d5c4fc8e143c5d6fbce7689a9","sha512":"ec308f8758f61fa51ca6204070073db0d77f7f0a9be9b16324bdd2e5582779849a2b3878b9ea25a35ac87885426c66281f2e1a7662150055fb22d0a891738756","ssdeep":"24576:vWVOBt2OoHe+tYpg4c9qWG9Gc9EMxxEXc4dMvhhlWzMsdMl/d:vaOyOo++CoqW8EM4+hhwzMsEd","tlshash":"f92533d25d69d0086d778c3ab26e1f464a1dc174d8acafadde001a110f43fd90e5eaee","first_seen":"2026-01-20T06:31:39.584334Z","last_seen":"2026-01-20T06:31:39.584334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1047,"receive":1294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNF0J710V5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/js?id=G-PNF0J710V5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nexpires: Tue, 20 Jan 2026 06:31:09 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143855\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434388,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"f9ac0e8a31dba9eb84d7b00ae899d7b0","sha1":"eba1e849c67bade03401752cad85ea8255c1c63d","sha256":"f9498d9af998d4498cb7bf940f86d06e44675cc59e47e2484fbc7a899a34f93f","sha512":"dcd1cd140e3408a527a4cc27fe19e345547b4ff81c667b5a2058be8c88d5ed48130b8c39fbbc29a6c81a77084ecf2c38b9c03bb9fb2701fc91aa51976b789866","ssdeep":"6144:JxRnbh1DGvjHjUG2tonsYDfc1YgdxBX83ospS2VK7GO:RbTDwjFBns3X83Vu","tlshash":"9c941a8e73c674265396f078503f018ba57b29e2b45cc896f189cce42e74a9a4277f7c","first_seen":"2026-01-20T06:31:39.585104Z","last_seen":"2026-01-20T06:31:39.585104Z","times_seen":1,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":107,"dns":1,"connect":20,"send":0,"wait":43,"receive":58,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/images/gallery/borneo/borneo%201%20pc.jpg","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /images/gallery/borneo/borneo%201%20pc.jpg HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Mar 2025 20:42:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: text/html\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KU6uEyB1a8jWZqaFY2ByHZsBeGnYZDGsM5LdiNayHfArSRCEx6Wh6oy5E9Dna1yQ8VDoMHQV2C2PhGgJL2r9zeqsCIpAZrWqYF3l0SW%2Flw%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c8702cc783181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"4fd6bc54540d93d192ded736d01ed8cf","sha1":"6cb553eb7c6aa6344fffc14cbc439c00b1960c98","sha256":"b80cd748252d388f9882c0c9cd05c57c5ad705a448cc37624ddf37ed7f1e7d3c","sha512":"914db3717c46ed0aa7e7fed376312b20c88db26810acd36b091388d5eed38a209abe072d66ad3c7ad61abc02fc6521564a1b948444f0dc4c5f28563065f65ab0","ssdeep":"","tlshash":"84e0ab0d90c7520b58124140b9d22372a246929b117946a13dcf4983ef82a4ed4e23dc","first_seen":"2023-04-09T10:46:48Z","last_seen":"2026-06-24T12:44:13.973791Z","times_seen":1651,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/cart","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"POST /cart HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 15\r\nOrigin: https://dtodito-gsm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"action=viewmini"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:11 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, max-age=1, private, must-revalidate\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google-analytics.com *.google.co.in *.herokuapp.com *.ravepay.co ajax.cloudflare.com chimeratool.com *.chimeratool.com *.elfsight.com data.chimeratool.com *.flutterwave.com *.stripe.com *.atfawry.com *.google.com  *.facebook.net  wss://*.citruspay.com:* wss://*.google.co:* *.citruspay.com wss://*.fawrystaging.com wss://*.atfawry.com wss://*.fawry.com wss://*.youtube.com:* *.youtube.com wss://*.tawk.to:* *.tawk.to *.facebook.com *.fawrystaging.com *.mastercard.com.au *.fawry.com atfawry.fawrystaging.com *.facebook.net *.mastercard.com *.razorpay.com *.google-analytics.com *.securecode.com  *.google.com *.dhru.com *.paypal.com *.paypalobjects.com *.googletagmanager.com t.me *.t.me wa.me *.wa.me ; img-src * data:; font-src * data:\r\nx-dhru-core: DHRU FUSION\r\nx-xss-protection: 1; mode=block\r\nset-cookie: pagelimit=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zY9%2BULEx7dcAZK%2BuIVs64YMJ7A8y1RtnJBGRC90i7iNzI0YsMAaV%2F1koAPYVDFhSo1RKB%2BWdwwV0pzNba8c1lSI3uXtq90j6Fxk4gyt3KQ%3D%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0c8703fc993181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"e1c06d85ae7b8b032bef47e42e4c08f9","sha1":"71853c6197a6a7f222db0f1978c7cb232b87c5ee","sha256":"75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070","sha512":"016ba8c4cfde65af99cb5fa8b8a37e2eb73f481b3ae34991666df2e04feb6c038666ebd1ec2b6f623967756033c702dde5f423f7d47ab6ed1827ff53783731f7","ssdeep":"","tlshash":"c710000000000000000000000000000000300000000000000000003000000000000000","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-06-24T21:56:21.759022Z","times_seen":45460,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/css/chosen.min.css","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/css/chosen.min.css HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 2276\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ysUsslV4RNRw77NiDwlHU7J1w4Ooo5nCclN8FyRN3vX5BfR6srRMh7ZbbnNDUuG1TBcd2FvLXpTqySCpgkjawRQVofBGvcvcj6VSZd08w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f98b933181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10123,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9752)","md5":"a1e526b776ec569bed010379e2737724","sha1":"7540590e1959cea3134b88667b52ffb9a988124e","sha256":"38521afa2e8b10594fe1c0fb16249f68bb4256a45af9167a291791aea8801818","sha512":"626b5e61073dbc348ed19a94c3b727ee3ed1a3103a6b932252ab22d2eabde51184239d6cb5c4ed52512f06f8d9619e3db3af85bd182a8c02e51a6aaeddae4c1e","ssdeep":"192:9tGTOHnf0ULobAU0iZpEXj0LvhpBaEMuawTX0D:/Gof0HuEbA","tlshash":"d922ce6aebe42a2db4f784fca45165ca6731c4e2d61d0eac7e27b1e0cac5cd20053e5d","first_seen":"2023-04-23T04:16:12Z","last_seen":"2026-06-22T08:53:31.0323Z","times_seen":38,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/jquery-3.2.1.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/jquery-3.2.1.min.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nqOfJqLJfLubN5ebUhaJ583Hirgeu3jrJgRUrYefNEfFvIK9mPP44fkMUg4fX7Sb53nWWat06EQOyOQ2ulGWLgAOS%2BUwXHUJz5XxEo3H%2BQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f98b943181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86659,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-25T02:11:25.900522Z","times_seen":95156,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/wow.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/wow.min.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oGjEUu8v%2BUR0bR30hVWSZaC72B5BAe4z4j0LIhjPi0Qdf4e8smiQeIH0YhQrFb1JAv5d0aBYoqcod0N4aOjHOG5cMJRPVIvXTLQ9ZOYV3g%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9ab9f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8182,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8152)","md5":"a26a117ff59c944bbb654bf506f69786","sha1":"237c90127c99e91347536835096276b0add6d018","sha256":"cfa1739ee346d63a3d3cfdff8c18cbe8fdedbcb32d4b0895028c193ce828e7a5","sha512":"11a93fdbd393a5bdfa2cba36af8ec8a55ccf04b5e700c3c0572a5b499899e1091ff29ffb4bf5d11b9c69ece2963cf61f253ea67ad23e20e4644791bc17dd34fa","ssdeep":"96:irZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:iry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"04f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","first_seen":"2023-03-07T01:10:38Z","last_seen":"2026-06-24T23:09:43.533698Z","times_seen":7719,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/css/all.css","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/css/all.css HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 17159\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46F026zxIkV%2FA4OJYKBuCN5p973H2XrKk0fcld9OQTIdBWtcoKpcl497LiAL5WrJAI%2F1gZ5zLqayQHtK1ITHxQyHt8z0eGWCKPKy%2BJmNMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9bba73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99437,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"13c31bd57e4f035e6fcfc752fe210460","sha1":"799ec63de9da1814e70483bde7dcfe744aa18b19","sha256":"f7574bc9a3c2fd400076b2a6ec6cd4580efd7b03d281d62e2ac91967f1b252cc","sha512":"f187368beebec66032bd6739607dc62eb180119240c0d1c32aaf6931de22e0d9ba2ddd28fbf9cd316952f006a139835df55d3710fa6e3c6a39374976e706e89f","ssdeep":"1536:Liib6jl6LlvtisUa3JDPFNnk13YhMq5fAYkFzRq:Liiejl6L3isUa3JDPFNnk13YRtirq","tlshash":"89a3ebfee1bf11944311e4812743e3e4b32ab62cec8a5c94d2a67d8df1c165ca186bdd","first_seen":"2023-04-23T04:16:12Z","last_seen":"2026-06-22T08:53:31.025572Z","times_seen":82,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1000,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/css/themes/theme15.css?57fdad6851467bc85aa55b88c0690d58cff7489e134911","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/css/themes/theme15.css?57fdad6851467bc85aa55b88c0690d58cff7489e134911 HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:47 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 633\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1T9FSchGIS2W9dtwt%2B9zZH3sHTjv4irHgioQdOtJ%2ByK0MU6i7UXwye9C3NIXFSIAxAvP6zaCluhiBmzzjpGv4UiXNLevPGRwO2U8JlCTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9bbab3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (324)","md5":"b40b0dca477767b9cd46e260e00702a7","sha1":"4d9cbfd90ba7d070245f3d3c599c570fc1ecefb2","sha256":"6987eb50ea446d01b10d062476884375e0b2c02b10e37f790ba30b707f6de85e","sha512":"489c38ecf43a6a814f7c64495fa4f929d435931f09855c3eb9a0a7a468dc44a86564b530ed0e08031dbf389af44d39080c33b1d3b783a6af69c52c29b026cc35","ssdeep":"","tlshash":"9e211229e1f62da6203145dcf11dafb90b0d60b581281bcff93f61742bc624c9053f94","first_seen":"2026-01-20T06:31:39.590201Z","last_seen":"2026-01-20T06:31:39.590201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/images/gallery/BANER%20PAGOS.png","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /images/gallery/BANER%20PAGOS.png HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jun 2023 15:48:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1333125\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4gyqg8qySZTsndPu6PQjA2uW0VEUX1JdiFufC0EzekkS7GPhJKeP52h6jtEmMs1Dnk5WvM2kklA4Cxl065NEno5E4x%2BuwFEH1kRFwr9%2Faw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c0c86f9cbb13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1333125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 600, 8-bit/color RGB, non-interlaced","md5":"89cf27d81209def96524d2e2f6bf064e","sha1":"432bad847a85167e5319e937f6c8c42c80bb6f57","sha256":"2638b258a176464ae80adbb73d5d3620d9c1981405b37dcef140233307ad9bfc","sha512":"54d6a3076fbc39b423dd85434f109cd6f71884622adb6d5bf0d565c8a59e12338e647f55d9bc42bb61a4acb8a1de36e34eaf83c914a211d5bbed474d54840269","ssdeep":"24576:VD01d+zSvkHlZyF6h/DuP7M+kUcwbRFbW8MIMCpVNay21gtFv1D:wUSeHyF6h/DuPhxFHM3CxaR2tv","tlshash":"982533dca47659c0e2d550523eebb988177d2eca8ad8961368cb5d0707c8d730cbf68b","first_seen":"2026-01-20T06:31:39.591624Z","last_seen":"2026-01-20T06:31:39.591624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":1030,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/images/gallery/baner%20unlock%20tols.png","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /images/gallery/baner%20unlock%20tols.png HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jun 2023 15:48:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 796418\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdbqVVr3wvk9nXENs0lXBcBFn8IA6Zs1pr9CNBDpI9QqB%2BKzIrq1HaKQGG9W%2F0clETOpfLtiTL6A8U5ogbCuRDg2OqeLa3uuCUkr36q0Zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c0c86f9cbb23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 600, 8-bit/color RGB, interlaced","md5":"45dab33a79439f0f73cc97fc12c97c90","sha1":"c1eb82516c2e384a87313e7965e8e2bdea80a578","sha256":"491d9e99abf5f75ece54ad3319ca8f60869fa8e01b0f2d7c1a4efb907844a1a7","sha512":"9881cdbd908e6095ca033639344ce24e835897732ccd33d5104fdbd8d4a07775ddb1e632002deb54a25ff245499d776fde73bce5bc8037784f5a751423c77047","ssdeep":"24576:/Jfm3WHNWDBu7Ps7CqqOOURGx4FJy/PLUbk:dmmHcug7VSGWLz","tlshash":"03053339e495dd3edf213e7ad52ba21821b3540081c869efd48cae59dd7c1b024cb9ee","first_seen":"2026-01-20T06:31:39.592595Z","last_seen":"2026-01-20T06:31:39.592595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1012,"receive":906,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/css/bootstrap.min.css","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/css/bootstrap.min.css HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 21384\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBIEwboqbRQF8SnGTHu1wwyI%2F1OyY9LNF3ylcWklM%2FHfqyKtRv5W6kXvPhSXeu0d3%2BGBxM5auz20fraOMKE1fGYfMEyiscaHprncQg6aJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f98b923181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140937,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"37722be5eea5421bdf222f1ef5d70d60","sha1":"c6c191c6a18b5088a1d9281f21f958c1802d4cd6","sha256":"d1b923bd321edf1b6d8c70e83fc400818a545d8eb54f5f671fa81b871a9b3f2b","sha512":"dcdc7b682bbe5e14088a3d433317fb2dec21fa1d84ec279bcdb01def819a9fd5f3fe9aee64a82a5a109305503c6a9ad78faa0696ba6509df48eac5fa661b60c5","ssdeep":"1536:un1QWSUPBT+QYYDnDEBi82NcuSEz/NvT/gIENM6HN26w:q1L7PDxYIENM6HN26w","tlshash":"b2d373a7f5a0312da467c61864d0bafe156f8285d7221ffaf42737644b895cb0a73e0c","first_seen":"2023-04-23T04:16:12Z","last_seen":"2026-06-24T01:41:11.403893Z","times_seen":95,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/bootstrap-datepicker.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/bootstrap-datepicker.min.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPAEApeuOIO9t3eOoJGUf%2Ff4xXaFEEuwgx9nVbkh9d4C%2FXeYERJGho2UZ6G7GR6ZtD9%2B%2BuKYbAbT9xSmj9cVPanBpriEBl5xgzT2fx6%2BOg%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f99b9b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33599,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32084)","md5":"241a419bd65535b6569f46797779c43e","sha1":"fedbca6ccfe569995315c4f599c981cd8f6a503e","sha256":"b56e4bcc40bb423846d02880bf196c78c4ecdaa252eeedc344f6ae0e3149df3a","sha512":"70e18bea0234d4a2b6070b36d755bc4b708e873ae8ac16f32af2cf598395b521187addf21b57f326b8a6b7087cad4caf332f6a8e06367bb46de88c326a25f532","ssdeep":"768:iT/yMzcli2Tu6VYpnUelZdOv5U3+R02WzSop3tQ1FcD0+wVYQhnFovea8:iTAlLTuNpnU1v3YtQG0+wVrhnFWX8","tlshash":"79e2968d31957915827791b4802b1303b633d8ae9c89883cbdac89d66e7dd1e21bdf7c","first_seen":"2023-03-07T01:38:25Z","last_seen":"2026-06-24T08:28:39.633221Z","times_seen":580,"resource_available":true,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/table-cell-selector.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/table-cell-selector.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLhjEEKgLFxrplXM4EG4aCS3uLS1%2FFLNznaFfbnC%2BsIhFTad%2BB4AMmIBX0ziy7fCIKeH%2BuKCsQEGDWtPFBQ3EOdAFXjLVhzuFb9yqGK3%2Fg%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f99b9d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43953), with CRLF line terminators","md5":"ddd760da99520ac7aa0b7fef6c009a15","sha1":"7131c2a295f7f513165645270fd158314a6371f2","sha256":"3d07be80899e66d7ad654650529428e60c5f74c8a547bcb8cee07768651657d7","sha512":"0ab91fcd675d2b53ae9e51763b625fecf8407dc32207d239a2796a48d68b13fb746ebc99bc957443db6bd56511b65aebbd0ba022a10f2c8001c0c512e075a2d0","ssdeep":"768:fkPTsSFF+L/TU53AzhrRYDv//UgqOMFDczm1EhjAFVl9E0:fCzH+L/63UYr//UnFsm12jAFq0","tlshash":"081381c9b2d2b0b102ebb0b4403f810af277a899749985d4e236d4d1bdb998e5077f3d","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.027391Z","times_seen":37,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/jquery.steps.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/jquery.steps.min.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plMXZrraU9XUTFqSMq%2BrhM7RYHS05qekK7tGjlQNjKI9Oq0C7hBBh83JPirAWDcKWIeF21GEWEka3ph8n98HaRgzaJCfv%2Bgr8SzylIIYiA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9bba23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13857,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13686)","md5":"4c5e9f4e84d32b7df69af7420b355e03","sha1":"14e1e287ec98e8cc0a992ee996783b0c42f9ec0f","sha256":"c9459a9e11e4c63fb7a30d2a644e80b733fc9599302ef3da8142cbe8f9d9333d","sha512":"6c4d27700dc329698a685df0e614230aaec4ac71623dd1f62068d74725d76523a891b8a6b54bae7e181e0cf7903ece75008e17b2a0d950aeeabeb3d9e716e866","ssdeep":"384:RQ5Gr3Xzu+9zb2FbYN3RSSCJ6RYVYO2o+13eX4SO9:1uRYNBSSSeJ4m","tlshash":"1f52d794f6517079b3e360a440af941fb536ee72ec044820a0d6d9747dfcea4a72bf1a","first_seen":"2023-03-07T01:35:25Z","last_seen":"2026-06-25T02:09:28.186759Z","times_seen":3372,"resource_available":true,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":929,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/css/bootstrap-datepicker.min.css","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/css/bootstrap-datepicker.min.css HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 2083\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meXIuODE%2FZ3ijFO%2BEy9orvSwAUV6x4pz0D%2Fg33eH1yaIBk%2BOH6GHAhW1nfQOIc3HxD5uF4g8Twcd0DMCWWlDUVcoJCTeP3S049Dclvyt%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9bba43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15731,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15543)","md5":"6c64af21a8a40fde79d8e92d44f8b7ce","sha1":"5fcd369afabf977ec8ad1ad2e659380bd847ed44","sha256":"24305c9d8795d7d275e22b0677712d9ec0902b4e5df0f733279f9fbc4bc126f2","sha512":"c76315b3ce15c2e4d83f423df7edc0e0b58f67d83ecd3e20a2dedd890cd60786e28d5b1fc213595368ad86929aabac13b8778b86a2480a3a84e877df36560eef","ssdeep":"384:nZKW5Ri0vUTrnxRRDbfOu7rdcsr2LNX/kNrZph7zvg3HtX/kNfJ5xXTbOILI:A08VDbusyK77RXHNU","tlshash":"85624a185740382f2967c4569a64f8f7ef4751ef9c7d9b79b0a014ac032ade311ad8b3","first_seen":"2023-04-23T04:16:12Z","last_seen":"2026-06-24T08:28:39.618453Z","times_seen":610,"resource_available":false,"data":null}},"time_used":971,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/includes/icons/menu-icon.css","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /includes/icons/menu-icon.css HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Feb 2022 14:15:04 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 1209\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlR%2FN327TRaBOCturkIcw004f9os5GQWGiDKzoFReWXOJa%2BgZlpXFndOS0wmWLEJvCp3hYf1Jqs%2Bw%2Fhy0rNg2s4m3OuAmeOivzU2BxrAOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9bba83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6383,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"464b9784ff048321fe99d4fa51698f68","sha1":"55f90732ad172ffc6c6e5e36ccac946986e9f073","sha256":"7ab3d46b8f2028a421858045e2be1b3655cbbafe2ec758938c0d53cac34b29a2","sha512":"dbce504b87b701571755dfcb66049195f94efd43ccc2dc2a01ad9f82ef5fa72e2e3c69e64ba1bba40dbbdbf858616d10e2dcf496dfff4b41f0e836fe1b4e51ab","ssdeep":"96:DqMbW7ANWNJQLsfU1krZYqBgOZiEjP5Or6HZnNokXIehpnPpLMakh1I+tmOvimlV:DqMlg0uEc+2v+","tlshash":"a1d1b5a8d92f29825381fed16b793e009f1cb2298dd1ed09d5537e6cf7e2a1193c12d8","first_seen":"2023-06-29T11:05:56Z","last_seen":"2026-06-22T08:53:31.038494Z","times_seen":36,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/images/gallery/borneo/borneo%201%20pc.jpg","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /images/gallery/borneo/borneo%201%20pc.jpg HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Mar 2025 20:42:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: text/html\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1Xh%2FZoCyoW%2FGx8t0Ut5fup1CDDuERjJWSzQGBu5Er578B7NKVKvETBYvpHp7pqX9BL6ryL449r6%2FJZpbFD166o80M6cibQRUdJMy2Uakw%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86fa1bbb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"4fd6bc54540d93d192ded736d01ed8cf","sha1":"6cb553eb7c6aa6344fffc14cbc439c00b1960c98","sha256":"b80cd748252d388f9882c0c9cd05c57c5ad705a448cc37624ddf37ed7f1e7d3c","sha512":"914db3717c46ed0aa7e7fed376312b20c88db26810acd36b091388d5eed38a209abe072d66ad3c7ad61abc02fc6521564a1b948444f0dc4c5f28563065f65ab0","ssdeep":"","tlshash":"84e0ab0d90c7520b58124140b9d22372a246929b117946a13dcf4983ef82a4ed4e23dc","first_seen":"2023-04-09T10:46:48Z","last_seen":"2026-06-24T12:44:13.973791Z","times_seen":1651,"resource_available":true,"data":null}},"time_used":967,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":967,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/webfonts/fa-solid-900.woff2","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/templates/default/css/all.css\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BF1%2B4Y70l1SQ7B8nuoa7oCf3wKyFfEanoZKFzlzrdI6qPAwG8L9acFeJZXKaZr%2F%2FMnGrNnVzb%2BxaFXbcL2eaE2NDYrGcYVKp%2BqmG5dOjg%3D%3D\"}]}\r\ncontent-type: font/woff2\r\ncf-cache-status: MISS\r\ncf-ray: 9c0c8702fc7e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117536,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 117536, version 329.-17761","md5":"e57324a466c24a207fd9ad0f5f5e3c9c","sha1":"2f9b04644e684a6bb1033e297cc474c57aa267f2","sha256":"5538a328926c9517ffb8670fccce94f6137d58c21ff4b10ecd772abfa16a012b","sha512":"934de5545803e284bf01e39377c51ab35c3d12a491718887c7c654d3b02066a09b9667b6ac01ad494c46721b8add2d177bf578e261c7abf44340d653e941a180","ssdeep":"1536:K+lS8bCZXeU2bWwRkjDVsHZPOXmm1P6PoWS1qitZINkgxRc3w/4Pk1I7+2GzJz08:5sCCpfdwmG2Rc9CPtWNuJPkuYBj","tlshash":"abb312af59bf5f4605da8d9ff6ed70ce87899937c7718420c8ea36c8c60c60849a43c8","first_seen":"2023-04-17T01:18:25Z","last_seen":"2026-06-24T13:48:58.828814Z","times_seen":1256,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":531,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/includes/js/custom.js?57fdad6851467bc85aa55b88c0690d58cff7489e","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /includes/js/custom.js?57fdad6851467bc85aa55b88c0690d58cff7489e HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Feb 2025 12:25:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yP55pO48Tag3JS%2BVo5VSFNK%2F4UAmS9pyw%2FLwQJRvH4uDg9ltwY400WkAY8q8TDmauN2wXLCf89RKbt3whLlBrr%2FjJbWAlZfpIBRvnL30vQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f99b983181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48896,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"66c2acda4f70d25631902dade40ca656","sha1":"b89d7b7a16ebd457c02dd4d340997b0e071c0b92","sha256":"da514316aaa7d3401a29d5eb3cb817183b1df87d3385a1e8a96d975aa6557b61","sha512":"133a013285e5363976284e2c5d0a63bfcb73ec344c71fdfa924b17819ebe99278b72fe2563aa93cec5a215fca0c5cabca15b72b19e3006a2007ba05fc0b3eae9","ssdeep":"768:1GZjti0VT5zMknO/aoO8H8muA6tK6BAXUjUkcOtB/fs9qejKcRd361B3:OB8H8z0fkTc8/","tlshash":"71235448b1f32d5459b7b9ba0e6f62113c2da11f642cd8067cbc4bca8fd4748e722b59","first_seen":"2025-08-04T03:29:59.102857Z","last_seen":"2026-06-06T05:52:57.722116Z","times_seen":20,"resource_available":true,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/Chart.bundle.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/Chart.bundle.min.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iqmxcfh8ua76Cn9ju8PZ6UH4uibLFZq5L0Qkvmw7vLXmyngIRZrejqKyKoD%2BMqpRWNYjQjpCf5kPw3evXgqt4pTG40zsuPWksJf%2FSOQnow%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f99b9a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211133,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65336)","md5":"857fc46bdca5bf534cf9ed111e732a01","sha1":"81639a5f38c61eda919d85f55cddc5befec6946b","sha256":"5c5dbd081c14d4c58b686127b042e8814e98eab71ce670a4861c7cf6714c2034","sha512":"98c5f0ebba1c53773728b5bda6966419114bd290bb990a5ed5123dd04fef65729460690b79ed8222d61b116f0172d33940f4930630f96fdeecba70531e10cc47","ssdeep":"1536:UaK0ul2eJsniEfMmseMvjOmf3qKs3YHpVcPlNIRSCpvYqGl2IY8tv+YMrq94y3T1:POodfe/v/fl3M7fK6jqVcnJ9XNn","tlshash":"3b2408c97281b026437362e4142f150be23b7954680f8a58f6b6d5d27cbc98e61bbf3d","first_seen":"2023-03-07T12:11:34Z","last_seen":"2026-06-22T08:53:31.03401Z","times_seen":194,"resource_available":true,"data":null}},"time_used":1378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":714,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/includes/icons/flags/flags.css","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /includes/icons/flags/flags.css HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Feb 2022 14:15:04 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 1491\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NnOxIFIWPziR0UDd7boUY1AsMp4kG8tFJdffGeFV7foayqdrohmp1jgt6DaFyH1Mtpm0mWUI%2Fruk8KHxWwxLooD%2B2otwBvfE%2BOtwQnBT9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9bba93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12530,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cb4f8d3d053ddb4f279a56fa1356bdd3","sha1":"4ad3ab612eac23993a3fd96ce03442ef24f22ef9","sha256":"6067f64b4265203335335fec28776ae645325fed4b5fc07e6cbbce787ba996f5","sha512":"f4c7864b1fba577f3a69c43a1220411fea9ec6765ab3172754c1fef8133d906f5c3f6a094a797a3286dbd32f3e5356631ba14acbedb155f4aa3c040ba6bea3ca","ssdeep":"96:HWwCM4CBYnYTWJR4PXThDYu7jmTiiXJpROOAcqS2a5DdcOCxICih2Wde0JsIlfyC:jhZux10Kn2Il64eQlSEbKpN6e6oBi","tlshash":"664269b41a53b079fe0fd66561a017940b7e3000e9630b7d696b75ec27d6de88c33b91","first_seen":"2023-04-22T14:29:23Z","last_seen":"2026-06-22T08:53:31.027966Z","times_seen":51,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/fonts/myriad-pro-bold.ttf","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/fonts/myriad-pro-bold.ttf HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/templates/default/css/typekit-offline.css\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\ncontent-length: 47798\r\npriority: u=4,i=?0\r\ncontent-type: font/ttf\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjmCZdy5kN%2FBBaZZQG5D4fHAYUzNcMoYlqTADjkbW10fyyJrxQIID%2BURbyp31ySp7ksZtVC10NBPHlo%2FXm1X3T00tZeDbpoS66rH7zdu9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c87034c873181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47872,"size_decoded":0,"mime_type":"font/ttf","magic":"Web Open Font Format (Version 2), TrueType, length 47872, version 2.7536","md5":"570db9d9dec19b747f8f35805b926877","sha1":"f4f27727a29960b5c89153427dbac9cb2e0d2930","sha256":"3bebcba2325773385b0e1dedd393c414ad91a5e3a25eedd52f12f6e346a438f7","sha512":"0e107ddcfa7fe062d15fd37cfbbbd276c4551e17986555be3e2ea6be8cef56648463db3c13235fa077246c74cb95fdd2fe3e79d9e877fe709ca3e79b8cf72fb1","ssdeep":"768:STJSiuMP3t/ASIssheovcKZtBLLzFtPoioi6I96C74pVSNETs7ENSj:STJSgP3KVTMiXBnzPoioCICE9o7E+","tlshash":"be23f1950e1f9549f8f01572d6081da65054ef8cc9d3ce02b2ca694a8b86e9fc38dedf","first_seen":"2023-04-23T04:16:12Z","last_seen":"2026-06-22T08:53:31.039069Z","times_seen":14,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/webfonts/fa-brands-400.woff2","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/templates/default/css/all.css\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2BN1WFELlYqigHejR%2Bleem%2F3xKXl4DLFFBOJUvX%2BAYwkWzm9Hgk%2F7Hzjhv9xrrJmvfDccZJb7%2BbqCZgLA4dwWVo7wsiHC1unELxNuHHmw%3D%3D\"}]}\r\ncontent-type: font/woff2\r\ncf-cache-status: MISS\r\ncf-ray: 9c0c87035c883181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74800, version 329.-17761","md5":"68c177c286c34e1b7b975807dd5d9ed0","sha1":"2fe2eba4ac1828a76457a1b7b7af642a9b880708","sha256":"03b742a6efdb17797c84c2b5db25f5cda6a3361fa5e62b98662e321b26f77331","sha512":"fb1268c80a0b43f3bb624019a9b3eff9e8ddf903235388528f5485b2963af161f3f9e25e46f8d965e7a61e86554965c21205af57b486230302f6ee2e6347a9e1","ssdeep":"1536:EJ2ld7Fj2ABB/+mnAZ8Wj4Ehll8pFw96Yqgp9/kuZwrYVzhh:p7Z2Ar/+mAZ8g4EhX8pwJxllb","tlshash":"ac73027e54a8e5b0969ca690c41017bcb8e5c76bb38b03f8c5c607f7a6106f4e1b7789","first_seen":"2023-04-17T01:18:25Z","last_seen":"2026-06-24T13:48:58.829904Z","times_seen":956,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/bootstrap.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/bootstrap.min.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0pTN7woZNsqF1yMCEe4qZHY2%2FCAExPTD6y1fF%2FbtZyGR%2FQ%2BrPAWIhTFV2k8%2F5bdTLf1ntoJnp%2BvzSpQgV%2BwPDBiKXaUI3kLbV3fp6iSKQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f99b963181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51039,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (50758)","md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-06-25T02:01:21.521822Z","times_seen":124818,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/images/payment_logo.png","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/images/payment_logo.png HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8241\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueh95oDWq1bBuxpdwdGazKsDWz1F9fmQJNHoNiNo4zWK5FFNH8yBdmgddbsjuZzgCPfMRifCYdS1a3UC0DLzZpAjnUOfbLTX2XTpgzptbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c0c86fa1bbc3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 429 x 36, 8-bit/color RGBA, non-interlaced","md5":"ac9b415940b7429790cbc85c30a745cf","sha1":"4e0f9887b3405ca27f55cb01344176db5aae69c0","sha256":"6eb910b14ead38a228cc5d0848368ad319c44f8633f28df19d0fbebd48ce4633","sha512":"3969e35c5dacce916ae23022260f10bdc395073e466473e2376412a6db365ca26d8e5b982d29b0cd3a2e9932d9187141073a80ea0b0e93a7c6dac1291ea1d4a6","ssdeep":"192:phgYQBmxwUgUwkMsC4i4Wje/Lwg+bmdp0KH+2m7:bgYlBTwkJzi4WiBXf+p7","tlshash":"7102bf8605ad6c20b56b15298543723100d4d7275efb8364ace36f2a92f1fb543ff672","first_seen":"2023-05-23T01:37:29Z","last_seen":"2026-06-22T08:53:31.043443Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1084,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/css/typekit-offline.css","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/css/typekit-offline.css HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=604800\r\ncontent-length: 203\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6emJzLji8mfQgT1uLl%2Bhr4P%2FZl9hNT%2F8wVmlWzBVbwHDREcDmMMI7OqlBpwayXpoON%2FR%2BcQdDyHqzig%2F7WYSRFw%2BM1i91PtPwlRaM9U%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9bba63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0dd1603593ea2021778b1d1beb48680c","sha1":"96846fbde28c576369c383f8d9c779113c7afb14","sha256":"6654a7b959e84cb1b98a097f55eb2ee5e2f4d104257dcf159c5058d277214f6c","sha512":"8644e4b220aa55539db134f37e4b29b44d64eafe5f00ef5de5df62a8751366d4c60e220971e5a6b12ad708e3b7f01210a683238509ecf08aa8650a83b59933a6","ssdeep":"","tlshash":"4f11a700c40f9639b1601ddb338bb79e9a0d2807f509d4276750bd2b8ef262a23d1b5e","first_seen":"2023-06-29T11:05:56Z","last_seen":"2026-06-22T08:53:31.037595Z","times_seen":36,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/images/gallery/storebanners/10275_1920_600.jpg","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /images/gallery/storebanners/10275_1920_600.jpg HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Jul 2023 17:32:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 355300\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\ncontent-type: image/jpeg\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bfz26gM8Q15WAR3c65NJpE9lVXQmbBgdoc2dDSvE4WkBojLjzEZVRgAto78F%2FdVrRHM8qf4WHbYfmp%2F%2BX1osMlVXI4sU3UzAv59o%2BSyWgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c0c86f9bbad3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x600, components 3","md5":"7738cc2267bfd2259f33ee85bbcbff94","sha1":"0f85243d7ace2e37bdbe97798d2552a0047e50b4","sha256":"084a4004a2de2f3cb28eff02cf8dac919b59765349db56ef6218577374d99206","sha512":"c32a8fd8ea2a7a63876a85017f938b9a127fae18034339aca9389529c82d2397cd5074fb223f4a90e32ee1a02be2dae5101b08f47e55926d4ab7c43f155c0f49","ssdeep":"6144:KFYvdEyxIRBC5dhJFh/Nlm8l6pJqEBNLk51ks8w+ufsOOrWg2Og:KyKyxIXKxP6pJRBNLk51l8w+SOUOg","tlshash":"ef7422c49a71b64dcf6fa06b38b7cb72f45605b17937fa091d5c9cc32ca028aa212774","first_seen":"2026-01-20T06:31:39.602795Z","last_seen":"2026-01-20T06:31:39.602795Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":979,"receive":678,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/images/gallery/avataraut/DhruWeb3%20copia.png","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /images/gallery/avataraut/DhruWeb3%20copia.png HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jun 2023 15:48:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 955609\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNSgt3f4N%2FS35CRJ%2BbbLa47Vn%2FQWPgaQu52woxq1lTj0GvlbKbjBvFqy%2F60RJ9PeJAACVPA%2F6Rr%2BjXU%2FULJkmawHBarBXcXDZj68OAzQsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c0c86f9cbb03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 600, 8-bit/color RGB, non-interlaced","md5":"669a2bae7f64143f3e1bd39fc90fbc59","sha1":"d6c483b3df537f9a52805ff52b3524f5aa83d8cf","sha256":"67794eeeb8358ac8bcc2bc33d2cecfc2bfe0dd03b04ba02253898f654b8f47cf","sha512":"ade17c3d074edbecaa10d60ecdac63ec0de9d089293bf9818011598a9cfc702de37707bd8b999fcf6b37febaebdc56af11bde7852b5a8f29075f494969270ec0","ssdeep":"12288:cjnizW8GSKyM+dq8Eg6EHuIenEcxuzxAwuS0GBizpGDzHmc9MA1elt2TeDjOsrD1:cTSG+dq8s532uS0GsYDDml+wKGD1LIMV","tlshash":"e81533f89c79dddb1c271821a93eed65b54c47b185d6abf87822f70e620eca811d8f04","first_seen":"2026-01-20T06:31:39.603803Z","last_seen":"2026-01-20T06:31:39.603803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":995,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/fonts/myriad-pro.ttf","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/fonts/myriad-pro.ttf HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/templates/default/css/typekit-offline.css\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\ncontent-length: 47934\r\npriority: u=4,i=?0\r\ncontent-type: font/ttf\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0gTUCWI7h7Nh49JN84nECC6vHrD4BOCRFLQb9KXQraiW%2BD6bKCYDvo6AOh3U2EK8PcQ77dX83mw3BAMhvZOF4Q2KVF7F2xakrdcePnZpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c87030c7f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47948,"size_decoded":0,"mime_type":"font/ttf","magic":"Web Open Font Format (Version 2), TrueType, length 47948, version 2.7536","md5":"da79be72bb812d71009285d75182813d","sha1":"d14a681d6890ad3bf5fea9e5d2f7b3bc9b5d92a0","sha256":"f648f6587a7cb9eefe5788e0b5d0410fcaa78cae67b53afe341b24b54ae1d430","sha512":"518c05d4cdb8f4814207b19ccdacc08e4216661ec9e409194e0e9e1e279ef88b3de7217e552b5d1d152b3d345c7350c13f6ad312571531cf4af3c85d5cf793cc","ssdeep":"768:dwp/WCiQtNwhh1wgUH51RJ4NfwKBSbN4CSHFgwpguvTEzX7b073kKsOp+T:Kp/tHEwL5veNfwKBxCVwpguvTEzXik1B","tlshash":"f123f23cf6c80984fede9df5851ab9bd2b76a830d0cd783a42496b44fd8c9c939490c5","first_seen":"2023-04-23T04:16:12Z","last_seen":"2026-06-22T08:53:31.040699Z","times_seen":16,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":314,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/fonts/myriad-pro.ttf","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/fonts/myriad-pro.ttf HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/templates/default/css/typekit-offline.css\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc; _ga_PNF0J710V5=GS2.1.s1768890670$o1$g0$t1768890670$j60$l0$h0; _ga=GA1.1.296169770.1768890671\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\ncontent-length: 47934\r\npriority: u=4,i=?0\r\ncontent-type: font/ttf\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9CJ3X4tOAvTvaDxPs6W2GBxwPEomaxZWdnV%2B3YLkyW4Gql21yCWVrTpNse6f%2BdcUJ5eDfj%2FeBKUBYLV7V%2B%2B%2F42gaUTwabRz5pFrYaNrGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c8704dcae3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47948,"size_decoded":0,"mime_type":"font/ttf","magic":"Web Open Font Format (Version 2), TrueType, length 47948, version 2.7536","md5":"da79be72bb812d71009285d75182813d","sha1":"d14a681d6890ad3bf5fea9e5d2f7b3bc9b5d92a0","sha256":"f648f6587a7cb9eefe5788e0b5d0410fcaa78cae67b53afe341b24b54ae1d430","sha512":"518c05d4cdb8f4814207b19ccdacc08e4216661ec9e409194e0e9e1e279ef88b3de7217e552b5d1d152b3d345c7350c13f6ad312571531cf4af3c85d5cf793cc","ssdeep":"768:dwp/WCiQtNwhh1wgUH51RJ4NfwKBSbN4CSHFgwpguvTEzX7b073kKsOp+T:Kp/tHEwL5veNfwKBxCVwpguvTEzXik1B","tlshash":"f123f23cf6c80984fede9df5851ab9bd2b76a830d0cd783a42496b44fd8c9c939490c5","first_seen":"2023-04-23T04:16:12Z","last_seen":"2026-06-22T08:53:31.040699Z","times_seen":16,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/fonts/myriad-pro-light-bold.ttf","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/fonts/myriad-pro-light-bold.ttf HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/templates/default/css/typekit-offline.css\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc; _ga_PNF0J710V5=GS2.1.s1768890670$o1$g0$t1768890670$j60$l0$h0; _ga=GA1.1.296169770.1768890671\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\ncontent-length: 47988\r\npriority: u=4,i=?0\r\ncontent-type: font/ttf\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKTva1XUYil1PM502H7%2FI0q3y87nkEP22HYbR9FQDWfo9b0XWXDO65Qus2WnKgjE3lG5FkTVyJ9UhpCEyz%2BfN6unYy3RKhL6sTdNG7tUHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c8704fcb43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47960,"size_decoded":0,"mime_type":"font/ttf","magic":"Web Open Font Format (Version 2), TrueType, length 47960, version 2.7536","md5":"ca950452528ce343dff28c10054c58ab","sha1":"f147ef844d4418c17c627a1b7aecc3705f9e13e8","sha256":"bf261754977fc591adaefd996f7d84e23fd1d64fbf891c185c331dc390224f9d","sha512":"e58bf41c4bd1289c00ab1173d114de37a1b1587e3a9ec388b2fbe82503dc2fe60d09b3f67aae0ace3a75e26112367c5d0b06a202d5bec4a65a413566c448f26e","ssdeep":"768:1Eu6fV+q41zXaPsJr6HuB+WtV0n+cZHyJKLMKvLxk0VdcNf5go+MVoQ3W3pJUSuP:1EuuV+q41zqPsgOB+WbD5KDLxdVdckoN","tlshash":"862301c62080ee110b3b60ea7e4aa17fd3093b764f88d55b4913b71a4a60afc9714d9e","first_seen":"2023-04-23T04:16:12Z","last_seen":"2026-06-22T08:53:31.031396Z","times_seen":6,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":69,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/webfonts/fa-light-300.woff2","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/webfonts/fa-light-300.woff2 HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/templates/default/css/all.css\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DORx0HpbslAmsW9fOi5Pj973OEyVEz%2BmpopTIX%2FDukzytgsMePndYZxjU%2BD%2Fz%2F4Te3A%2FgNoIqX3PPmmvmT%2B5mHjptLFQvXv9uKO84rEoig%3D%3D\"}]}\r\ncontent-type: font/woff2\r\ncf-cache-status: MISS\r\ncf-ray: 9c0c87031c803181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157064,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 157064, version 329.-17761","md5":"20bbccf14518922fa95a440f4c217d9e","sha1":"3b6df1951440663f01dad7a45c034ce6ef506895","sha256":"558c1708821688922a35f8105bc9b840a73ae02165d0016746c71741ab48128d","sha512":"80019d309470975a4d0ce6357a60b3cc703f77d411cba7e127d8d32eeca65a34f206f71d0a16f3c463122091480d6703fd07659e4cc333b30803267362c9732d","ssdeep":"3072:3d+xwJ40iLz13m5Py7Ru5w3isdq9nw1D1YuWAK51wnvIZ+KSxtVo:3MxWveZ3m5L5w/Gpu/K5Wbo","tlshash":"4de313cde609258049d156b93f9e9bf348bab7b243d1a0a33e00c0057d76f4948ed6db","first_seen":"2023-04-27T14:50:31Z","last_seen":"2026-06-25T02:41:27.604194Z","times_seen":729,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":374,"receive":530,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/fonts/myriad-pro-light-bold.ttf","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:10.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/fonts/myriad-pro-light-bold.ttf HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/templates/default/css/typekit-offline.css\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\ncontent-length: 47988\r\npriority: u=4,i=?0\r\ncontent-type: font/ttf\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MOtpdZGfVauvxvG%2BcwXbD7rK1kmK6g3zc2m%2B69P%2BuHiCmEzV%2FJUeQIbzvoduMQDrPhhhDbB7SxWF3YBEPP8Nx2d9mRd6eF4FkO28zh%2B9FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c87033c863181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47960,"size_decoded":0,"mime_type":"font/ttf","magic":"Web Open Font Format (Version 2), TrueType, length 47960, version 2.7536","md5":"ca950452528ce343dff28c10054c58ab","sha1":"f147ef844d4418c17c627a1b7aecc3705f9e13e8","sha256":"bf261754977fc591adaefd996f7d84e23fd1d64fbf891c185c331dc390224f9d","sha512":"e58bf41c4bd1289c00ab1173d114de37a1b1587e3a9ec388b2fbe82503dc2fe60d09b3f67aae0ace3a75e26112367c5d0b06a202d5bec4a65a413566c448f26e","ssdeep":"768:1Eu6fV+q41zXaPsJr6HuB+WtV0n+cZHyJKLMKvLxk0VdcNf5go+MVoQ3W3pJUSuP:1EuuV+q41zqPsgOB+WbD5KDLxdVdckoN","tlshash":"862301c62080ee110b3b60ea7e4aa17fd3093b764f88d55b4913b71a4a60afc9714d9e","first_seen":"2023-04-23T04:16:12Z","last_seen":"2026-06-22T08:53:31.031396Z","times_seen":6,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/images/gallery/perfildtodito/nueva%20cara%20dt%20copia1.png","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /images/gallery/perfildtodito/nueva%20cara%20dt%20copia1.png HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:10 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jun 2023 15:48:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 231949\r\ncache-control: public, max-age=2592000\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8uVvnr3ipZX6cbztnMH4YDQynkejbqKEuYO%2FJCfXt%2F7D%2FLN516eDfvc4KWdxe7hmUvq%2BqE3Tf4%2BVs5%2Bn%2BjZAEvFET82Nyfp%2Fypcp3Ih1%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c0c86f9bbac3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1890 x 792, 8-bit/color RGBA, interlaced","md5":"5bcb36456d2e53963fd20f4366d3d52d","sha1":"1eac3eee9ae7a6a48bb15dc2ca349d32b3e4c5d9","sha256":"5472c6760688df5691b136a6652b8477caf4bba4c950068ae4d45ac1418fa399","sha512":"54b8c5757ecff5b822445e78d0824bdc5bcd39ac9be671da010d3c676e5702b6af64e93e5f4dcf20ef729b7c874b8be74a4a5228724421ed75fac62f531b6d48","ssdeep":"6144:wIPFtwOe+XrBlgDDzLB8jYBget2E4kXledjXN:wIJe+bBu/zV8jYlV2j9","tlshash":"bc34124cc72bd629cd2f317920959ba3b01651be238009f4aff1b4bdcd9acda59ed184","first_seen":"2026-01-20T06:31:39.607724Z","last_seen":"2026-01-20T06:31:39.607724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1007,"receive":719,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/popper.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/popper.min.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbNiOw%2BVlTY%2BMx%2FC8G%2F6TPpgeiQEWWvyeWab83DLjwOf2lmgrhSWO%2FV9ZT8UEB15rSyD0xHDAAMLs9a%2FwfsJ2muCGNliVPddQDe7iojfdg%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f99b953181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20497,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20322)","md5":"33088d18ba6e6c92617c32d1e72b8b0e","sha1":"de37cafd81f1ccaeda4f8383c9099ac81bbe8ad2","sha256":"116cff9b4552900945e922c257322cc348ff57bb3f84c5fa75d91ddda3ae369a","sha512":"0f50515b51aa4d8784f602f50f8c0133a5b33acb53c67b0a573e2c2fa48f2f82154c75b601a66ad4123ed86f374ee2427f738ebce11a66e97dd6f1325ea9e7ed","ssdeep":"384:f5LFrVVVnCQvIR/CFU4hHPV4kdxXvYqo2D75zCx+vI2am3MxGpGTgd/9jt9+Db90:hNVVVnyiU41xXvlD7wx+v0xyGTgnZO90","tlshash":"2992a2cc3294b06647e791a7a07f960eb2339875650e9410f299f2e97c30ef9913bc79","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.019383Z","times_seen":38,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/templates/default/js/theme.js?57fdad6851467bc85aa55b88c0690d58cff7489e","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /templates/default/js/theme.js?57fdad6851467bc85aa55b88c0690d58cff7489e HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Nov 2025 18:29:45 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lsSUyYLNnDdOyQmIWKRX3RMM45TTKkPPvI9qA8deJ%2B%2FyVmEWT0L%2FXVXTZorXT7f9Hq1HVYtiLbl%2Bz2NJ2%2BX50XFAnJWHXrCZbcnXJhoJuA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f99b973181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23556,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"89497079f39d6f33d268ede60bede6b6","sha1":"c9a9ecb3902de223e71263227da4567ecc65153f","sha256":"19c126f6733b199c4c24256a01522d20a8e6d7934f0ba902249d9c6fde2fa0e6","sha512":"178493fca86dc8b32977a42613660577324e4a108425f7dfc4a4eb6b66f9100ec13c328309299c902ce0a3e10f726ac471ffc3797165bb9f041559cb2cfb9341","ssdeep":"192:F/MVslUywZmULTgxvuuhSifkiclKi1rWLysFz7LulG7LKdznVQGyf7ySryeIKjyX:5Zsv/aP5u/7iV331R9L/rEPp403","tlshash":"e8b2521cb4f3116884b3707a5bff59043ebc602b5109cd107d6e99d19f80a65b2abbaf","first_seen":"2023-11-12T03:50:08Z","last_seen":"2026-04-04T16:37:24.882568Z","times_seen":4,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/includes/js/imei.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /includes/js/imei.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Feb 2022 14:15:04 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=216000, private\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1cQZ1T7mhgzjMzgH%2BZZrBm339iZe%2BgaFSw9ztlC8teQDpw7aWKUT2plwtRa%2FceWtzmKPBf139szk5D7YjROxWAm1YWJHYdHhG5gJJaNOQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c0c86f9aba03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4120,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"b3b0647045299fd93a560685c5caad8e","sha1":"801634575911a1fcb2355999fbcaecee4532dea9","sha256":"202f5dbd5c191f7400b36873296bac72138fc1e8222815cd955cf4b7254fce1e","sha512":"ed847711b100bcbb0111113f2231132651641beba6ec7b741f3588e01cf5e32b5d6575bc13ebe6c76e23026fc468059a1f458d96c372ca52ba808e196f25d969","ssdeep":"96:I+xE+wlLF+wE+/jX4Dpqqs3H0Vk6pofsEAMbW9mMRcMAMnMUd6UgMR1MGMnMU2I:tYlLLnjXeqh3H0Vk6pofsnyW9mMqMAMm","tlshash":"fa81f04bb3d3ac204bba266a0d37da843c2981273c36e643bc5e5954cbe0e55d237b60","first_seen":"2023-03-08T00:29:46Z","last_seen":"2026-06-22T08:53:31.030034Z","times_seen":38,"resource_available":true,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-20T06:31:08.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 20 Jan 2026 06:31:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, max-age=1, private, must-revalidate\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google-analytics.com *.google.co.in *.herokuapp.com *.ravepay.co ajax.cloudflare.com chimeratool.com *.chimeratool.com *.elfsight.com data.chimeratool.com *.flutterwave.com *.stripe.com *.atfawry.com *.google.com  *.facebook.net  wss://*.citruspay.com:* wss://*.google.co:* *.citruspay.com wss://*.fawrystaging.com wss://*.atfawry.com wss://*.fawry.com wss://*.youtube.com:* *.youtube.com wss://*.tawk.to:* *.tawk.to *.facebook.com *.fawrystaging.com *.mastercard.com.au *.fawry.com atfawry.fawrystaging.com *.facebook.net *.mastercard.com *.razorpay.com *.google-analytics.com *.securecode.com  *.google.com *.dhru.com *.paypal.com *.paypalobjects.com *.googletagmanager.com t.me *.t.me wa.me *.wa.me ; img-src * data:; font-src * data:\r\nx-dhru-core: DHRU FUSION\r\nx-xss-protection: 1; mode=block\r\nset-cookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc; path=/; HttpOnly\npagelimit=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QzyBhcHPmRenSn%2BfKc9pPSbVwp%2F0bIXBgrQhKFTj7rNoJlnpEIX7cBXxX97iGQlznankQaB6MVVyb4r6zcgOIH8KudXligaPp4OiSMc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=9,cfOrigin;dur=793\r\ncontent-encoding: br\r\ncf-ray: 9c0c86f33e40569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Chosen","description":"Chosen is a jQuery plugin that makes long, unwieldy select boxes much more user-friendly.","website":"https://harvesthq.github.io/chosen/","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":120185,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2626)","md5":"d52876f7c44ff3a950e8d1bbc3f57433","sha1":"f24ef95239c0ca1c6431ab06e509795d26d8b740","sha256":"eb86c4f27f79dd9bde595b5478ee6a2ceac75fd6bd4bf06f2fc028f2c2173a48","sha512":"b9d6fb91e87b72f148e7dc1908a48e0219697f48fa484ef40cb482fc2041844ccaa1a5da024987da2662123497f20721bc46451d21a8e1c1a74611800168b395","ssdeep":"1536:4wGr5mIlrVXv+/8Z9Mbk3FRvzvzozzFSb8KayOUgAmnsNGvJR:4wGr5mIlrVXl3FBj8z88EFWvH","tlshash":"20c34a129eea2867162322e766bd17173b5cd253c103ce46b6be57dc4fcee80598326c","first_seen":"2026-01-20T06:31:39.611056Z","last_seen":"2026-01-20T06:31:39.611056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":846,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":809,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtodito-gsm.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"dtodito-gsm.com","domain":"dtodito-gsm.com","tld":"com"},"ip":{"addr":"172.67.138.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtodito-gsm.com/","date":"2026-01-20T06:31:09.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtodito-gsm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:28:14 GMT","end":"Fri, 10 Apr 2026 11:25:26 GMT"},"fingerprint":{"sha1":"33:5F:D4:8D:2A:0E:C7:2C:4B:F4:34:5B:52:A9:3F:30:71:9D:B2:89","sha256":"95:A7:62:D9:E1:03:13:79:9D:DB:3E:A3:0C:FF:EC:82:08:00:B5:0F:A4:DC:AD:B6:86:61:96:61:55:AA:67:C7"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: dtodito-gsm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtodito-gsm.com/\r\nCookie: DHRUFUSION=dc4209ac5183ce300bc4b88e11400edc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Tue, 20 Jan 2026 07:19:09 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5rmj0vtFpUSDMjNZmqn8aWxajk9mjl94DdaiFqL7fYH%2BJMc6%2Fq3iWSkjair%2FjyRlccE8neu725WC0gNtd9PIb0WoyTxsgv3sgiGpnV6MGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Tue, 20 Jan 2026 06:31:09 GMT\r\ncf-ray: 9c0c86fa1bbd3181-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-25T02:14:23.192268Z","times_seen":377696,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"dtodito-gsm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}