{"report_id":"cc94efd0-a9be-44ee-8b42-be6721b54464","version":0,"status":"done","tags":[],"date":"2026-07-07T03:02:21Z","url":{"schema":"http","addr":"duilapcmrez.click/","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"title":"du - My Account","dom":{"size":126417,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62993)","md5":"5f2ff403ed69896f9d2f3abc8873b13f","sha1":"68d25d92f0b92eec6a361429552dd8a9be55ba55","sha256":"62b5660a2847227714596c619f5d5c38e2a40041ba668f46737b4bb6c40fe4fd","sha512":"3a7f496ec84524e9b6115d3eb43fc9f342a298ba564f62bc846194b9e9131e29e6d1fe7cdac11db8a22e8a47e64eafd53be6ebc6c4cbd06891743c671ccb5035","ssdeep":"1536:Mvm/OSJFTREuqn9SJQq4pPhGzWELEgK7T1oPhziI78vikUYyZQB3wXPgOJLn1WPL:nDJFNESJybl7YWUYye2Pg40tXJoy","tlshash":"26c36df1f781143463d388aab07b6b49f175c647cd069990c669d9a37dd8e82083bfac","dom_hash":"domhash844187accb12eeaaff2a611c60c7bc76","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"duilapcmrez.click/","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T03:02:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-05T22:30:27.189477Z","alert_count":0,"request_count":2,"received_data":1319449,"sent_data":997,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"duilapcmrez.click","ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":124,"request_count":31,"received_data":2339069,"sent_data":20113,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThreatMetrix","description":"LexisNexis ThreatMetrix is an enterprise solution for online risk and fraud protection ('digital identity intelligence and digital authentication').","website":"https://risk.lexisnexis.com/products/threatmetrix","common_platform_enumeration":"","icon":"threatmetrix.png","categories":["Security","Browser fingerprinting"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"monitor.tapper.ai","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1463478,"first_seen":"2024-10-22T13:09:41.449331Z","last_seen":"2026-07-01T21:31:05.049668Z","alert_count":0,"request_count":1,"received_data":149609,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-05T22:56:15.289129Z","alert_count":0,"request_count":4,"received_data":1879483,"sent_data":2176,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static-cdn.trackier.com","ip":{"addr":"34.149.104.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2015-06-16","domain_rank":619039,"first_seen":"2022-09-05T09:59:38Z","last_seen":"2026-07-05T05:37:19.073075Z","alert_count":0,"request_count":2,"received_data":14119,"sent_data":960,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":1,"received_data":40941,"sent_data":562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-07-05T22:45:48.873657Z","alert_count":0,"request_count":4,"received_data":20766,"sent_data":2786,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d68ccba8a8d3c0df7cede7b2787dbf77","sha1":"75235fe5cfa59788bab08772b5367a81965616b1","sha256":"4b1998c36c6fb083398c350abaf2369e03e2784d0862571252b9352803bd2393","sha512":"ba37879d649484de79a6675d93d62971c28bfaf967c8f2b241696e9732b4611b6efc3a9b9da471dbf7b6cae5f2ae5e1be8abbf46956a034a7348be8c7949fc4c","ssdeep":"","tlshash":"f751b7f5b395103149f28967743eef8438b14a82dd079101c75f9e68a8d4f524a36bdc","size":2449,"data":"","first_seen":"2026-06-26T21:08:00.614191Z","last_seen":"2026-07-07T03:04:05.447882Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c31ca6f5d573cd79ec9e6420d4640caa","sha1":"323aab804c36f4893020ae0ee789e6f1a45713b4","sha256":"c52321fca51cdcbfe7854eca4847d3620d330af5b1a3b0926100a0335b44024f","sha512":"1099871566c98fcb505a89cfadfd74023025805267a1430164f33d1323ac77091bd832474657fc2d05b6d56ac35a54c45e2c51ae673ab875e618f2824da51fae","ssdeep":"","tlshash":"23d0953d7758547113931419972fbf00a47306034d415144c2654c447c30845df162df","size":233,"data":"","first_seen":"2026-06-26T21:08:00.615252Z","last_seen":"2026-07-07T03:04:05.448402Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2437b76aca200af3fad4af43cbcbe895","sha1":"0f9d6c0a722a94ca711db818f6b143a4cdffaaee","sha256":"c66f4dfd3eb3948430ce7e4a6acaa5bcc8d07326b5a3494dc8ccc0ac13fddf84","sha512":"6001c83114e0ab0c80ba53d9141a14de55916e1fe8d7eb137118ceb4788950bdb4b0a3dd3ee997efba8c9ce15efa0ac9385c6a98f2d40f99e9ce97bb0eeab0da","ssdeep":"","tlshash":"595162b777853ab083e5e679207fbb04617e57c268008581e63ddac46d78c424abb8fc","size":3058,"data":"","first_seen":"2026-06-26T21:08:00.616289Z","last_seen":"2026-07-07T03:04:05.44892Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5803ee53326d8fdb77b42c7df2b715c","sha1":"eba8ed5d8ab153a3f33be07438afff22858e4ac6","sha256":"27a8ab9c51185a6508d66eefe773c21f4bfe6b889a15c5e6cc13ae4f92ccb13b","sha512":"e839147593a3d2b1a9061da7294c4b4b6af19648f48d61dae36fe6d4337ed8cad6d9e9e4096bb3166e7f7c5181368e8f0ad1d4210347a09c004e5fa23311460c","ssdeep":"","tlshash":"a321e0fa7251513e62f5161451aef3c0f6774bb24a0b8891c63eed02bc1cf4d8e3298a","size":1284,"data":"","first_seen":"2026-06-26T21:08:00.617379Z","last_seen":"2026-07-07T03:04:05.449431Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3284e8aac6c03da8acb33050dd7afc01","sha1":"513f07300c2bb20f3074f127bae093ba1f44ffe3","sha256":"9e7f808a05c95aebfedffc87cb74cb28ef398179f01a2feeaa50d0e84ace7379","sha512":"ed32688c6279d2e9095a437d08be9ccf4990a1649689bae06f2823f713ff7819aebf7e85df2fd560b0a9136dfb0d02d23895e4af221177570d56e758bc404905","ssdeep":"96:ioVKNpj0GbsbjYCq+mph2HTqw92ZrDtBx0q2mwBTfbJqz4S3fdkSlGiR/tpBeb:ioUPj0fU+whwH9ADtBxhJwBTflqzD3fa","tlshash":"65c1d6eb73c23df017f2293864afaf4091ba47d11c468456d42ad941bd3cd8e06b2dac","size":5955,"data":"","first_seen":"2026-06-26T21:08:00.618375Z","last_seen":"2026-07-07T03:04:05.449932Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c29905518c909537937c0440b5c7cb0d","sha1":"a4c3d45bfee5bb4c384a1d508271eec4b1f84fc1","sha256":"31024ee57c1fca4d9f788edd66c8587030e5d3a0c1b72c6948d383e3ad3d34da","sha512":"7dd50bf486bac210b182009952113806850641e6ef4122bc7a5c4be789776084e49002405c136f11f2aa1e28e7411008fe2fd9c95f78909259ec1d051106165a","ssdeep":"192:nNht1ifxxba+CXMIwObnXDm+35tUUBt/V9I5Q/K2tB41dbuhBMqZB+9pckmslumR:nX+fObn9JZnOg4Pu7MqD+9lrua","tlshash":"4a72c4f4b3e730ba03e61464447f9786f474de829909c0e1855bed943cbca454a77eb8","size":16757,"data":"","first_seen":"2026-06-26T21:08:00.619597Z","last_seen":"2026-07-07T03:04:05.450467Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"582528c1cc0193fd9eff5eb5d0fd8f83","sha1":"9675cd39492ec6aaa176e8cf0cc3a14eda471fb9","sha256":"ead98cd113eafa0548a94b0a3698ea7b973d5a4dc6f877a7ee1089867ecc800f","sha512":"1f232351ec8ee250e2c34929972cc6e8399a12fc21ce53ecd8c7515157d1fd8a06b5c634d54d7b5e7d7bc4d163b222d1cc5608f5b8cf62d6ce54bad3a6f9e4f6","ssdeep":"768:YSJWn9yAeKj+4pJRZMCkKiqF6TjM3GpQCPo9HpkDOSiEnBiJx6tCpXXwtEe1+T2e:YSJQq4pPhGzWELEgK7T1oPhu","tlshash":"ba033cb0f3801838b2e3cd64f0ab6f4674718b83cb078658c855e9727dc5d636676aac","size":39019,"data":"","first_seen":"2026-06-26T21:08:00.620692Z","last_seen":"2026-07-07T03:04:05.451209Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a3a1ef5c962f555597ef6d0293f456f","sha1":"2048016a37eafd242bb4406faf22efc7bf3ca50b","sha256":"1cd287800b3febd7edce61523e148c442f5a9a78c3b49e660eb59ff23bb56bd8","sha512":"35a765c30af254569cb878064df66b849151a4048b07efe4be745f9ad579a53b4c092a9758eab51f4560e8070dd09cb0a10b7a5730b9d43d2942b535f1815e03","ssdeep":"","tlshash":"4fe0eb4b30961820178a0cfd22b2b20d30d33320b31b1c20ccbcfc282962edf4101d8c","size":295,"data":"","first_seen":"2025-06-10T12:35:48.086139Z","last_seen":"2026-07-07T03:04:05.451759Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/__ext?u=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Fsmartbanner.js%2F1.14.6%2Fsmartbanner.min.js","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dd74b8e555381aba9f392a6c18ef322","sha1":"735dbd5c6dfaeed0a9dace49d9797651896052a1","sha256":"9845b2b9eabf2f381f6c27580626e67e65bd4c263354dc0baa1923af5becd4c6","sha512":"a8483c17296a3651e6024ab5b3a9f3a9f31172128fd3618275b015a47fd7e06338e004e0a5f56f59fee3ae2a3f9ab22ab844097461ef82bcc526d37a2c16bf11","ssdeep":"192:3e73F9nkMfF9RduF9xM1te147IcMUF9qRYo3tVctWS:3e73F9kMfF9DuF9xote1gIUF9kYmIYS","tlshash":"dd42620e7ae0b1b0c28751ad696f150a70b4b92ac408c446e279dad86fb0a4643f7f7d","size":13142,"data":"","first_seen":"2024-05-01T18:22:04Z","last_seen":"2026-07-07T03:04:05.444802Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a30c6ef4efc391afced744e0c18c1097","sha1":"b9f1e5ae1936d33d82d1cc4a3e9f22acef19032b","sha256":"c00e351d5258fe117be3756eb7855efe9539587c28ac79874ad99f0ec6ba3819","sha512":"d0a619b3e5b3a375ca2b74b0f60411fdc38254b75c74168c28f47fcad5f690c2a58d4b4749de5c505a33c8d34f385294183b3dfb1ce62bd4471b167268aa61c0","ssdeep":"","tlshash":"b1e061e77817087a75df05fd67b5901435836109640dc922fdfdd4241f61a97cc5e89c","size":434,"data":"","first_seen":"2025-06-10T12:35:48.078271Z","last_seen":"2026-07-07T03:04:05.455537Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KJPLS3Q","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ca4a98d6906957bcf8f6ee16dd88bcf","sha1":"94de7c8897921f9308d491dd17563f703b2c41c0","sha256":"96abd5c8132bde8b5d88605199e36196641bf9d7f7a928e4d15f3aed3d5b8b32","sha512":"1be950ba27d2197c2b26e04cd1163cbf04bca1b6eff430424861129a5ee2688db27e36bacfb80d141345564bac98c3c7f9745c939867ccd1e71b8bc641820f09","ssdeep":"12288:Yjr4OhQbB3DvTc0FFwbb28nzKXkwmx5zh:DB3DvTc0g2sWXFmXN","tlshash":"62e429ceb3c5b4769396e468943f018f697e20e3b44c9895f089ccd42e7056a6163fbe","size":659145,"data":"","first_seen":"2026-07-07T03:02:30.744744Z","last_seen":"2026-07-07T03:03:14.83245Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"20a3b1e1f6332005d3a00b47c6f3092d","sha1":"787e0ddbb05f6e6dc019f68dbcb5c641c628547a","sha256":"d6731c3de00cfe1d418f0905d5b78e1cc7c382a95e95cadd44aa22b81a98c5c5","sha512":"ffae73ac43daaf89b463ee47ddaddd2d7c9800a96bb1145b2afa59a352b3eb08e4e7c0d88b07585a54dd3ebdcc39e563b727a282015c4b002f230a6315102ce5","ssdeep":"12288:VOuNtbumQUfi2q0LWNLaXnymCAYIJ4wyzTmWRF8WdWT0KZ1HcezE9:hb9+kW2XheRmWdk0KZ1Hi9","tlshash":"a91549d97152b0a95362f6f564376159e33e5826c80c084e7288d8f02ef4879f1faeb7","size":895421,"data":"","first_seen":"2026-06-25T14:15:22.826378Z","last_seen":"2026-07-16T13:33:45.653776Z","times_seen":12261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWlsYXBjbXJlei5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=p3cdjorbqv5j","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d8463112156f537e64bc0cc795dc133","sha1":"3b21c915761369b640a86538e29ba402098ba12a","sha256":"b270cb1a41b1cf6fda1dd535019b54da06652f28e7ea11037dcc4393c60647d7","sha512":"f9906d38d98f0ed74ab190030b94625a420425ffdd4cb75114c533d13eff6873af4def45fc015dd2be63d6c62793164fe93616183f43e3dd8ab0d65308c53ee9","ssdeep":"","tlshash":"c3d0a7eb1441cdf7cda09dab9743d1a678efd0b780a981f405e04c522ce1c9110245ac","size":252,"data":"","first_seen":"2026-05-25T21:58:32.98547Z","last_seen":"2026-07-17T12:06:55.356751Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"329272a3704401ea3578e1234387f374","sha1":"6f0ebd9cc0a6cb3746472d583f4bac609d270046","sha256":"42b15feb684388aed3f811e13a4a1814ebd7bf3f882d1dc45dc2f048f52bcec9","sha512":"4429d869f4f58573f67ffb545615f039f7277956b494d916481e45197d9f30e637c1439525bb9636b4b419fe79b5d909a0f844afc3d59d43e58622bf3cf61995","ssdeep":"","tlshash":"f711142d38f76808d60f9bfa365f978d2477b8115e80cd90c149c094a555fc840a1bbc","size":926,"data":"","first_seen":"2025-11-25T05:36:36.356824Z","last_seen":"2026-07-07T03:04:05.456077Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KJPLS3Q\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"279279ecae22f6a89e1c8ad830417055","sha1":"798ad555e1806ab78af40dbfe01f5179d7815a50","sha256":"a0d2ff4216ce8486634368fb90e31e24b32ccfd39e4d138f400322b55b196fcc","sha512":"ddd39107df30bbb4ac253e3452c21205499c49a9c9de6b5367dc7535ac22372b79883250f84c79b697518e2a423fa66a37321fa11a116387d5dc9df689bdb69f","ssdeep":"12288:Yjr4OhQbB3DvTc0FFwbb280oKXkwmx5zh:DB3DvTc0g2fpXFmXN","tlshash":"aee429ceb3c5b4769396e468943f018f697e20e3b44c9895f089ccd42e7056a6163fbe","size":659116,"data":"","first_seen":"2026-07-07T00:21:32.908136Z","last_seen":"2026-07-07T03:04:05.42925Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49fabc6e91fd52472998c0d9d97a4bf6","sha1":"57b2713b0915385747263bfef9b065ef787f66fe","sha256":"9c7189609372877113e807cdaf4ccb851bab7c2746832b91bc848417f150ea6d","sha512":"6ba1aa07be5b4e71da3ca04049d2df88530ba71a96a2a4ada7b99ca0f8fff32cad243c1ea802b9a040f80f925e46160ea072d69a75c1a4968e4a941ec04c3a70","ssdeep":"","tlshash":"b3d02eaa3c32e4a002042eadb0bbf7086382222a9ca0909505c9c94ca530fd18e82982","size":265,"data":"","first_seen":"2025-11-25T05:36:36.375137Z","last_seen":"2026-07-07T03:04:05.454996Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf408b7a8ed9d53d970214550e7f23ca","sha1":"7836a2d5542bbe30aabf9382c59c4f8d257027c0","sha256":"b337b1a43a2256c00c890566902c1df8b92743f507573c8d25d19192c330b0f4","sha512":"be65351595e7e0639a09d4971391305d62afcb25298e411ec5da815732f480a7c49fdc8d3221fbad78c5fb9cc204eb07e6d8f0af5bcfa5e349627329e6574f66","ssdeep":"","tlshash":"e4f08b4f76105020aae192b1c91fba0672165158478183a9725cc8e11d29c4b986fafa","size":554,"data":"","first_seen":"2024-12-12T06:25:26.303636Z","last_seen":"2026-07-07T03:04:05.457181Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2712b0c7bc66286472c5a1aca523b9e2","sha1":"9c75bc24d5226bc99ca56b24987fbf97e854c848","sha256":"74839389b2502c0c441d5f4ca03e9db0d4269c6bbae9c7bbd13e8968039bc47f","sha512":"37d4887d8fcd62c25089a6069c80ab5724480549bb73420c3d0371d604e96ffb120c3db67508d2593f6dd0a6cfabc617ca7f81b8b5c59666bf6d7d30894032a7","ssdeep":"","tlshash":"7d11afa5d122e427e3b3809e630e63c5d331f5c21b467981181be3519e606166af7b47","size":1029,"data":"","first_seen":"2024-07-18T07:46:44Z","last_seen":"2026-07-17T11:43:33.871782Z","times_seen":951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/js/main.541f8879.js?__cv=v39","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea180fed1e7d68cbee7b36538551fd73","sha1":"dec2b23a798eccaa7770931f6d383c42086db778","sha256":"7fcdebbbcf9e1271f2ddabbbfa097e9fe04646e5a4b6d0461343af4f1b5bd941","sha512":"e1c892f13c4d6a989d980105a9e81913e73ba35b4b239315e3ee8f80696b3b81e088b7be18b851772d0a99bb4a2428b87b3b12663eab82181072e4f21cfd3b52","ssdeep":"12288:5y7IST5H80dGLTc0hwBC2TwJyRMAadAw5B4+bFif+3vyX50v7nzmGLYj5U:5MHP0wBnbdahjg2KX50PmfU","tlshash":"5c057dc47291b4a66eab45c650bf854db33e1d09b40e8870f325fd98256d9c8b027fee","size":838014,"data":"","first_seen":"2026-06-26T21:08:00.605723Z","last_seen":"2026-07-07T03:04:05.442059Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-cdn.trackier.com/js/trackier-websdk-init.js","fqdn":"static-cdn.trackier.com","domain":"trackier.com","tld":"com"},"ip":{"addr":"34.149.104.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98b24faac2fa0126fd3ae36310e0e847","sha1":"f23054f114b2540c3b547e0bd4f97b2a7955a489","sha256":"bee5491f89b37c3d92638f58b768087c34e76c43020b83503f879a1b41176e8e","sha512":"3f88466b1cdad9fedd91e75bc25f5f9641f4962a616d801ca58e1ec830e0a3e40cd4e722bf934871ced7158f7be73fdfb89c348769d0acf4a49c7a4ba99acf92","ssdeep":"","tlshash":"4ad0c22939925128441720e96b3ff72027328312201df161be6c8a48ef60d779d158a8","size":285,"data":"","first_seen":"2024-08-09T09:45:08Z","last_seen":"2026-07-16T10:45:36.198719Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3ebe037b9ca3fad125858163f6336072","sha1":"4ff6aceb4c41a8cbfe91905a85b4da5a9c0838c3","sha256":"e0b4c01498649d918b56501bf41c8cf09e6f036342d32ac4d51b9e2dc3d5edbe","sha512":"1bb270b33dc67428f3f0c66dbf34247c0de5071ad72bec00648256901ee9d92d2468e503cccccb0a95bd04eb53c0de3492ebf8bf1aab9daeebe1647ff4e8ec94","ssdeep":"","tlshash":"13c08c89e692b32b32f50009138fd283f2122780514a24ab692da0413aab103d892b4f","size":164,"data":"","first_seen":"2025-06-10T12:32:35.004824Z","last_seen":"2026-07-07T03:04:05.454437Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82b0ea5e423aee48cc174a1d96ee2479","sha1":"fe7117b1755265c9b0fbc0d30c6d991616d6ba78","sha256":"d11cfd2f0b1d39bc96d0420aa593ee9f0ce89307582621387f1ee858ecb01401","sha512":"ed2a646f93ef9f247b5ef05ec9ca4fa26d5bfa80d4fbdd6e32a76bf8ccb2a7d4f86ab17ccbd48b42713a534a2c073bb459771b3c99c5e0324541ba4b4de34675","ssdeep":"","tlshash":"8bf08b4f76115020aaf1a6b0cd0fba0676179158878183adb25cc8e11d29c5f986fafa","size":572,"data":"","first_seen":"2024-12-12T06:25:26.362731Z","last_seen":"2026-07-07T03:04:05.447261Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd9c2ab07052b68042cf204c6726a06","sha1":"e7d89efbfdf3b3a77f69ed38b8823d68f9211eae","sha256":"06fdac54b7f9e0b4ba6b81db24a463e658110d4bd2d35d4d43d9ca4337b794a1","sha512":"424584d8e1befaf4fa5a7eaa0b15bce84709ceccc87a4dc6f3f1ab14bdc7df18568adeea5ffdda26133ad531b65b997268f9539774839ac5ada9c9cc895c4674","ssdeep":"","tlshash":"c7019ceff1128c743afe21bb271f3349346813520d019811445d8d482314f07d8b7bc9","size":745,"data":"","first_seen":"2024-12-12T06:25:26.301315Z","last_seen":"2026-07-07T03:04:05.457726Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadcallback\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7425ca005c7316f61b45059809059236","sha1":"9e1600a46f5f72eee06bc51dbf4fff2c7d9e330e","sha256":"2bd75dde8330c029f9b5501c4cb06d2f1859d6b73735c31a91f436053c11f01d","sha512":"9bb9e9c3c53a6eec109e5e5b1fca4c1309e01d8dd8e26162e2d84e5b4d4fb6c3c54dde28c3c098fffecc53330437903c2aa4ea969f74566b9ea494b9e513d4d8","ssdeep":"","tlshash":"d1111bb22a04f0384f3219e1e1fbcbb8e462702db15c85eca501cac42e7accbcf04456","size":1035,"data":"","first_seen":"2026-06-25T21:28:07.860638Z","last_seen":"2026-07-08T12:26:26.078001Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-cdn.trackier.com/js/trackier-web-sdk.js","fqdn":"static-cdn.trackier.com","domain":"trackier.com","tld":"com"},"ip":{"addr":"34.149.104.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22bbb8900fb45e3a4c3b20b8c49b8a62","sha1":"29a551794a5ebfb8284a29e20f39722c6a50efb4","sha256":"aad3defbd0301bfaf750eb1f512c10bca06b6354d5b79b4148d5d9b4d1c88153","sha512":"bed34fe0cd9e5a86d7f4b071cafc9a71bd4f7625945e7dd209fdd287bc30e16fa5b7cd1f46b41e4a49936b00606b67c9b54557bb9f0c8d4140de3526cb34d25f","ssdeep":"384:43IX2vMBfTyulhzS5srgIPfFDqc+e30eob92ch2SkpfR:43IGQuu6sFW6","tlshash":"ea42f79f31577434a6c22075188f384ae1ba565c691d81a0e792daa13cbcc5f8373f9e","size":12430,"data":"","first_seen":"2026-06-06T03:08:13.632248Z","last_seen":"2026-07-16T10:45:36.323126Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monitor.tapper.ai/bundle.js","fqdn":"monitor.tapper.ai","domain":"tapper.ai","tld":"ai"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acd39c46e642011954a9c0f00bf398b0","sha1":"60220392215579a8b52f71154b7f6149096603de","sha256":"9a3f0e83e7cf10e6bc4b44130b68129787df1f52c1290a8f3572155e96ad4dfa","sha512":"76a097c9a50946b4712834889fd4fecc17977ad36272accbed5281db2de844044768ad03647b93e836e7b50dfed43d58d7797455aeb571eef19f8ca148c1314a","ssdeep":"3072:WbbaxwXsXEgpFj+7RBotNqZV1MdLMHH0Yi6US:5vqGIHH0Yi6US","tlshash":"b7e36be472d2b07543b350b6507f0201b23a7d58740da495f1aacee93966e07923bfbe","size":149001,"data":"","first_seen":"2026-07-07T00:21:32.962519Z","last_seen":"2026-07-07T03:04:05.432317Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"tourist pagefalse","filename":"https://duilapcmrez.click/webapp/static/js/main.541f8879.js?__cv=v39","line_number":2,"column_number":598484}]},"http":[{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/css/main.e5272e92.css","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:53.827Z","timestamp":1783393313827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/css/main.e5272e92.css HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mywBnMm08T4CDcB%2FhZ%2F9r0wbctb4AqCvEbRgAsB5heMmDli1bIL57D%2FLCxu%2FGx01IdR8R9IzPcjCYS83y8IW8TKpBl8wbjT8m2eeoCLIJ8Ahpi0pdWuHS%2BiPoJkZaSS%2FMGViEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739b736965b521-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 41406\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:47 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083808184\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5595,"size_decoded":2390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5550)","md5":"b706f3d51beced113f607dbd6b2bb63a","sha1":"31db84b2f611aee27f0043ccab2db1e124a64097","sha256":"96b077338f6b0e6eac23b955c83385a2c1d7f9149650cfcfc895901e835033a1","sha512":"7089465b7a2dc770d0e24e843585db9f8d0dbfe0a34de06d6b9723a17b418ea941e9a26c657d9539a99b1ee85a17ffb0d9a551d8652da6fd9305cd1d256bd7ee","ssdeep":"96:FF9kdLFbhLdPBtvVYIQmjp97j1iWB7j1iWc7kDrfU9F/W:FF9KLFX7S4jp9ZJPmW","tlshash":"4bb13f12df872401f9b7464131ce6bb5ae4dec2cb038a852f91d9d75cca288f4352f29","first_seen":"2026-06-26T21:08:00.600547Z","last_seen":"2026-07-07T03:04:05.445278Z","times_seen":12,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/ProximaNova-Regular.4d6b0ae73bbc0ee103b8.woff2","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.076Z","timestamp":1783393314076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/ProximaNova-Regular.4d6b0ae73bbc0ee103b8.woff2 HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739b74f994b521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41406\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:47 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811710\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1NKQNjMXQs44Py6f3tQf0ZH%2F32aadF1RqG7ScPlElrP0zro6kFzMoGAZ1wTAkmRkQi4T6V0gL87N7%2Bvs8%2Bjo%2BtqYqbzdHcel4IQ1GR9JCvVPMyME0v6uFAFDCB1eQvDk2dREg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43624,"size_decoded":44403,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43624, version 1.0","md5":"4f34c6720cebe2013388679095970207","sha1":"d17557584ba2f660e908feeeab23c400f6e51bef","sha256":"61ecc328e428b3316f7810afeae429fd523c6bd8810b49aa1a7dcabc8beae527","sha512":"43bef86aefecb9a7e911286a95005a9ad80579b9aeb156b6f26058d407b46f9804460f359ec7a1ca20bd4078f9fe0c151b792c22e702035852f11fda8e386295","ssdeep":"768:ko+LKKXRSxeiABAANXjz1cNLeq5FsV1EfRai4YVeN6ccUxVclTrQ2710Xc:U/RieWWXjxwLeT6fRaiR06ccUMlr97ms","tlshash":"4113012f69114ba43c1df3fdeceb548b32b13a0e955439f9d5e6400eea8384dc887488","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.430497Z","times_seen":30,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"monitor.tapper.ai/bundle.js","fqdn":"monitor.tapper.ai","domain":"tapper.ai","tld":"ai"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.485Z","timestamp":1783393314485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tapper.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 07:21:30 GMT","end":"Sat, 26 Sep 2026 08:20:51 GMT"},"fingerprint":{"sha1":"3B:F9:37:3E:CF:D2:A5:C5:1B:49:21:0B:DE:66:6C:C2:8E:B0:6B:A5","sha256":"1A:F1:F2:04:1D:16:FC:BB:68:42:C4:23:CE:28:40:A5:E2:6E:15:19:AE:06:74:4D:21:98:F9:52:48:44:D9:43"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: monitor.tapper.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"d2b059f720816973698781a06520dded595edaa3e7d6590b9585c17935a0e3b5-br\"\r\nlast-modified: Sat, 04 Jul 2026 15:41:35 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\nx-served-by: cache-bma-essb1270029-BMA\r\nx-cache: HIT\r\nx-cache-hits: 13\r\nx-timer: S1783393315.550999,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":149001,"size_decoded":44840,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51484)","md5":"acd39c46e642011954a9c0f00bf398b0","sha1":"60220392215579a8b52f71154b7f6149096603de","sha256":"9a3f0e83e7cf10e6bc4b44130b68129787df1f52c1290a8f3572155e96ad4dfa","sha512":"76a097c9a50946b4712834889fd4fecc17977ad36272accbed5281db2de844044768ad03647b93e836e7b50dfed43d58d7797455aeb571eef19f8ca148c1314a","ssdeep":"3072:WbbaxwXsXEgpFj+7RBotNqZV1MdLMHH0Yi6US:5vqGIHH0Yi6US","tlshash":"b7e36be472d2b07543b350b6507f0201b23a7d58740da495f1aacee93966e07923bfbe","first_seen":"2026-07-07T00:21:32.962519Z","last_seen":"2026-07-07T03:04:05.432317Z","times_seen":9,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":36,"connect":8,"send":0,"wait":9,"receive":9,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/__ext?u=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Fsmartbanner.js%2F1.14.6%2Fsmartbanner.min.js","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:53.824Z","timestamp":1783393313824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /__ext?u=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Fsmartbanner.js%2F1.14.6%2Fsmartbanner.min.js HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cEn4chxbH4W9jf%2BwbmRYWyIwCxW8GQvw1pH%2Fi5vVydgmS2smtB%2BBuRNUIFTOl6MXxY6xKdUdPRMWFilHtvBvYFDipmZnC9FycXeF8IFXx2db4jY9S2S2AG54tWxA8njw9rU9bA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739b73695bb521-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 41406\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:47 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083868551\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13143,"size_decoded":4248,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12997)","md5":"3dd74b8e555381aba9f392a6c18ef322","sha1":"735dbd5c6dfaeed0a9dace49d9797651896052a1","sha256":"9845b2b9eabf2f381f6c27580626e67e65bd4c263354dc0baa1923af5becd4c6","sha512":"a8483c17296a3651e6024ab5b3a9f3a9f31172128fd3618275b015a47fd7e06338e004e0a5f56f59fee3ae2a3f9ab22ab844097461ef82bcc526d37a2c16bf11","ssdeep":"192:3e73F9nkMfF9RduF9xM1te147IcMUF9qRYo3tVctWS:3e73F9kMfF9DuF9xote1gIUF9kYmIYS","tlshash":"dd42620e7ae0b1b0c28751ad696f150a70b4b92ac408c446e279dad86fb0a4643f7f7d","first_seen":"2024-05-01T18:22:04Z","last_seen":"2026-07-07T03:04:05.444802Z","times_seen":30,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/__click","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:53.838Z","timestamp":1783393313838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 95\r\nOrigin: https://duilapcmrez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":95,"data":"{\"kind\":\"ping\",\"path\":\"/webapp/en/quick-recharge\",\"vid\":\"da4af3a2-4518-4820-b8dd-c9f2f8c877e7\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 03:01:53 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7JgAx4GUwIgCmGpR2sh2yjt8PDaMQKeJHA64S0yIC1UUSPhQpwY%2FGcArb6AYtxurFCTCeRQ%2Bp%2Bg1JsiuBFp28bN5z98qtg3x9d8KNnzc1BtShiJ6af5MT%2FhSNPP5CUZcIqPDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1739b737967b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1222,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T12:40:26.815973Z","times_seen":17314312,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/cc-master-logo.0fced2f492f163434103b9c040995d7c.svg","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.109Z","timestamp":1783393314109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/cc-master-logo.0fced2f492f163434103b9c040995d7c.svg HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEHSWhubpA7HX7reaoYV1fhLJDd0SgzVGNV74TT8yfrHdklDLwKILb68yxikX8umhHR07ocuRQw0EH63z4Ululoq7qnh4kzoK8XNQRREMKIh%2BxbQ4xLxhfPT1cxHbzUrdHlstQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739b753997b521-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 41405\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811850\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1731,"size_decoded":1522,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5c37f44662f4be81f93272cacb53c7","sha1":"981cd962cd20e921e75fc6133ecfe62c4dff7d64","sha256":"28bd53cec442bda2a970bfd4d1b058fd202cbd3438c05550f4c949fe5f6f3918","sha512":"4d15a69aa2bf689ed260dcf411073fe77da2ce248bf93e87cb9b0342496afea47639f53419b16fe09cd2f25a2987094f1000502d0d5c7686273bd0034051369d","ssdeep":"","tlshash":"153150c822fed0a8f2528300d2f17ac7e9aeb0cbc3c18554b15d26682f16ea609c901c","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.445741Z","times_seen":15,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/cc-gpay.13c2633fad5a00954ea3556fe54ba8e5.svg","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.112Z","timestamp":1783393314112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/cc-gpay.13c2633fad5a00954ea3556fe54ba8e5.svg HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HspWd6hl3c%2FsAgtyxSIB5bLp0tNuwIZhBe%2B5UrehqWEFCRla8RjjQVeWvYhiXw2keJ93CU%2FSDxSeYks%2BhKS5AQStev0rii0%2BCeUyC81DLCbtQabLCNQ5ljdghe49yrPDY3StIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739b753999b521-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 41405\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083813084\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2642,"size_decoded":2008,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"192928058258bfd16d50e7862cda352e","sha1":"9425961bc3de4c481cdbf971478be0aac00850e2","sha256":"12b202bf544bcf07c2a1518593744311d84ad54b4efba0e9c6130afa89e0fa63","sha512":"8d82a16a23a03c202d7b18c2a1a7c77a358e3970c88d35b2161fc5d9df8dcce3360171e4ad6ef59b0c1ebd14e20b3c9b233bd58bdf3de94601e3b3c545ad6f6f","ssdeep":"","tlshash":"7d5174ea7055f2c5ca07f7e0e03b5c3a1a69bcac3781c28d8580b241d6555ad9ba8c97","first_seen":"2025-06-10T12:35:48.062667Z","last_seen":"2026-07-07T03:04:05.439056Z","times_seen":13,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/logo-pci-certified.223b4cb726c97e1957f1ae36cec5ac6a.svg","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.114Z","timestamp":1783393314114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/logo-pci-certified.223b4cb726c97e1957f1ae36cec5ac6a.svg HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2ghA%2B3NtwkaYDm8AKFJSfaEJLlCyN8h%2BvyA%2F%2Bp57SA6o7QYnzDK3pj1wPWibwtkUYiuIUNoqTqhpHFxrLJN2IXvl3ladnuZqrLS4KJQCvkA4dO%2BjfK%2F5KExNTzta4F2sDEyyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739b75399bb521-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 41405\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083812505\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9054,"size_decoded":4017,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"136b179ff510f7c80f2e039d676d9928","sha1":"447c8ac278c3ca95b98fec89a8da9bf1a0e8ce89","sha256":"0aec417e0a2b6c0e02aa016dc7904c7a8a7568a58eea31d1a89f7f288ee10150","sha512":"991a0709bd1dbbaed513fca3e407cfe403b09f4d004e7948eedcd7739f9d263500d052ee7448da44470a40643e934a995659895ce0b14eb08a5366859019189c","ssdeep":"192:d+oYMz1peokiWWosGq7Qz8hqaVSs/L8CN3sco3:RYMDkiW6Qzo9L8CXo3","tlshash":"8412ea18c273dccebd8d85ad9e5181a621322c627827a00ed5cfc6326e36de85df954f","first_seen":"2026-06-26T21:08:00.597438Z","last_seen":"2026-07-07T03:04:05.431655Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWlsYXBjbXJlei5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=p3cdjorbqv5j","date":"2026-07-07T03:01:55.055Z","timestamp":1783393315055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 383865\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 17:01:56 GMT\r\nexpires: Tue, 06 Jul 2027 17:01:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 35999\r\nlast-modified: Mon, 22 Jun 2026 00:01:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":895421,"size_decoded":384751,"mime_type":"text/javascript","magic":"data","md5":"20a3b1e1f6332005d3a00b47c6f3092d","sha1":"787e0ddbb05f6e6dc019f68dbcb5c641c628547a","sha256":"d6731c3de00cfe1d418f0905d5b78e1cc7c382a95e95cadd44aa22b81a98c5c5","sha512":"ffae73ac43daaf89b463ee47ddaddd2d7c9800a96bb1145b2afa59a352b3eb08e4e7c0d88b07585a54dd3ebdcc39e563b727a282015c4b002f230a6315102ce5","ssdeep":"12288:VOuNtbumQUfi2q0LWNLaXnymCAYIJ4wyzTmWRF8WdWT0KZ1HcezE9:hb9+kW2XheRmWdk0KZ1Hi9","tlshash":"a91549d97152b0a95362f6f564376159e33e5826c80c084e7288d8f02ef4879f1faeb7","first_seen":"2026-06-25T14:15:22.826378Z","last_seen":"2026-07-16T13:33:45.653776Z","times_seen":12261,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-cdn.trackier.com/js/trackier-web-sdk.js","fqdn":"static-cdn.trackier.com","domain":"trackier.com","tld":"com"},"ip":{"addr":"34.149.104.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.528Z","timestamp":1783393314528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackier.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:30:25 GMT","end":"Sun, 23 Aug 2026 07:30:24 GMT"},"fingerprint":{"sha1":"F4:3B:46:0D:DB:CF:92:D9:C3:CB:FC:1E:3D:10:71:09:47:56:A9:AD","sha256":"03:D5:4F:EA:4E:4B:27:9D:F8:7E:7F:59:BB:4D:21:A8:7E:63:F7:42:98:D9:72:8F:28:02:91:EF:D0:8A:C1:03"}}},"request":{"raw":"GET /js/trackier-web-sdk.js HTTP/1.1\r\nHost: static-cdn.trackier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-guploader-uploadid: AJ5rDhHA2R5pILI3IzFErQNsh_7AbCOCRt0eMOuhHuRpf4uQYNpCT6408QfIMl7nl5r8NBA\r\nx-goog-generation: 1780658579960293\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12430\r\nx-goog-hash: crc32c=f1x/Kg==, md5=Iru4kA+0XjpMOyC4xJuKYg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: none\r\nserver: UploadServer\r\ncontent-encoding: br\r\ndate: Tue, 07 Jul 2026 02:21:05 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:22:59 GMT\r\netag: W/\"22bbb8900fb45e3a4c3b20b8c49b8a62\"\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-length: 4564\r\nage: 2449\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12430,"size_decoded":5280,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12430), with no line terminators","md5":"22bbb8900fb45e3a4c3b20b8c49b8a62","sha1":"29a551794a5ebfb8284a29e20f39722c6a50efb4","sha256":"aad3defbd0301bfaf750eb1f512c10bca06b6354d5b79b4148d5d9b4d1c88153","sha512":"bed34fe0cd9e5a86d7f4b071cafc9a71bd4f7625945e7dd209fdd287bc30e16fa5b7cd1f46b41e4a49936b00606b67c9b54557bb9f0c8d4140de3526cb34d25f","ssdeep":"384:43IX2vMBfTyulhzS5srgIPfFDqc+e30eob92ch2SkpfR:43IGQuu6sFW6","tlshash":"ea42f79f31577434a6c22075188f384ae1ba565c691d81a0e792daa13cbcc5f8373f9e","first_seen":"2026-06-06T03:08:13.632248Z","last_seen":"2026-07-16T10:45:36.323126Z","times_seen":38,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/ProximaNova-Regular.4d6b0ae73bbc0ee103b8.woff2","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.491Z","timestamp":1783393314491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/ProximaNova-Regular.4d6b0ae73bbc0ee103b8.woff2 HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7; _gcl_au=1.1.923724628.1783393314\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739b7799b4b521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41406\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:47 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811710\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BlA3fJleScwliI9WWu4gFNNG4hB8Vk3wBuRt%2Bk%2BCRZzgJe47pTHIFgTAZYva9UFOicjtwIdwKweN8qVF6s0SyEn9tLNBzdfCPFmGksQQDGxq7%2FXwa9xL8KiLK2rMMrgMJCaqEA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43624,"size_decoded":44403,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43624, version 1.0","md5":"4f34c6720cebe2013388679095970207","sha1":"d17557584ba2f660e908feeeab23c400f6e51bef","sha256":"61ecc328e428b3316f7810afeae429fd523c6bd8810b49aa1a7dcabc8beae527","sha512":"43bef86aefecb9a7e911286a95005a9ad80579b9aeb156b6f26058d407b46f9804460f359ec7a1ca20bd4078f9fe0c151b792c22e702035852f11fda8e386295","ssdeep":"768:ko+LKKXRSxeiABAANXjz1cNLeq5FsV1EfRai4YVeN6ccUxVclTrQ2710Xc:U/RieWWXjxwLeT6fRaiR06ccUMlr97ms","tlshash":"4113012f69114ba43c1df3fdeceb548b32b13a0e955439f9d5e6400eea8384dc887488","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.430497Z","times_seen":30,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/cc-visa-logo.9de5ed976961133ab058d183b905b998.svg","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.106Z","timestamp":1783393314106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/cc-visa-logo.9de5ed976961133ab058d183b905b998.svg HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nh5h78pAWrqtAKpHrffQ0DqBPFK1Uo5DYsbwTTj%2BFSrcLNTp1%2FLrzazhGVY4PBNXqyMOKGbKnmmuPlfBH5N1vk%2FjkKmAuOQMAH24v7tHPeKcmit0mvI0TacXkU36dPHwtfb97Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739b752996b521-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 41405\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811195\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2637,"size_decoded":1956,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e97a102064a736e1e1f13a9f0d7f21aa","sha1":"65ed71e23ec0350913656ac265cb0a0c777ea0db","sha256":"b7b05ad1c3a308d4781fb953d46080e6ee5bfbacb166eb0e807105f3fefc79fa","sha512":"25f1eb1a39477bdcff822e0bde014e3aa060e98a6940020127909097dbb8ff0c511adb7d3ffa3b1e023bd5521a09c3677112a6bfbd8172eeb765f56621fa83c9","ssdeep":"","tlshash":"fd51759431e8d47992088e6596f2dc6fba71304e67d00868b0cc56450f2b0db0dbeb27","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.440541Z","times_seen":15,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/ProximaNova-Bold.5e38a54e924b84960be0.woff2","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.492Z","timestamp":1783393314492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/ProximaNova-Bold.5e38a54e924b84960be0.woff2 HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7; _gcl_au=1.1.923724628.1783393314\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739b7799b5b521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41406\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:47 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083810217\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sqcXZoEuQ%2BUhFYKQePxxOM6G3vTnX3NTvCmq9pfbxgXSGYywQVeZE9%2Fi5ocoWq22GnkrDQuOdPG4o589E%2BCunjhErDHI8P7oBXfcmfYxQmtbj3X3GhGusrfrO8AnfTSqD5lJsw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43424\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43424,"size_decoded":44201,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43424, version 1.0","md5":"5d99a47a83c96b85f06907013656d8fa","sha1":"e4eb584839c5c279100dfab0a3e38ff4e4cf5556","sha256":"d7d572bcbbada558c49fd3c6be3c231e655878be0c001581a6908498e47e39b2","sha512":"e733a249485dc1ce691c4cce8c4a15cb4c5413a3a86d1bd903219090317c6bc22577be1891f9903f1df5a55d987faf9391a4e21df71a0050d3536e37484e4e5f","ssdeep":"768:vp/nKtOdtsRqeCe9q0f1fRf2N2KvoXVeqOzF5eLB/ETrjubw11:R1sRnj9qoxRc2KvEVeqOm9Wb","tlshash":"5b13f1a985e1b66afb460d2f0615b04fcaf709c31641c64cadb5c8cec284a257bddf46","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.443829Z","times_seen":30,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWlsYXBjbXJlei5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=p3cdjorbqv5j","date":"2026-07-07T03:01:55.331Z","timestamp":1783393315331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 02:17:07 GMT\r\nexpires: Fri, 02 Jul 2027 02:17:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 434688\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-17T12:40:49.107503Z","times_seen":930388,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":3,"connect":28,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/__ext?u=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Fsmartbanner.js%2F1.14.6%2Fsmartbanner.css","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:53.822Z","timestamp":1783393313822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /__ext?u=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Fsmartbanner.js%2F1.14.6%2Fsmartbanner.css HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PP3xJlSfLaO2eHo0KENwzLmUjC3sInsdNqCtCTKmVDu6LqWqlQymh8OSt7RDUwJixnySK8YXDNTw%2F1bP6mFs3kPv9SX7KO0ZSD%2F5BLUDekbY1%2FpMmvqO3R9bkhw7uEszzKoOwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739b73695ab521-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 41406\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:47 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782084029744\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11707,"size_decoded":4851,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (7577)","md5":"2187f7dae1a38dcba4053f4fbb01d112","sha1":"83af3b3c95632a67e0b893694905438108c8de8b","sha256":"7352e9c7fc39eef67250e8d02e123f00ff34655ac75d2d8d98110bc8bea89174","sha512":"e697d308af7e9a64da1a2d3ffb1d3e710f236da2b439e0b293f9e2db9f17be9960bc07131b86bc7485b1a91fd2dd56a750a995543aeb2a50d6ce848d317bf536","ssdeep":"192:3g+0X66t5KDuF1Q+Fkz1hf09AQZdAqBOQ/P8ssHOimnFmiqIjcOKLSqtdgUNPRrA:3SKSFmoD+czorTgUNJ4YLmpZ2K","tlshash":"ed32a6c2cdc62c38ab03521b268a59c752cdaf47e862c196b5ddf1820f7a94e53f072d","first_seen":"2025-06-09T10:47:56.357132Z","last_seen":"2026-07-07T03:04:05.43526Z","times_seen":21,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/du/common/myaccount/common/images/magic-campaign-en.jpg","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.293Z","timestamp":1783393314293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /du/common/myaccount/common/images/magic-campaign-en.jpg HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a1739b7659a4b521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41405\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083814616\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9iOjnZmyl4uQtKeQ%2FN0jDosshjxlqWZCrzJMIMvb4BDXEBK6ZZyI8WF7KpMI7bOk28gR%2FnRDNrrpEXy0m4pheLKhHSPbGhK8beFTweRpTE%2FFmGYSdFS%2FqEsZHqjsns1Ty656CQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8119,"size_decoded":8894,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 470x177, components 3","md5":"c15348b28f3cbe36fd392747663c8d8e","sha1":"644819def3f55d4c58a48a565b28c5170dcc6198","sha256":"a46ddf6079306b6d7459c323dc1bc3ce418f5f6744e979e8fd3e8fd6674d3871","sha512":"63a1b4181da200e71544ead303f37ca2664c8335d851624ba1f4f3e407498876d8a130279235695422beabc89c434de744adb70c38da628bcbb3564127bd7977","ssdeep":"192:Bx0FUbBGbAbOWOtotD/LQyY+ba2hnl1zo10BVQD1sHcJv9:HPbiAbOvtotD/LQr+W2R3oOwD0cR9","tlshash":"fef1afc5f72b116aa2e7e53c5018cfb32b85c102a850d3be3489d7a68b73896a496400","first_seen":"2026-06-26T21:08:00.598291Z","last_seen":"2026-07-07T03:04:05.437572Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-cdn.trackier.com/js/trackier-websdk-init.js","fqdn":"static-cdn.trackier.com","domain":"trackier.com","tld":"com"},"ip":{"addr":"34.149.104.117","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.444Z","timestamp":1783393314444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackier.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:30:25 GMT","end":"Sun, 23 Aug 2026 07:30:24 GMT"},"fingerprint":{"sha1":"F4:3B:46:0D:DB:CF:92:D9:C3:CB:FC:1E:3D:10:71:09:47:56:A9:AD","sha256":"03:D5:4F:EA:4E:4B:27:9D:F8:7E:7F:59:BB:4D:21:A8:7E:63:F7:42:98:D9:72:8F:28:02:91:EF:D0:8A:C1:03"}}},"request":{"raw":"GET /js/trackier-websdk-init.js HTTP/1.1\r\nHost: static-cdn.trackier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJ5rDhFgIvyMunvBkcvBLvJrkxFQHPOEJsV7-dnZOu-KqH-gbhXtWXCqM9B1FwOFr1RGxlHf\r\nx-goog-generation: 1710238638167460\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 285\r\nx-goog-hash: crc32c=Hd49Xw==, md5=mLJPqsL6ASb9OuNjEODoRw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 285\r\nserver: UploadServer\r\ndate: Tue, 07 Jul 2026 02:31:59 GMT\r\nage: 1795\r\nlast-modified: Tue, 12 Mar 2024 10:17:18 GMT\r\netag: \"98b24faac2fa0126fd3ae36310e0e847\"\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":285,"size_decoded":973,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"98b24faac2fa0126fd3ae36310e0e847","sha1":"f23054f114b2540c3b547e0bd4f97b2a7955a489","sha256":"bee5491f89b37c3d92638f58b768087c34e76c43020b83503f879a1b41176e8e","sha512":"3f88466b1cdad9fedd91e75bc25f5f9641f4962a616d801ca58e1ec830e0a3e40cd4e722bf934871ced7158f7be73fdfb89c348769d0acf4a49c7a4ba99acf92","ssdeep":"","tlshash":"4ad0c22939925128441720e96b3ff72027328312201df161be6c8a48ef60d779d158a8","first_seen":"2024-08-09T09:45:08Z","last_seen":"2026-07-16T10:45:36.198719Z","times_seen":250,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":2,"connect":13,"send":0,"wait":14,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/en/quick-recharge","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T03:01:53.584Z","timestamp":1783393313584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/en/quick-recharge HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTDDuNlrOmw8KjPme1Xp1PckmgDR4MDsZvMZ6ra9PGiSam5sHHNHLlZoK8DCnrmKTxfZ8%2FmtWStypVKHFq9Lng6ZCKBWUmYomWOo2yqsoc5bKTS8L%2F3o8Gs7ohYvZNP0jOGi3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739b71e94ab521-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i\r\nage: 56\r\ncache-control: public, max-age=60, stale-while-revalidate=604800\r\nlast-modified: Tue, 07 Jul 2026 03:00:57 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783393257326\r\nx-proxy-source: direct\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71791,"size_decoded":21714,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64256), with no line terminators","md5":"68ecef41b8ed236047259535f25241a1","sha1":"57340ce95f0caa3139eced5110bf314d7a18480d","sha256":"b854817fab984d1d2fd39ebb30664c1b7e5a669f757dce97936bbedb521cddb9","sha512":"67c3a56c0d27ff3251a7351deba584a1241bdab3f053018ecf0f83d7a1602af32c8bd3c9c0f3a878cb2c624573d78dd734c1f179a49675d71460e510a77232d9","ssdeep":"1536:L/OSJFTREuqn9SJQq4pPhGzWELEgK7T1oPhZz:LDJFNESJybl7W","tlshash":"d4632ab1f3d1243863e38864b07faf45b0718b83ce0a8554c55aed617ce8e964677eac","first_seen":"2026-06-26T21:08:00.599145Z","last_seen":"2026-07-07T03:02:30.733517Z","times_seen":6,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/__dubill/presolve","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:53.840Z","timestamp":1783393313840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"POST /__dubill/presolve HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1\r\nOrigin: https://duilapcmrez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1,"data":"1"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 03:01:53 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UP1LVQYooApumprsJxoOwEjrwMijImmbClr3Mzo21ODkcRTeratZetOat5FnVBWEMPN3OVNPEU%2BvZhm08ATHxMM9gx%2F1mJBcimY2qW2ZBc7dn9YnlactxafUq5fRnauHXYKOyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1739b738968b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1134,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T12:40:26.815973Z","times_seen":17314312,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/ProximaNova-Bold.5e38a54e924b84960be0.woff2","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.083Z","timestamp":1783393314083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/ProximaNova-Bold.5e38a54e924b84960be0.woff2 HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739b750995b521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41406\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:47 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083810217\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQ99H9QFa9hHhhrkXm3yO9WacQtfKZAjAwEdjT%2FF%2FrfgwB4KBzVM%2FC4O5doaDvdKcnRbuV3BdY1pa4u%2Biu4%2B99S%2BmZ%2BUg13vkesA%2FsS%2BVlg53uLE%2Fx8Ym381gglO8wZGZfN0Kw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43424\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43424,"size_decoded":44215,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43424, version 1.0","md5":"5d99a47a83c96b85f06907013656d8fa","sha1":"e4eb584839c5c279100dfab0a3e38ff4e4cf5556","sha256":"d7d572bcbbada558c49fd3c6be3c231e655878be0c001581a6908498e47e39b2","sha512":"e733a249485dc1ce691c4cce8c4a15cb4c5413a3a86d1bd903219090317c6bc22577be1891f9903f1df5a55d987faf9391a4e21df71a0050d3536e37484e4e5f","ssdeep":"768:vp/nKtOdtsRqeCe9q0f1fRf2N2KvoXVeqOzF5eLB/ETrjubw11:R1sRnj9qoxRc2KvEVeqOm9Wb","tlshash":"5b13f1a985e1b66afb460d2f0615b04fcaf709c31641c64cadb5c8cec284a257bddf46","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.443829Z","times_seen":30,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/duCo_WHeadline16_Bd.2496de66e37e8637049a.woff2","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.496Z","timestamp":1783393314496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/duCo_WHeadline16_Bd.2496de66e37e8637049a.woff2 HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7; _gcl_au=1.1.923724628.1783393314\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739b7799b7b521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41406\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083812213\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2B1eVaxni15ZbHv53nOObQGwW%2FAmUQb66zth6aSGVwPj37Fj9oRkXSX2tHEocGZyRx7vFexH4tLDM746jGNk%2BUTOAOUBdYEykm96vARDtya9VjXUb6FVuFB7kSGqh5G73eh8wQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 74024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74024,"size_decoded":74801,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74024, version 2.0","md5":"9a96b6ad1b1def752fb3a28b1ef20018","sha1":"cb9e78650c1cd55fec0e9eaa888f58638cf81d95","sha256":"5fb213540c50030ca41727cd32fc61baf72aa170ed67bcd06f396a7d49e5144a","sha512":"cb959d89ea1b01f9605d3c03f79edf9281c296f85bbcbc94dddc9b6a3700206d99aa75c9da10461204e7f8f4d5ac17c11e8f2aeb2a5f35741f706d7d661b2ba1","ssdeep":"1536:fOvr2feojoL5aBi9kXIQp5XS5e+DWxrMHqF5qzSKtIcGr/Cs:fe2XjoL5miknKnDwrKqnqduv","tlshash":"0b7302f812066130b1b48210363ea4a15c4cbf367737226d98dbc9a9f3d666c545eecf","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.429957Z","times_seen":40,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWlsYXBjbXJlei5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=p3cdjorbqv5j","date":"2026-07-07T03:01:55.316Z","timestamp":1783393315316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 02:29:48 GMT\r\nexpires: Thu, 09 Jul 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 433927\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-07-17T12:38:46.852974Z","times_seen":685839,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadcallback\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.103Z","timestamp":1783393314103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadcallback\u0026render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 07 Jul 2026 03:01:54 GMT\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1035,"size_decoded":1304,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1035), with no line terminators","md5":"7425ca005c7316f61b45059809059236","sha1":"9e1600a46f5f72eee06bc51dbf4fff2c7d9e330e","sha256":"2bd75dde8330c029f9b5501c4cb06d2f1859d6b73735c31a91f436053c11f01d","sha512":"9bb9e9c3c53a6eec109e5e5b1fca4c1309e01d8dd8e26162e2d84e5b4d4fb6c3c54dde28c3c098fffecc53330437903c2aa4ea969f74566b9ea494b9e513d4d8","ssdeep":"","tlshash":"d1111bb22a04f0384f3219e1e1fbcbb8e462702db15c85eca501cac42e7accbcf04456","first_seen":"2026-06-25T21:28:07.860638Z","last_seen":"2026-07-08T12:26:26.078001Z","times_seen":172,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/cc-amex-logo.648a329e891cf2e3116e3c0efcd19e75.svg","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.111Z","timestamp":1783393314111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/cc-amex-logo.648a329e891cf2e3116e3c0efcd19e75.svg HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Ju%2FQR5iElpxAoop50wLOLZAGnEr2bgYxrJKzb5012xDYr9lnVJ%2BSNMRKRGqfXwOJo1jhzkNfvJL1u5R%2BX9WCLm94Du%2BrSw7AYnLBk7B7ksitSjEaH7LMVOpKPQ%2FvlpKgoPnRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739b753998b521-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 41405\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811764\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7539,"size_decoded":3091,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56e74c8581d35533d684b42d96dd33f3","sha1":"e3056eee7eccaaddd1b6f364db391790d17e9df5","sha256":"6fb89b9b4777899a66f229fe91f71ab2ebaf8f37be14d18b5a77c55307944475","sha512":"9554bb44557090899702481e70180c2732818af9b524f047373e1d6445e46fb38cb811282a22f73ceda430daa582fac1431782075a6ef9b0d1697182208c3e75","ssdeep":"192:G9FO+rj1bdB+7/+wnTe/flsClbWmFtb3xgzozhgBDAZDp:mxtreyflsCVFtFg2","tlshash":"1ef198540360c9b1b4c5d5ec5e030c6535ba28c576d6475fbaef6bfbbf22894009a863","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.444323Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/servlet/duaediscovery/common/images/app-phone-desktop-EN.png","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.296Z","timestamp":1783393314296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /servlet/duaediscovery/common/images/app-phone-desktop-EN.png HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a1739b7659a6b521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41404\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:49 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083825919\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o1Ee2R21U1NqRHBg9K94WmmE3kBRgszb7jVxsOf1xk3Tjt7FW2VEzcoQa1leoKz8XRXZmABGTw%2BvniJhsmYN6dIL7garIk%2FPeJyNrCPzzFBUktelsFuJis7Jq2Vigg1MKk%2BkUQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 74570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74570,"size_decoded":75343,"mime_type":"image/png","magic":"PNG image data, 239 x 390, 8-bit/color RGBA, non-interlaced","md5":"934d42580c789fc0243b3e8c4fbafa8d","sha1":"b5a2021ccff96d91c1d0b00dfade81936570e773","sha256":"eae2436d86f50aa647a7e37132d0f279947007835e123ecd46a8f4b24d57a5c0","sha512":"7867f69fcf0bd4916047d83ffbe78487e6de355d9047e989992c880b4acaca564cc2c72154121b26505751cda293a0c3f9b3f0f04ffe1edab0baad186aa7dbc0","ssdeep":"1536:XiyFpdqQq3MBCNUZWyfPbOi1Qfg69wf85P5o:XiU/q0UPuTbQBl5PK","tlshash":"647301837859abc13889f8bb313758e8600dd94afc34b53642946a6d947d35c38f1a6e","first_seen":"2025-06-10T12:35:48.041469Z","last_seen":"2026-07-07T03:04:05.42872Z","times_seen":12,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/duCo_WHeadline16_Bd.2496de66e37e8637049a.woff2","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.130Z","timestamp":1783393314130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/duCo_WHeadline16_Bd.2496de66e37e8637049a.woff2 HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739b75599db521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41405\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083812213\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnCl%2FOzb9sD3SXsRdyOsa2XkihM%2BVmRA%2BMVwUHsWmSp%2FPLqSMUAArxBHMHGXei4Wrq63HATycjMww3wEGwVK3Wz9AA45csjy4h8em0enAkKMYYna7Xy2mAk%2BjS0F%2FiQGNrIvbA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 74024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74024,"size_decoded":74807,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74024, version 2.0","md5":"9a96b6ad1b1def752fb3a28b1ef20018","sha1":"cb9e78650c1cd55fec0e9eaa888f58638cf81d95","sha256":"5fb213540c50030ca41727cd32fc61baf72aa170ed67bcd06f396a7d49e5144a","sha512":"cb959d89ea1b01f9605d3c03f79edf9281c296f85bbcbc94dddc9b6a3700206d99aa75c9da10461204e7f8f4d5ac17c11e8f2aeb2a5f35741f706d7d661b2ba1","ssdeep":"1536:fOvr2feojoL5aBi9kXIQp5XS5e+DWxrMHqF5qzSKtIcGr/Cs:fe2XjoL5miknKnDwrKqnqduv","tlshash":"0b7302f812066130b1b48210363ea4a15c4cbf367737226d98dbc9a9f3d666c545eecf","first_seen":"2023-10-17T02:16:08Z","last_seen":"2026-07-07T03:04:05.429957Z","times_seen":40,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWlsYXBjbXJlei5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=p3cdjorbqv5j","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.961Z","timestamp":1783393314961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWlsYXBjbXJlei5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=p3cdjorbqv5j HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-security-policy: script-src 'nonce-DN_-QXRwIHLptQH9-HGxaA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":16860,"size_decoded":3173,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"ebffd87e932f7d8e556d2c966884e9e4","sha1":"44ec66cd489db09627dbd54453ea50011a785005","sha256":"e87c940ab90d127638aa964fc240f0136152d9cfd74871d31dda46c6048a8874","sha512":"65aa0219153ce0aee7229e4602400a27cca6e56b230afa5b6aa3ba1b6ea7b69f691f78446bdd0bd11dec800b4500ef7395701c00834199df276bb22bb8cbe697","ssdeep":"384:OjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/o:OFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+n","tlshash":"3b72fd50041744009b835ce223ce7f30fe4e92517246d0b1abfd9b6beedbda6926939d","first_seen":"2026-07-07T03:02:30.7378Z","last_seen":"2026-07-07T03:02:30.7378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/DubaiW23-Regular.c56831cd808f5e4e0717.woff2","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.129Z","timestamp":1783393314129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/DubaiW23-Regular.c56831cd808f5e4e0717.woff2 HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739b75599cb521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41405\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083827342\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3sdFxqSWmk8MeGCnQHvfM6jtEvdVm2RkTFNg6KgOoHxaBAcLbK6X8sIuY%2B7RhXjMfVVTMvdQH3lQAUrXyfwjj2XVQclxTpz0UH9EHDiMYlQPRIPe9B3760mnABk9mFbCzdSA6g%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64056\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64056,"size_decoded":64829,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64056, version 0.0","md5":"f435cc5251bd632ffe4ece7e663c6b14","sha1":"c954ab326bb7d02478e4a11b55bfff93db81af92","sha256":"df258432651535812b9de18555fd59d03b12594d58fbba950c200ec5763dd11e","sha512":"b5e19662d155f6d369bda3b1b10c0412fe94bad5f57415b78dad11d4b242b0f4d1573d1dbb4f6f4182d880e2342a034279dc94ab5824f874e7cd1fca242ea0f7","ssdeep":"1536:lMmts897Fg0xbkhn9JnsCMSw2ftoAo9ywEy1nYUe16Ds5r:3tH9J8auOAoQwEy1nYDoDs5r","tlshash":"6753f14808b3cd8afd5f063a857d5b97514145a162d8cdf35235d8bc89b2d282f329fe","first_seen":"2023-08-03T22:23:19Z","last_seen":"2026-07-07T03:04:05.438077Z","times_seen":244,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/cc-samsung-pay.4c4f2008827273647ce1b99bbbde9f3a.svg","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.113Z","timestamp":1783393314113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/cc-samsung-pay.4c4f2008827273647ce1b99bbbde9f3a.svg HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wMREYPbZMh61xhl0deAzevNa6siLNvIZI1R9LOPrG7etZzniUlvDtoWSK%2FX7iRWvPEHFeIBhnk1SjzlhBVAZHuPaYETB%2BIQa3i76XXc4XPe%2F5tqiroJfWOLId0GybYW0CoaMYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1739b75399ab521-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 41405\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083811534\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":3165,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"931d457ed3d924bea889d2c3f6780dcd","sha1":"6d5324e2f404ec5311ea1e672a4448463d04631b","sha256":"95252dc7fa29cefd4d6ca742d89193cdc773d9842c358ee4caff4cf9d7254e48","sha512":"083ce9fa8bf2b4e9c0518f6bf49e8093023ffa3e1a79e9546034dc2c8ddbc0aa79c00784b9a16730b3fa339c5965e51e1802f0351f920fe7c08c3704187a79c7","ssdeep":"96:joDcoJ/gJAjp4hF+LuqHQzMjORaZki8mzFe7jcdCq59cTfk77w9C20z8OET4h9:84qqAjGWuqHdSk3HqQ77w9Ctz8Kh9","tlshash":"42b185f6b3d490e5e50aebf6da126431b93324ba6f15c2cc43d5d8e5e52649d8c8dcc0","first_seen":"2025-06-10T12:35:48.067088Z","last_seen":"2026-07-07T03:04:05.436465Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/du/common/myaccount/backend-routine/json/landingPageData.json","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.201Z","timestamp":1783393314201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /du/common/myaccount/backend-routine/json/landingPageData.json HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6QFKBCvvnoH4HUTByg3EmeGfMGlS2cMEnWpy37w18RQV132ol%2Fcss7edPJ9wi1gmsLjgmXMDb7WaUNxRiAYeG%2B9mH7wSqOiQNZew3ZMMoL0E167UoxuFBGi3Oynl2iUgWH0Vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739b75c99fb521-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 55\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jul 2026 03:00:58 GMT\r\nserver: cloudflare\r\nx-cached-at: 1783393256295\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16250,"size_decoded":4938,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"aa330608a6379e53ee7aa35714355f9c","sha1":"ea0cc8bc58e7d850435b859c1e4c325d1dbbefcc","sha256":"3b6023a46d436ee39e973c5556c951ad09795462ceac181a3895e733c6e755f0","sha512":"df32edf19dc034adf4e582e0b18eb199138b8a91143596f32a20d3639249b91a523e9dbf92de137383b1b59cdfa7e4792b4dc23c8da1c72e849b2c5afa3b9e31","ssdeep":"192:92F/qIryorUcEZFp4sZLvppsRwFmnGt2sRwFmoJQ+lIMr/BD7jGNeAafEgeyoKyL:cMIaSaLf2nIADnAafm","tlshash":"0672ef55d9b00ce3064a9d18a07a6096e9348d6b8f59bc28399d351c0faf93f50ee7fc","first_seen":"2026-06-26T21:08:00.594752Z","last_seen":"2026-07-07T03:04:05.442876Z","times_seen":11,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/DubaiW23-Regular.c56831cd808f5e4e0717.woff2","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.494Z","timestamp":1783393314494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/DubaiW23-Regular.c56831cd808f5e4e0717.woff2 HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/static/css/main.e5272e92.css\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7; _gcl_au=1.1.923724628.1783393314\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1739b7799b6b521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41406\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083827342\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhK0FdvfWCKAj6r%2F4aYSP5vViopU8bpTSvkrSK5XztGDHI7yTp0uIePCVZGN8fQaFwdybs9vYJRr8wlhZl%2F6GXEzBeT3wWq4m3n7XfebWsb43HMS62vv2J%2Fq0nZjlTUsWpq%2FQA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64056\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64056,"size_decoded":64835,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64056, version 0.0","md5":"f435cc5251bd632ffe4ece7e663c6b14","sha1":"c954ab326bb7d02478e4a11b55bfff93db81af92","sha256":"df258432651535812b9de18555fd59d03b12594d58fbba950c200ec5763dd11e","sha512":"b5e19662d155f6d369bda3b1b10c0412fe94bad5f57415b78dad11d4b242b0f4d1573d1dbb4f6f4182d880e2342a034279dc94ab5824f874e7cd1fca242ea0f7","ssdeep":"1536:lMmts897Fg0xbkhn9JnsCMSw2ftoAo9ywEy1nYUe16Ds5r:3tH9J8auOAoQwEy1nYDoDs5r","tlshash":"6753f14808b3cd8afd5f063a857d5b97514145a162d8cdf35235d8bc89b2d282f329fe","first_seen":"2023-08-03T22:23:19Z","last_seen":"2026-07-07T03:04:05.438077Z","times_seen":244,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/servlet/myaccount/en/mya-quick-pay-payment.html","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.230Z","timestamp":1783393314230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /servlet/myaccount/en/mya-quick-pay-payment.html HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 03:01:55 GMT\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nset-cookie: SameSite=\"ENCAAAAAAX80YC6LrFC5jWu2tar4A2WyDhTWjxBY+6byZiaCa3doQnGe78K1tn87C2Z1/OMh2A=\"; Max-Age=30; Expires=Tue, 07 Jul 2026 03:02:24 GMT; Path=/; SameSite=Lax; Secure; HttpOnly\nADRUM_BTs=\"ENCAAAAAAUSdxtDlNKjl7Sy3T93gNbl22gzt17lKdVI0FICbzteJ2xYn4FDVvjbwehZt4M06Sw=\"; Max-Age=30; Expires=Tue, 07 Jul 2026 03:02:24 GMT; Path=/; SameSite=Lax; HttpOnly\nADRUM_BTa=\"ENCAAAAAAVFa1IGhoyej7uLwwc77iEAopQiQ/8D8hjz/iMhbJL+cycsVSkRABKS/zf3QMHBHF//1sG8h/4hqlZdFmSLCuicMJUqwKdyoyqjn7jhD8tTMQGrAxa8iCeh9uqct+1PXH/bCodV3mlJo4Jj0wiJs7+gG1MuXt5NiHmnTFH81fdwa8Ffk82tM5H+685Z5OlxOkM=\"; Expires=Tue, 07 Jul 2026 03:02:24 GMT; Path=/; Secure; HttpOnly\nADRUM_BT1=\"ENCAAAAAAUm+LAyC69jc6oUMNxBNC0C9t0m8NYp6gQNUmhkpIn6ETSr0fGZw6knbqTcOiqBqNyG3E2pbaWcKGxokRgT1Qgi\"; Expires=Tue, 07 Jul 2026 03:02:24 GMT; Path=/; Secure; HttpOnly\nJSESSIONID=\"ENCAAAAAAVG2AavzFxYemi7ieWXWCxD1VEBC9q1bJve8GGSZqPoFfi7kNx7gPhzaLE1lfTqWfleFtaQX4jhtbjbtoVa4DleVVWW3KGboNh83aM3XMrojkh/j+iSYTJs0C7mMxBHAXKr1I1Ib89fIEz8Jvcke7NH\"; Path=/servlet; Secure; HttpOnly\n7046c9094c9e5a0446fdb51586a63f0a7df59c6e25ca7359861cf2ad2ab5493c=\"ENCAAAAAAUALFQzsDrKZuOdbAyjAEZ8GgHaTQnS+7I5SdedyotX85uJW58LVc0zEh7+RC3PbPkL0PX9GAMJXx7W2PD2L/niTqG4CrtCxK16vgHaHZWmpWfDiJh5mIxCeBJGNaFitmoIQQVqPdv8A1fC/35Ljy+P\"; Expires=Tue, 07 Jul 2026 03:03:54 GMT; Path=/; Secure; HttpOnly\n54e6ef1e44ecf3bdd6a3100628da47fb=\"ENCAAAAAAWa45YwvzRBmkTXrmkfb58qWLqv/MCXOUQMcIWsLw7wiudhkDnAreTa3xyy81HzaYHnf5U+/zDubgf7QSkAow7iq49zM/NMpf89ehz31Vmg0w==\"; Path=/; Secure; HttpOnly\n3f02fdc1c0988888e8706218565eb98c72057030d663378e5bebc089aacbb4f3=\"ENCAAAAAAVm80laef0aPIxHb7HbF0QGFG9I39UGWhq7Xcxg3nVeBz9wHBmIscIauqq3gJFLlsGvalYnzDET9fWASJIt5bQ6gOM5xlRaKEHEvxqDmLqMqvt1waM1ImzH/H/FNTTqPpp9gCNaB20YNuo1kSqMoF0f\"; Expires=Tue, 07-Jul-2026 03:03:55 GMT; Path=/; Secure; HttpOnly\r\nx-cached-at: 1783393315729\r\nx-proxy-cache: MISS\r\nx-proxy-source: direct\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJ2PHOiNN2SW%2BUJDW4lW2Ow4v3GBZlYG2fzSFe%2BMW%2B39DMBb5ObOfsf4CmCXtJdUJECW1oME1oJw%2FJJPoCwRnK0G5NDSxpylLiDU%2B5muD0i2NxH%2BL9CMQ%2BR1NH1pHt3PL6%2BG5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1739b75f9a0b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThreatMetrix","description":"LexisNexis ThreatMetrix is an enterprise solution for online risk and fraud protection ('digital identity intelligence and digital authentication').","website":"https://risk.lexisnexis.com/products/threatmetrix","common_platform_enumeration":"","icon":"threatmetrix.png","categories":["Security","Browser fingerprinting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":265611,"size_decoded":53395,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61496), with CRLF line terminators","md5":"234614b3fcceba1ac397ce78ed14f7cf","sha1":"8a5e5a1d1c47ec23f989b2124dbd67336d55e839","sha256":"d6f3fd80b4f65c9660d743e420b89e2925cc91faa36c1f18ec1da52dd49aa54d","sha512":"353fc11371995249ca5eb76d22a77e9228844e307c79db8ee4be9cb8d7c5def379cc350f1487599ce779fb23a7fdd4af1f3d4af375ee925fdf02a676eb63c867","ssdeep":"1536:J/OSJFTREuqn9SJQq4pPhGzWELEgK7T1oPhHfovWJkXkIq2781BjaW+7x2rQTCDL:JDJFNESJybl7QAL8XaZ78rJZaG","tlshash":"63441758b3ce043a53b703a9a93a5f00f878c633c6068150b5ad6fa37ff5d445a27a9d","first_seen":"2026-07-07T03:02:30.742371Z","last_seen":"2026-07-07T03:02:30.742371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/favicon.ico","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.669Z","timestamp":1783393314669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/favicon.ico HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7; _gcl_au=1.1.923724628.1783393314; __tr_luptv=1783393314562\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8H%2B0%2BL77OcFCwDbQU56g6W%2BbIG8hCPpAHOpTo9Vti7NBY%2F1Za6l3WvnchcbtdP0IYNBL3l2%2FkSjz6ygbExhbtcJUT0bJPeWY%2ByclAlNtWK9GFlUpl%2Bmp2T6LvONUMl87lKnJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: zstd\r\ncf-ray: a1739b78b9bfb521-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nage: 41401\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:52 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083894705\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4118,"size_decoded":4893,"mime_type":"image/x-icon","magic":"PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced","md5":"c383fda46f09b9d7ef560733eafeb0b1","sha1":"bd6ccc1df01b1d8678b1c0bea55f9d9848b371c2","sha256":"0a2dc6f130f290ca8a7f1b48bee079fd3e035d244b959ee0dff7ec60d5d243a2","sha512":"a1acae034b91d97c92baa70dec721018a1121a189ad3f0918923cd7bcb700060d8fcb0695362c8ac21027c59d37cea4f0084fc2b3157755363faf25fd2b65acd","ssdeep":"96:WWEDa+Wk/BlZwqI2jKBa82YpR2q+hlCTOqzFpjngkvTgo:hk/BlDj18RRchITOqZp7Vz","tlshash":"0d815d4e2a90ecb3d0bc79f72b06564d98f8e86de086a0175008d1d559d1cf13de559a","first_seen":"2024-12-12T06:25:26.244914Z","last_seen":"2026-07-07T03:04:05.440011Z","times_seen":26,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:55.366Z","timestamp":1783393315366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://duilapcmrez.click/\r\nContent-Length: 130\r\nOrigin: https://duilapcmrez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":140,"data":"\n(6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0012\u0000\u001a\u0018TnA7HacJFoBWt9hnlunBlYfK\":\u0018\u0001*,\n\b\b\u0003\u0010¡\u000b\u0018\u0003\n\u0007\b\u0014\u0010Ç\u0004\u00186\n\b\b\u0012\u0010¨\u0005\u0018Î\u0004\n\u0007\b\u0013\u0010¡\u000b\u0018\u0018\u0012\u0004\b\u0001\u0010\u00018\u0002@ œ\u0001H°ê\u0001"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Tue, 07 Jul 2026 03:01:55 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":1261,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T12:40:26.815973Z","times_seen":17314312,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KJPLS3Q","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.090Z","timestamp":1783393314090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:39:04 GMT","end":"Mon, 07 Sep 2026 08:39:03 GMT"},"fingerprint":{"sha1":"6D:E4:85:F4:01:A4:0B:02:E0:64:E2:F2:58:93:6D:3F:4C:AB:30:9D","sha256":"4A:07:79:34:AC:03:17:68:07:4A:CB:68:23:A7:E3:14:B2:DE:22:3C:E1:AE:8D:F5:2F:2E:2D:C6:28:58:47:CE"}}},"request":{"raw":"GET /gtm.js?id=GTM-KJPLS3Q HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\nexpires: Tue, 07 Jul 2026 03:01:54 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 189939\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":659145,"size_decoded":190523,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (42959)","md5":"7ca4a98d6906957bcf8f6ee16dd88bcf","sha1":"94de7c8897921f9308d491dd17563f703b2c41c0","sha256":"96abd5c8132bde8b5d88605199e36196641bf9d7f7a928e4d15f3aed3d5b8b32","sha512":"1be950ba27d2197c2b26e04cd1163cbf04bca1b6eff430424861129a5ee2688db27e36bacfb80d141345564bac98c3c7f9745c939867ccd1e71b8bc641820f09","ssdeep":"12288:Yjr4OhQbB3DvTc0FFwbb28nzKXkwmx5zh:DB3DvTc0g2sWXFmXN","tlshash":"62e429ceb3c5b4769396e468943f018f697e20e3b44c9895f089ccd42e7056a6163fbe","first_seen":"2026-07-07T03:02:30.744744Z","last_seen":"2026-07-07T03:03:14.83245Z","times_seen":2,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":51,"receive":65,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/media/android-store-btn.978ed20444cf83f4d0f5.png","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.295Z","timestamp":1783393314295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/media/android-store-btn.978ed20444cf83f4d0f5.png HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a1739b7659a5b521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41404\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:49 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083826509\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrzr3zTYfd5OTYiDxnMSE%2B2o%2Fxn9gqnYj41acCqB1bJq1qLC3F2bYK5sBAR4Vp33NcCIsA1z3NlKAjzHC3L0v9m5MzJqu2wquqVPdIHjejc8ID4%2FPEu9yYfKrzxSRnuekUtzXQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10928\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10928,"size_decoded":11701,"mime_type":"image/png","magic":"PNG image data, 408 x 120, 8-bit/color RGBA, non-interlaced","md5":"48563a9f94e89f1923d46dfaaa3b2da5","sha1":"8df284d3f33e4cac17d1c8eaa19d88f0e7a32bc2","sha256":"d95034d55902498597af4e8cc2fee8618e4a043be568f450f018c3249f8b9935","sha512":"96d170019dbca6abdd78bb5630423f67073e6d623dd430fc810b858d8b1c021bfd7b32164bf6ff1e7c48c11ea5110f2097376394af2d48f444c1d4678336bd89","ssdeep":"192:Fv8ULMtxPPrDseOR9DbKlVbRa5YRor6rpUY/XYoZhPJH+j/CNVwu:xjLMtlPcp9DO3a5Y+2VUYw8hN+TCNVwu","tlshash":"6732bf6e300fa5bff5319332d373996da6585abe5635a048688a31390c447f9d78c0b7","first_seen":"2025-06-10T12:35:48.010816Z","last_seen":"2026-07-07T03:04:05.433424Z","times_seen":12,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/webapp/static/js/main.541f8879.js?__cv=v39","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:53.826Z","timestamp":1783393313826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /webapp/static/js/main.541f8879.js?__cv=v39 HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGjikdohwYhKLHeAGP4w%2BrfMl9e6rs93WcBbxIg91jhXAVT2Y3eqbDUq6P%2BgHDBKLjeGVDkOI8vrFGhBx8DCP2ulcf1CprHr%2BRsVmzRDB0p6%2BH1gX%2BUs1%2B6%2FdDkClm4T9tD45g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1739b73695db521-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 41406\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:47 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083809130\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":838014,"size_decoded":267390,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"ea180fed1e7d68cbee7b36538551fd73","sha1":"dec2b23a798eccaa7770931f6d383c42086db778","sha256":"7fcdebbbcf9e1271f2ddabbbfa097e9fe04646e5a4b6d0461343af4f1b5bd941","sha512":"e1c892f13c4d6a989d980105a9e81913e73ba35b4b239315e3ee8f80696b3b81e088b7be18b851772d0a99bb4a2428b87b3b12663eab82181072e4f21cfd3b52","ssdeep":"12288:5y7IST5H80dGLTc0hwBC2TwJyRMAadAw5B4+bFif+3vyX50v7nzmGLYj5U:5MHP0wBnbdahjg2KX50PmfU","tlshash":"5c057dc47291b4a66eab45c650bf854db33e1d09b40e8870f325fd98256d9c8b027fee","first_seen":"2026-06-26T21:08:00.605723Z","last_seen":"2026-07-07T03:04:05.442059Z","times_seen":12,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.242Z","timestamp":1783393314242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://duilapcmrez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 383865\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 17:01:56 GMT\r\nexpires: Tue, 06 Jul 2027 17:01:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 35998\r\nlast-modified: Mon, 22 Jun 2026 00:01:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":895421,"size_decoded":384771,"mime_type":"text/javascript","magic":"data","md5":"20a3b1e1f6332005d3a00b47c6f3092d","sha1":"787e0ddbb05f6e6dc019f68dbcb5c641c628547a","sha256":"d6731c3de00cfe1d418f0905d5b78e1cc7c382a95e95cadd44aa22b81a98c5c5","sha512":"ffae73ac43daaf89b463ee47ddaddd2d7c9800a96bb1145b2afa59a352b3eb08e4e7c0d88b07585a54dd3ebdcc39e563b727a282015c4b002f230a6315102ce5","ssdeep":"12288:VOuNtbumQUfi2q0LWNLaXnymCAYIJ4wyzTmWRF8WdWT0KZ1HcezE9:hb9+kW2XheRmWdk0KZ1Hi9","tlshash":"a91549d97152b0a95362f6f564376159e33e5826c80c084e7288d8f02ef4879f1faeb7","first_seen":"2026-06-25T14:15:22.826378Z","last_seen":"2026-07-16T13:33:45.653776Z","times_seen":12261,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":15,"receive":59,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/__click","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.251Z","timestamp":1783393314251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://duilapcmrez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"kind\":\"render\",\"ok\":1,\"why\":\"\",\"path\":\"/webapp/en/quick-recharge\",\"vid\":\"da4af3a2-4518-4820-b8dd-c9f2f8c877e7\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgCipTMXFSYNqUid6jHbxlz1HER4FNnVO4pqVQvCzIgixLo%2B6ZlhJBSh9g5EzAaRnuG6f35C17IHk%2FEih%2BdB6NRvSATteH4DbzsfxyexX1HCD0diJDHKf91RD2pX13hG0lC8Tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1739b7619a2b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1239,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T12:40:26.815973Z","times_seen":17314312,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=3\u0026frm=0\u0026ae=g\u0026auid=923724628.1783393314\u0026dt=du%20-%20My%20Account\u0026en=page_view\u0026dl=https%3A%2F%2Fduilapcmrez.click%2Fwebapp%2Fen%2Fquick-recharge\u0026scrsrc=www.googletagmanager.com\u0026rnd=161691688.1783393314\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6711v898604534za200zd898604534xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938469~118395333~119027224~119732170\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1783393314479\u0026tfd=960\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.487Z","timestamp":1783393314487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"POST /ccm/collect?rcb=3\u0026frm=0\u0026ae=g\u0026auid=923724628.1783393314\u0026dt=du%20-%20My%20Account\u0026en=page_view\u0026dl=https%3A%2F%2Fduilapcmrez.click%2Fwebapp%2Fen%2Fquick-recharge\u0026scrsrc=www.googletagmanager.com\u0026rnd=161691688.1783393314\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6711v898604534za200zd898604534xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938469~118395333~119027224~119732170\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1783393314479\u0026tfd=960\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://duilapcmrez.click/\r\nOrigin: https://duilapcmrez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ndate: Tue, 07 Jul 2026 03:01:55 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://duilapcmrez.click\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":546,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T12:40:26.815973Z","times_seen":17314312,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lf3YxEUAAAAAMxuBSiyKBkvZihtdWFM8fg79LiD\u0026co=aHR0cHM6Ly9kdWlsYXBjbXJlei5jbGljazo0NDM.\u0026hl=en\u0026type=image\u0026v=TnA7HacJFoBWt9hnlunBlYfK\u0026theme=light\u0026size=invisible\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=p3cdjorbqv5j","date":"2026-07-07T03:01:55.054Z","timestamp":1783393315054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /recaptcha/releases/TnA7HacJFoBWt9hnlunBlYfK/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42362\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 16:35:21 GMT\r\nexpires: Tue, 06 Jul 2027 16:35:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37594\r\nlast-modified: Mon, 22 Jun 2026 00:01:17 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":83001,"size_decoded":43208,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dd05231d82d5cf63ee9cf378e72532b5","sha1":"71c5d4c7fdba84f55b9c14679299a73dc8d03543","sha256":"fadd39c9c553b8c98b6b01f733c9d8ba7f2f1f972b8608e4cb3e46c4a9bf50b0","sha512":"ed55ed71458fade33399d72d80fc579e3b096a993754c98321a64c96be3a60d1f5fb4215f70b99164edc63df0e5ff34203d118f994aacf5079d3aa2cca1e9d22","ssdeep":"1536:a7Rpgh9C9ToL9gTNfWNfK4Rx9nHZzhXwWxlW1bx7:a7ArC9ULiTYNC4Rt9X4","tlshash":"a2837e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-06-25T14:15:22.819013Z","last_seen":"2026-07-15T15:59:20.299673Z","times_seen":13530,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/__click","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:02:13.869Z","timestamp":1783393333869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"POST /__click HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 95\r\nOrigin: https://duilapcmrez.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7; _gcl_au=1.1.923724628.1783393314; __tr_luptv=1783393314562; SameSite=\"ENCAAAAAAX80YC6LrFC5jWu2tar4A2WyDhTWjxBY+6byZiaCa3doQnGe78K1tn87C2Z1/OMh2A=\"; ADRUM_BTs=\"ENCAAAAAAUSdxtDlNKjl7Sy3T93gNbl22gzt17lKdVI0FICbzteJ2xYn4FDVvjbwehZt4M06Sw=\"; ADRUM_BTa=\"ENCAAAAAAVFa1IGhoyej7uLwwc77iEAopQiQ/8D8hjz/iMhbJL+cycsVSkRABKS/zf3QMHBHF//1sG8h/4hqlZdFmSLCuicMJUqwKdyoyqjn7jhD8tTMQGrAxa8iCeh9uqct+1PXH/bCodV3mlJo4Jj0wiJs7+gG1MuXt5NiHmnTFH81fdwa8Ffk82tM5H+685Z5OlxOkM=\"; ADRUM_BT1=\"ENCAAAAAAUm+LAyC69jc6oUMNxBNC0C9t0m8NYp6gQNUmhkpIn6ETSr0fGZw6knbqTcOiqBqNyG3E2pbaWcKGxokRgT1Qgi\"; 7046c9094c9e5a0446fdb51586a63f0a7df59c6e25ca7359861cf2ad2ab5493c=\"ENCAAAAAAUALFQzsDrKZuOdbAyjAEZ8GgHaTQnS+7I5SdedyotX85uJW58LVc0zEh7+RC3PbPkL0PX9GAMJXx7W2PD2L/niTqG4CrtCxK16vgHaHZWmpWfDiJh5mIxCeBJGNaFitmoIQQVqPdv8A1fC/35Ljy+P\"; 54e6ef1e44ecf3bdd6a3100628da47fb=\"ENCAAAAAAWa45YwvzRBmkTXrmkfb58qWLqv/MCXOUQMcIWsLw7wiudhkDnAreTa3xyy81HzaYHnf5U+/zDubgf7QSkAow7iq49zM/NMpf89ehz31Vmg0w==\"; 3f02fdc1c0988888e8706218565eb98c72057030d663378e5bebc089aacbb4f3=\"ENCAAAAAAVm80laef0aPIxHb7HbF0QGFG9I39UGWhq7Xcxg3nVeBz9wHBmIscIauqq3gJFLlsGvalYnzDET9fWASJIt5bQ6gOM5xlRaKEHEvxqDmLqMqvt1waM1ImzH/H/FNTTqPpp9gCNaB20YNuo1kSqMoF0f\"\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":95,"data":"{\"kind\":\"ping\",\"path\":\"/webapp/en/quick-recharge\",\"vid\":\"da4af3a2-4518-4820-b8dd-c9f2f8c877e7\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 07 Jul 2026 03:02:13 GMT\r\nserver: cloudflare\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gc3AEVcEzQa6HlvwpZU9AvdqinDMnIWqRH9w3iS4vL5S6wQEoQt0DXlt4q3TlYy%2FRG0nMtfJ%2F8N8e8hXpxDvHek17snvvX6Bi8wWHeQFUQb7MgJScKK0wqISrk%2Bp4onAioTmfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1739bf0bbd8b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2395,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T12:40:26.815973Z","times_seen":17314312,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KJPLS3Q\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.091Z","timestamp":1783393314091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:39:04 GMT","end":"Mon, 07 Sep 2026 08:39:03 GMT"},"fingerprint":{"sha1":"6D:E4:85:F4:01:A4:0B:02:E0:64:E2:F2:58:93:6D:3F:4C:AB:30:9D","sha256":"4A:07:79:34:AC:03:17:68:07:4A:CB:68:23:A7:E3:14:B2:DE:22:3C:E1:AE:8D:F5:2F:2E:2D:C6:28:58:47:CE"}}},"request":{"raw":"GET /gtm.js?id=GTM-KJPLS3Q\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\nexpires: Tue, 07 Jul 2026 03:01:54 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 189925\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":659116,"size_decoded":190529,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (42959)","md5":"279279ecae22f6a89e1c8ad830417055","sha1":"798ad555e1806ab78af40dbfe01f5179d7815a50","sha256":"a0d2ff4216ce8486634368fb90e31e24b32ccfd39e4d138f400322b55b196fcc","sha512":"ddd39107df30bbb4ac253e3452c21205499c49a9c9de6b5367dc7535ac22372b79883250f84c79b697518e2a423fa66a37321fa11a116387d5dc9df689bdb69f","ssdeep":"12288:Yjr4OhQbB3DvTc0FFwbb280oKXkwmx5zh:DB3DvTc0g2fpXFmXN","tlshash":"aee429ceb3c5b4769396e468943f018f697e20e3b44c9895f089ccd42e7056a6163fbe","first_seen":"2026-07-07T00:21:32.908136Z","last_seen":"2026-07-07T03:04:05.42925Z","times_seen":9,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":1,"connect":16,"send":0,"wait":37,"receive":60,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T03:01:53.549Z","timestamp":1783393313549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 07 Jul 2026 03:01:53 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://duilapcmrez.click/webapp/en/quick-recharge\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXL0ku6j6mWWoKnT2YS87K0zap942lRUQizphErbAyZX4C4N%2B00u%2BRpT3zCCJ0YZGduQ8nR9IdiKXjt8IjwWt8JYthKMvmE5ZXfi4axJqKmZPDFknZ8dOyoZerHCuJGAoQp8SQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a1739b71c949b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T12:40:26.815973Z","times_seen":17314312,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duilapcmrez.click/servlet/duaediscovery/common/images/app-banner-desktop-EN.png","fqdn":"duilapcmrez.click","domain":"duilapcmrez.click","tld":"click"},"ip":{"addr":"104.21.50.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duilapcmrez.click/webapp/en/quick-recharge","date":"2026-07-07T03:01:54.297Z","timestamp":1783393314297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duilapcmrez.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 23:01:14 GMT","end":"Sun, 27 Sep 2026 00:01:08 GMT"},"fingerprint":{"sha1":"5E:B4:66:20:07:5F:0F:77:58:81:A5:F4:26:6C:DC:6F:40:DF:4B:40","sha256":"5E:E8:79:10:F2:06:2E:E8:77:BD:3D:4A:8F:23:59:C3:91:7B:A9:E6:64:D7:A9:E5:80:EC:86:45:75:65:D6:21"}}},"request":{"raw":"GET /servlet/duaediscovery/common/images/app-banner-desktop-EN.png HTTP/1.1\r\nHost: duilapcmrez.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://duilapcmrez.click/webapp/en/quick-recharge\r\nCookie: __om_vid=da4af3a2-4518-4820-b8dd-c9f2f8c877e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 03:01:54 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a1739b7659a7b521-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41405\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 06 Jul 2026 15:31:48 GMT\r\nserver: cloudflare\r\nx-cached-at: 1782083825714\r\nx-proxy-source: r2\r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JkukhpwgtjjqYPrpICm6QJgdscsEuiURyMn%2BnTLM9nhxZKWy3MbXBQ2djipHU0ZrSddUodlz9lHBB6viZDTyRL54f9rCs2xy9qwK6oznEPZgmdYpt%2BoK0fVYTd0pldVIUbKoqg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 515332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515332,"size_decoded":516104,"mime_type":"image/png","magic":"PNG image data, 1920 x 400, 8-bit/color RGBA, non-interlaced","md5":"60b6ef954bddf69534336b4a7a0ca005","sha1":"9fe651d46a89bffe4bc4370a41a258fdd0d90263","sha256":"1db49ce75b706f11e16479e840483856166a0454d43a26a3df01b400bc7bdc1f","sha512":"e4ad89bf299ea9011678a8aae929f55d25c44284c01c60f93ed2395ff8e2a3a19a77958f45498675309746aac044788849dc174b35a22582bd0ca0e9ef03f4a4","ssdeep":"12288:wI5COmILoBDWqbw1ddA7e+E+J9WHvjmMjeQlT3Xk4My3FPu:wyHmwoBDWqbkA7lE+2bJj/uM1Pu","tlshash":"a6b4232948fa320efd9d92f07bd4190a32dd7dbd18795828a143fc065bb6b914dbb708","first_seen":"2025-06-10T12:35:47.973996Z","last_seen":"2026-07-07T03:04:05.446241Z","times_seen":12,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"duilapcmrez.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"duilapcmrez.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}