{"report_id":"da9dfe5a-5e68-4fa5-8c26-3f9a3dda4653","version":0,"status":"done","tags":[],"date":"2026-07-12T21:56:29Z","url":{"schema":"http","addr":"tuw-mujab.com","fqdn":"tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.tuw-mujab.com/","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"title":"Trust Card","dom":{"size":101951,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64375)","md5":"eda5f345341721d90f9db28383bda871","sha1":"8ed41238ef5054d131b0e03542eea995024f9f52","sha256":"a22831788125be390c4497e0cc475f16f700cbd3f3201b1dcac7596b59aafe06","sha512":"ffc42463b2a1d570fb8f726cb92bb4a7e027c528a8f96b03d0b90a90c807f9229b19a4e132be930b423ba63fe4e9a39b1237700a469bdb4ce76edd234519a443","ssdeep":"1536:ct1kcqXRsVqtR3cDWCQDc8WCoxTR+/c8WCoxTRHzHc8WCoxTRn65PlaIIFf7IB5E:cpUmMS02Bwdl","tlshash":"baa3e87c45121b3fa22b8bcb75a13b6df072628eff85009cf7f923546be1ca46954489","dom_hash":"domhash6e95296093889d9386ce60b7ae54b1d4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tuw-mujab.com","fqdn":"tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:56:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"tuw-mujab.com","ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-07-12","domain_rank":0,"first_seen":"2026-07-12T15:37:27.423951Z","last_seen":"2026-07-12T15:37:27.423951Z","alert_count":1,"request_count":1,"received_data":343,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.tuw-mujab.com","ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-07-12","domain_rank":0,"first_seen":"2026-07-12T15:37:27.440684Z","last_seen":"2026-07-12T15:37:27.440684Z","alert_count":11,"request_count":11,"received_data":9799635,"sent_data":5616,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"customers-server.herokuapp.com","ip":{"addr":"46.137.15.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2010-09-19","domain_rank":0,"first_seen":"2022-11-06T13:57:10Z","last_seen":"2026-07-12T15:37:28.105475Z","alert_count":0,"request_count":5,"received_data":18089,"sent_data":2565,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"customers-server.herokuapp.com/tracker/tracker.js","fqdn":"customers-server.herokuapp.com","domain":"customers-server.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"46.137.15.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a838e876adc4ec1e08214ed9313846c","sha1":"60ec7c3cc5b5944d4cbb454b60f6c186f3af18cb","sha256":"e0928c860b9b3c6fa077c153833f8d3ecd1622323552d1f9700a27a2b368dbde","sha512":"0e77a3d09c18f5ec2f7aa9da6cef60359adce9f1b3e25ebc5bf769b8d43d7e2eb22773dec51ef27382aa9eeb54517ac45f64c4d7202d1a68e6e6b181c4e46915","ssdeep":"192:5GXjYOkuh6QO8Q7uZkcZywqsSAJ7EnflrZEASDLw86NdXDdy+S3Gt/:5GXkwq/AglrZBSDE4Gt/","tlshash":"36f1305c28e320b06a77703d5bafe24577369153a489ce00beacd9407f64e2a52b5fcd","size":7487,"data":"","first_seen":"2026-07-12T15:37:32.793683Z","last_seen":"2026-07-12T21:56:34.061244Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/assets/index-DX0eTIYU.js","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53eff052fa6a8e9c60cc232ffb1881f8","sha1":"145daf2ad1b9f406d92a4c1b343c66c9f7a8fd5e","sha256":"5e9fc93d5295881cacbc00c2ddb7d3228dbc5b6a22c715fd59a9aaf2a4c0e8f6","sha512":"ca268562b521c4899c1e89fda5309457207a634699dd1d328906e3256e470b5d9242c1eab41337ae09d520d0ded3a94889d9a53e0be291ceb3d008613216e1e2","ssdeep":"12288:2+zEK0Fa+YgOPKr3PWNllfARnZADpelR1C5+6BGN91Lxn3GI/5RgIsBWO4RHsm:nzPgOPKTeXDpGx3GO5RgkRv","tlshash":"40357ec473e4b17043ab5256805f493df37a5875a90e8168f260edef39b0884927bfb9","size":1069064,"data":"","first_seen":"2026-07-12T15:37:32.796668Z","last_seen":"2026-07-12T21:56:34.063466Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.tuw-mujab.com/assets/index-DQxF3vE7.css","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:57.881Z","timestamp":1783893357881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET /assets/index-DQxF3vE7.css HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 34419\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-DQxF3vE7.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 12 Jul 2026 21:55:57 GMT\r\netag: W/\"0fa68ba5305585171ca7d36945bb4734\"\r\nlast-modified: Sun, 12 Jul 2026 12:22:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d7dbk-1783893357886-6014ee27a189\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139174,"size_decoded":28649,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0fa68ba5305585171ca7d36945bb4734","sha1":"0e0f031ae4235e4912eaa995d46e44214c9bce1a","sha256":"5c107f9f3015edc3c4cdc1c89e6f8462b1d4876936d478e187417492eec57ac6","sha512":"6b46e2bfc7b7ff54f130e1884989cfec4b110abd1d3f187d32fae80b1d05bf1e5e8b8c5e324897ae4e6e86ba58cb9fffa5b3b84aa43e30e56091ab4aaf888be6","ssdeep":"1536:FBi+VuOD7nrpO0Fk9kmvmo18xgnd8+99UvGFoXo2hXQzv:bzoemfF9aQ","tlshash":"9ed3e760e260723db82bdaa4bac45b8d7318f103e92347fdf544a23589d71f70e7994a","first_seen":"2026-07-12T15:37:32.785303Z","last_seen":"2026-07-12T21:56:34.03743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/assets/multi-currency-app-D67tCJLw.png","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:58.197Z","timestamp":1783893358197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET /assets/multi-currency-app-D67tCJLw.png HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34418\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"multi-currency-app-D67tCJLw.png\"\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 21:55:58 GMT\r\netag: \"00cf7f94dcf7d43a3906f649c90f5069\"\r\nlast-modified: Sun, 12 Jul 2026 12:22:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dnr9v-1783893358202-37c80eccb773\r\ncontent-length: 1740685\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1740685,"size_decoded":1741220,"mime_type":"image/png","magic":"PNG image data, 1003 x 1568, 8-bit/color RGB, non-interlaced","md5":"a4503ed4006072218edb13730bf9b8bb","sha1":"0a4820dda9348a404096a0093e7296338931b09e","sha256":"e2d173765dee9a4e69283a893f03998671088e322e89fc750d1fe307dafbbe74","sha512":"a385a6236dc017a44a7826e36825c831ae0619c0d66872354523e30a71cbc148c28ab51bdb3b63e6c4e29dc0565ea58a49418b02fdfa7c84cc6a2f65034ae6e6","ssdeep":"24576:NQKL2JLglJcJutfsUG3Vp/ZgAic/NYvlP5on+4yWFdXXve:6KKJsfsUG3Vp/dic/NYvZP4yz","tlshash":"9c2533d1d8eef524ce4f4ff5f6c9f23f1b9a6091f4d153e7b4ac91a2a0a42102a1506e","first_seen":"2026-06-21T14:00:44.14019Z","last_seen":"2026-07-12T21:56:34.040128Z","times_seen":4,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/assets/p2p-access-CwMY1rO4.png","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:58.245Z","timestamp":1783893358245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET /assets/p2p-access-CwMY1rO4.png HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34418\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"p2p-access-CwMY1rO4.png\"\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 21:55:58 GMT\r\netag: \"c54ae743538c95919285b7bc3ce65b2e\"\r\nlast-modified: Sun, 12 Jul 2026 12:22:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dnr9v-1783893358251-fd1caf0b2560\r\ncontent-length: 1660979\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1660979,"size_decoded":1661506,"mime_type":"image/png","magic":"PNG image data, 1003 x 1568, 8-bit/color RGB, non-interlaced","md5":"ee1b0cfc1a98c782b9c57fe01524785f","sha1":"23d67e81184fc8eb178656992e4472850496aec6","sha256":"12268bd72aacf238a9c19a40b1a2fba70a5cd737dd49da20d141cc2bf851bc13","sha512":"75460e8dee1268c1823f5c7ecf8a10469afc2628e21a1a950b71fd4c40fa014fa7aa02b68b75b99e380080d91d88c0d19a3057dffcde9da7e666cca0e0fd5450","ssdeep":"24576:ZJdFys+WQPc2SaugCf0TKhRiOWw2wOVImHlRwIzhTKI:NUs0SFRfzgJw2wEPFRNzAI","tlshash":"132533e91b0008ccdd8afbf15c824d6aedd20184ad4ae7e1e55e81be77f671077886b1","first_seen":"2026-06-21T14:00:44.13466Z","last_seen":"2026-07-12T21:56:34.043238Z","times_seen":4,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/favicon.svg","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:58.550Z","timestamp":1783893358550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34419\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:58 GMT\r\netag: \"e09854b6dc2df0d0e9cdea35221a4c13\"\r\nlast-modified: Sun, 12 Jul 2026 12:22:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j56pz-1783893358555-d36c54f19667\r\ncontent-length: 799\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":799,"size_decoded":1314,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e09854b6dc2df0d0e9cdea35221a4c13","sha1":"99e3bbf1262ff8526b450cfe6633409e3977a03a","sha256":"b36fdbbfcb42736e9b6f470a86d569d9cd39e4f81493e7194f13e6e0ce7bfb58","sha512":"dbc7d7e5befd87199c0bebd0005653ffb5006e336fe5870edb2e6a2757fe9d267a1b68345f20ae71c583747b8e0f028c5bcc37d45848ac0506a1432d00c96f7b","ssdeep":"","tlshash":"5001c927d0f8d56be28a831e8a50a8540b3900fb52880218f61c1b2f1f0a2c21d8bbe4","first_seen":"2026-07-12T15:37:32.806733Z","last_seen":"2026-07-12T21:56:34.045992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"customers-server.herokuapp.com/collect/events","fqdn":"customers-server.herokuapp.com","domain":"customers-server.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"46.137.15.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:56:01.936Z","timestamp":1783893361936,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D5:86:CA:E6:BB:C8:C0:C3:EB:2B:C8:C0:76:9A:97:0C:C9:9E:B5:45","sha256":"49:FE:8D:59:BA:2A:D5:AE:6B:FA:66:ED:C9:36:A0:57:D5:A0:D8:0C:08:90:30:DF:81:B9:57:50:66:CD:EE:81"}}},"request":{"raw":"POST /collect/events HTTP/1.1\r\nHost: customers-server.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Length: 369\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://www.tuw-mujab.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 204 No Content\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With, X-Tracker-Site-Id, X-Tracker-Anonymous-Id, X-Tracker-Session-Id, X-Tracker-Path, X-Tracker-Referrer, X-Tracker-Title, X-Tracker-Url\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Private-Network: true\r\nAccess-Control-Expose-Headers: Retry-After, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, RateLimit-Policy\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; frame-ancestors 'self' http://localhost:* https://localhost:* https://crmpanel-new.vercel.app; object-src 'none'; base-uri 'self';\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: cross-origin\r\nDate: Sun, 12 Jul 2026 21:56:02 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nOrigin-Agent-Cluster: ?1\r\nRatelimit-Limit: 600\r\nRatelimit-Policy: 600;w=60\r\nRatelimit-Remaining: 598\r\nRatelimit-Reset: 60\r\nReferrer-Policy: no-referrer\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=4GGZDGtayBNBOTsVQPvp3fJLjmpp%2FCVdzmieBu5Vhb0%3D\\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\\u0026ts=1783893362\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=4GGZDGtayBNBOTsVQPvp3fJLjmpp%2FCVdzmieBu5Vhb0%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1783893362\"\r\nServer: Heroku\r\nSet-Cookie: heroku-session-affinity=Q38DAQERU3RpY2t5U2Vzc2lvbkRhdGEB/4AAAQMBBUFwcElEAQwAAQhEeW5vTmFtZQEMAAEJRHlub0NvdW50AQQAAAAM/4ACBXdlYi4xAQIARMPRiGUYPESFILe+D/Zb99ZRg5hULdX5K5efJpGPuro=; HttpOnly; Secure; SameSite=Lax\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nTiming-Allow-Origin: *\r\nVia: 1.1 heroku-router\r\nX-Content-Type-Options: nosniff\r\nX-Dns-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Xss-Protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T00:24:25.319552Z","times_seen":17435669,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:55:57.382Z","timestamp":1783893357382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 36351\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 12 Jul 2026 21:55:57 GMT\r\netag: \"cd424d8b339f10b76fae8534d7857a15\"\r\nlast-modified: Sun, 12 Jul 2026 11:50:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5qxnm-1783893357451-a273552331c9\r\ncontent-length: 988\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":988,"size_decoded":1490,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"cd424d8b339f10b76fae8534d7857a15","sha1":"db99ccfcf511f3b260d39ea6f765a5124de35aff","sha256":"10a0bd260e38603835894952c07cbf2ed52ed0674ec822f43fa5bed88674d417","sha512":"afaaa98920338925fb4b1df90cb912dcc5a54e3af3a3fdf5e732c07a7712374f44df24c5af9ddd16d6e3ea4d9d940d5bb238e1e362d302231a34af7728fe1b5c","ssdeep":"","tlshash":"bc11140358e0c90513604b7c5dd1f4188e56f5879b497d8477df60791fc1fc18a9baa8","first_seen":"2026-07-12T15:37:32.791351Z","last_seen":"2026-07-12T21:56:34.049227Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":33,"connect":1,"send":0,"wait":10,"receive":12,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuw-mujab.com/","fqdn":"tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:55:57.267Z","timestamp":1783893357267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuw-mujab.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:56 GMT","end":"Sat, 10 Oct 2026 10:47:55 GMT"},"fingerprint":{"sha1":"DA:8C:C1:AA:BE:DB:1B:4A:B7:A3:48:2A:94:53:F2:78:3B:22:53:6C","sha256":"28:41:D5:AA:64:B1:3A:A0:86:00:E3:67:65:A8:90:D4:D8:EE:BE:6F:07:3A:9E:8C:5F:8F:18:3B:E4:48:69:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 12 Jul 2026 21:55:57 GMT\r\nlocation: https://www.tuw-mujab.com/\r\nrefresh: 0;url=https://www.tuw-mujab.com/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::8t9d9-1783893357341-a9445675321f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T00:24:25.319552Z","times_seen":17435669,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":33,"connect":1,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/trust-logo.svg","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:58.186Z","timestamp":1783893358186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET /trust-logo.svg HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34419\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"trust-logo.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:58 GMT\r\netag: \"aac97febe9d024b3c7c77cf3a936953e\"\r\nlast-modified: Sun, 12 Jul 2026 12:22:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5qxnm-1783893358191-b978c87241a3\r\ncontent-length: 769\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":769,"size_decoded":1287,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aac97febe9d024b3c7c77cf3a936953e","sha1":"09d7a8dc38a85ec56aa4f51d50d25e92c40e6696","sha256":"6e64b0e33fbda867c4b6ad44debd2b5c2abf861d3b647eb4b44cb3435791ab24","sha512":"0164289aa9aa8fe9564349fc6b61a6a47f85ea5e572e52f3fdd0dc81b80a4d6d291d96fb152fbfca12d3c05dcd39d1c7bad49cb299fb9049d4de96a3fb452d0b","ssdeep":"","tlshash":"7901d067d0f4d56be2dac31e8a109454073501f751884318f55c5b2f1f1d2c31d47be4","first_seen":"2026-07-12T15:37:32.811548Z","last_seen":"2026-07-12T21:56:34.051605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/assets/card-ready-KAoprqEK.png","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:58.248Z","timestamp":1783893358248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET /assets/card-ready-KAoprqEK.png HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34418\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"card-ready-KAoprqEK.png\"\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 21:55:58 GMT\r\netag: \"3bb8af15921a29a6b7e94dcf91776a80\"\r\nlast-modified: Sun, 12 Jul 2026 12:22:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j5h5s-1783893358253-05cbc7ec13cd\r\ncontent-length: 1696089\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1696089,"size_decoded":1696616,"mime_type":"image/png","magic":"PNG image data, 1003 x 1568, 8-bit/color RGB, non-interlaced","md5":"8d9449a09dfc3a52ffe27021d5d949ab","sha1":"5f9939dfb4c920028b95e4805d9f93a5972ad7a1","sha256":"153fd1714f6b2c873b0482520ce83c9aceb59e68088cdd7db1dc72698fb9fb15","sha512":"1b4fdf2c52d8d47f6b98855590147a5cb1e3dd518b610625f58a2178a31ebae8de7e22f6c11dc3324ac0db5ded67fea3e61b25360a81168c98607e3d3ddd4442","ssdeep":"24576:bj5+uFpBuMT6bKtqo4RwOc4exrEA8K0qdZGkasZN5l3xTUY6RGJ1Ekj:35+uFpgXo4Rwl4CrEtK5HGkasZN/3xQA","tlshash":"102523acdc6124dccb5b0573c6d8c26464fb72e674060ae3c9287594fa0aab137dc7da","first_seen":"2026-06-21T14:00:44.167549Z","last_seen":"2026-07-12T21:56:34.054264Z","times_seen":4,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"customers-server.herokuapp.com/crypto/client-location","fqdn":"customers-server.herokuapp.com","domain":"customers-server.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"46.137.15.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:58.124Z","timestamp":1783893358124,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D5:86:CA:E6:BB:C8:C0:C3:EB:2B:C8:C0:76:9A:97:0C:C9:9E:B5:45","sha256":"49:FE:8D:59:BA:2A:D5:AE:6B:FA:66:ED:C9:36:A0:57:D5:A0:D8:0C:08:90:30:DF:81:B9:57:50:66:CD:EE:81"}}},"request":{"raw":"GET /crypto/client-location HTTP/1.1\r\nHost: customers-server.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tuw-mujab.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With, X-Tracker-Site-Id, X-Tracker-Anonymous-Id, X-Tracker-Session-Id, X-Tracker-Path, X-Tracker-Referrer, X-Tracker-Title, X-Tracker-Url\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: Retry-After, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, RateLimit-Policy\r\nContent-Length: 93\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; frame-ancestors 'self' http://localhost:* https://localhost:* https://crmpanel-new.vercel.app; object-src 'none'; base-uri 'self';\r\nContent-Type: application/json; charset=utf-8\r\nCross-Origin-Opener-Policy: same-origin\r\nDate: Sun, 12 Jul 2026 21:55:58 GMT\r\nEtag: W/\"5d-GnntQdU6q3Bph4t4ctH0LgH4zhU\"\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nOrigin-Agent-Cluster: ?1\r\nRatelimit-Limit: 60\r\nRatelimit-Policy: 60;w=60\r\nRatelimit-Remaining: 58\r\nRatelimit-Reset: 60\r\nReferrer-Policy: no-referrer\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=qERYzUlkgJIwXyDJuPM42vs5qn4dVqpj4rQLpH3SpP8%3D\\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\\u0026ts=1783893358\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=qERYzUlkgJIwXyDJuPM42vs5qn4dVqpj4rQLpH3SpP8%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1783893358\"\r\nServer: Heroku\r\nSet-Cookie: heroku-session-affinity=Q38DAQERU3RpY2t5U2Vzc2lvbkRhdGEB/4AAAQMBBUFwcElEAQwAAQhEeW5vTmFtZQEMAAEJRHlub0NvdW50AQQAAAAM/4ACBXdlYi4xAQIARMPRiGUYPESFILe+D/Zb99ZRg5hULdX5K5efJpGPuro=; HttpOnly; Secure; SameSite=Lax\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nVia: 1.1 heroku-router\r\nX-Content-Type-Options: nosniff\r\nX-Dns-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Xss-Protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":2154,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"975d05ca5b96dc81f09befc89460a47a","sha1":"1a79ed41d53aab7069878b7872d1f42e01f8ce15","sha256":"bc5b2e4ae5a79b1e89d0358a3a6187542c5fc4921a8494a1135b24870c50668c","sha512":"b665a49e464a1e6b9f84276b7ed5f127001d95b4ee1729a74d413ddfe1731147fba7b069ca2f62a2df45bb574d5b9faeccb62ddab7ddcbdbd15185e52d331a02","ssdeep":"","tlshash":"80b0121d44309a4efe25635420dd7831417901538180480582cc0f3d0ad43d8b041033","first_seen":"2026-06-21T14:00:44.171605Z","last_seen":"2026-07-12T21:56:34.056967Z","times_seen":4,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":34,"send":0,"wait":43,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/favicon.png","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:58.548Z","timestamp":1783893358548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 30502\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.png\"\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 21:55:58 GMT\r\netag: \"4e9cc5eafe9d06f5e4548d19fb379db3\"\r\nlast-modified: Sun, 12 Jul 2026 13:27:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j5h5s-1783893358554-32067bf3ada6\r\ncontent-length: 5941\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5941,"size_decoded":6453,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"4e9cc5eafe9d06f5e4548d19fb379db3","sha1":"4e648a523196b47423f6ea7bfb4fdff471240f6e","sha256":"00eae221e63e57034451a519975f040cc1fbcf4749d90343a87c2e19102ee6c6","sha512":"9b7410a92c9277748e006972e0e76c248564b32c13297afae30884a5e191ad60e6b2cd0e501fa5b685b97b7bdd4849384081b66b2d5b5df584c8b6c03084aba6","ssdeep":"96:StIYXMMdYo9Yzs34d3AT8KVq6A3yqI03v9/uzju7usaE9cDIlNvx9D6Mj3aZg77O:I8MdYob0AT8KVxA3yqH9/uzjQuPKcc7E","tlshash":"60c15d745b81c063496fd01ca03ad5d6482696bb82b095fac3bdf97b1f72b6984c08c9","first_seen":"2026-07-12T15:37:32.790047Z","last_seen":"2026-07-12T21:56:34.057856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/assets/everyday-spending-7a3fMXLe.png","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:58.247Z","timestamp":1783893358247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET /assets/everyday-spending-7a3fMXLe.png HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34418\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"everyday-spending-7a3fMXLe.png\"\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 21:55:58 GMT\r\netag: \"331a6de798475931e4e8c792cf989d31\"\r\nlast-modified: Sun, 12 Jul 2026 12:22:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qt6gz-1783893358252-79a3c0113abb\r\ncontent-length: 1874665\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1874665,"size_decoded":1875199,"mime_type":"image/png","magic":"PNG image data, 1122 x 1402, 8-bit/color RGB, non-interlaced","md5":"a9022394638bc14069d7704ecfcf6504","sha1":"7c666b5ea21b49a087006580fe8ae307ede0fe90","sha256":"0d027ad47cd3a92b854bef242d112e6ca2eec94ca0fa035661c5cc0fac8438af","sha512":"507c22893b706ccf4453356592b9a1195992685f0309a4a4b8fd7eea118ef833187980a4b913c0de1cd23eee33103eed5523f3ccd39e98e867814af55b66e659","ssdeep":"24576:SwhzHTa+eWLge7QcCKGzmyiyg+KPhYZffRC7tog1t:f5TAWswYmyirQfRC7t5X","tlshash":"102523eae97530d2e94d3cf0f8020291b901f743769c2a8af4999109a71ce1f7795b7b","first_seen":"2026-06-21T14:00:44.150104Z","last_seen":"2026-07-12T21:56:34.060243Z","times_seen":4,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"customers-server.herokuapp.com/collect/events","fqdn":"customers-server.herokuapp.com","domain":"customers-server.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"46.137.15.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:56:01.934Z","timestamp":1783893361934,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D5:86:CA:E6:BB:C8:C0:C3:EB:2B:C8:C0:76:9A:97:0C:C9:9E:B5:45","sha256":"49:FE:8D:59:BA:2A:D5:AE:6B:FA:66:ED:C9:36:A0:57:D5:A0:D8:0C:08:90:30:DF:81:B9:57:50:66:CD:EE:81"}}},"request":{"raw":"POST /collect/events HTTP/1.1\r\nHost: customers-server.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Length: 373\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://www.tuw-mujab.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":373,"data":"{\"siteId\":\"trust-card\",\"anonymousId\":\"d0c025b6-9269-4ff7-8a42-2bf96daf75e7\",\"sessionId\":\"68ea63e0-1862-4813-9d85-35d31f74b42c\",\"user\":null,\"url\":\"https://www.tuw-mujab.com/\",\"path\":\"/\",\"title\":\"Trust Card\",\"referrer\":null,\"metadata\":{\"sessionStart\":false},\"eventId\":\"2b76df4b-bfa8-40ea-adc0-5e47a551da65\",\"eventName\":\"session_start\",\"occurredAt\":\"2026-07-12T21:56:01.932Z\"}"}},"response":{"raw":"HTTP/1.1 204 No Content\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With, X-Tracker-Site-Id, X-Tracker-Anonymous-Id, X-Tracker-Session-Id, X-Tracker-Path, X-Tracker-Referrer, X-Tracker-Title, X-Tracker-Url\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Private-Network: true\r\nAccess-Control-Expose-Headers: Retry-After, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, RateLimit-Policy\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; frame-ancestors 'self' http://localhost:* https://localhost:* https://crmpanel-new.vercel.app; object-src 'none'; base-uri 'self';\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: cross-origin\r\nDate: Sun, 12 Jul 2026 21:56:02 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nOrigin-Agent-Cluster: ?1\r\nRatelimit-Limit: 600\r\nRatelimit-Policy: 600;w=60\r\nRatelimit-Remaining: 599\r\nRatelimit-Reset: 60\r\nReferrer-Policy: no-referrer\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=6ROTmYGK%2BG9Nm%2B7bh%2FP2j28jWUXDiRp1wnb1yx52jVY%3D\\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\\u0026ts=1783893361\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=6ROTmYGK%2BG9Nm%2B7bh%2FP2j28jWUXDiRp1wnb1yx52jVY%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1783893361\"\r\nServer: Heroku\r\nSet-Cookie: heroku-session-affinity=Q38DAQERU3RpY2t5U2Vzc2lvbkRhdGEB/4AAAQMBBUFwcElEAQwAAQhEeW5vTmFtZQEMAAEJRHlub0NvdW50AQQAAAAM/4ACBXdlYi4xAQIARMPRiGUYPESFILe+D/Zb99ZRg5hULdX5K5efJpGPuro=; HttpOnly; Secure; SameSite=Lax\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nTiming-Allow-Origin: *\r\nVia: 1.1 heroku-router\r\nX-Content-Type-Options: nosniff\r\nX-Dns-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Xss-Protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T00:24:25.319552Z","times_seen":17435669,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customers-server.herokuapp.com/tracker/tracker.js","fqdn":"customers-server.herokuapp.com","domain":"customers-server.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"46.137.15.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:57.877Z","timestamp":1783893357877,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D5:86:CA:E6:BB:C8:C0:C3:EB:2B:C8:C0:76:9A:97:0C:C9:9E:B5:45","sha256":"49:FE:8D:59:BA:2A:D5:AE:6B:FA:66:ED:C9:36:A0:57:D5:A0:D8:0C:08:90:30:DF:81:B9:57:50:66:CD:EE:81"}}},"request":{"raw":"GET /tracker/tracker.js HTTP/1.1\r\nHost: customers-server.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With, X-Tracker-Site-Id, X-Tracker-Anonymous-Id, X-Tracker-Session-Id, X-Tracker-Path, X-Tracker-Referrer, X-Tracker-Title, X-Tracker-Url\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Private-Network: true\r\nAccess-Control-Expose-Headers: Retry-After, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, RateLimit-Policy\r\nCache-Control: public, max-age=300\r\nContent-Length: 7487\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; frame-ancestors 'self' http://localhost:* https://localhost:* https://crmpanel-new.vercel.app; object-src 'none'; base-uri 'self';\r\nContent-Type: application/javascript; charset=utf-8\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: cross-origin\r\nDate: Sun, 12 Jul 2026 21:56:01 GMT\r\nEtag: W/\"1d3f-YOx8PMW1lE1Mu0VLYPbBhvOvGMs\"\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nOrigin-Agent-Cluster: ?1\r\nRatelimit-Limit: 600\r\nRatelimit-Policy: 600;w=60\r\nRatelimit-Remaining: 599\r\nRatelimit-Reset: 60\r\nReferrer-Policy: no-referrer\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=6ROTmYGK%2BG9Nm%2B7bh%2FP2j28jWUXDiRp1wnb1yx52jVY%3D\\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\\u0026ts=1783893361\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=6ROTmYGK%2BG9Nm%2B7bh%2FP2j28jWUXDiRp1wnb1yx52jVY%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1783893361\"\r\nServer: Heroku\r\nSet-Cookie: heroku-session-affinity=Q38DAQERU3RpY2t5U2Vzc2lvbkRhdGEB/4AAAQMBBUFwcElEAQwAAQhEeW5vTmFtZQEMAAEJRHlub0NvdW50AQQAAAAM/4ACBXdlYi4xAQIARMPRiGUYPESFILe+D/Zb99ZRg5hULdX5K5efJpGPuro=; HttpOnly; Secure; SameSite=Lax\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nTiming-Allow-Origin: *\r\nVia: 1.1 heroku-router\r\nX-Content-Type-Options: nosniff\r\nX-Dns-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Xss-Protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7487,"size_decoded":9704,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"1a838e876adc4ec1e08214ed9313846c","sha1":"60ec7c3cc5b5944d4cbb454b60f6c186f3af18cb","sha256":"e0928c860b9b3c6fa077c153833f8d3ecd1622323552d1f9700a27a2b368dbde","sha512":"0e77a3d09c18f5ec2f7aa9da6cef60359adce9f1b3e25ebc5bf769b8d43d7e2eb22773dec51ef27382aa9eeb54517ac45f64c4d7202d1a68e6e6b181c4e46915","ssdeep":"192:5GXjYOkuh6QO8Q7uZkcZywqsSAJ7EnflrZEASDLw86NdXDdy+S3Gt/:5GXkwq/AglrZBSDE4Gt/","tlshash":"36f1305c28e320b06a77703d5bafe24577369153a489ce00beacd9407f64e2a52b5fcd","first_seen":"2026-07-12T15:37:32.793683Z","last_seen":"2026-07-12T21:56:34.061244Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4050,"timings":{"blocked":-1,"dns":18,"connect":34,"send":0,"wait":192,"receive":33,"ssl":3773},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/assets/index-DX0eTIYU.js","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:57.879Z","timestamp":1783893357879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET /assets/index-DX0eTIYU.js HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 36351\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-DX0eTIYU.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 12 Jul 2026 21:55:57 GMT\r\netag: W/\"53eff052fa6a8e9c60cc232ffb1881f8\"\r\nlast-modified: Sun, 12 Jul 2026 11:50:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::njf6w-1783893357884-21fb3fd94540\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1069064,"size_decoded":337802,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42750)","md5":"53eff052fa6a8e9c60cc232ffb1881f8","sha1":"145daf2ad1b9f406d92a4c1b343c66c9f7a8fd5e","sha256":"5e9fc93d5295881cacbc00c2ddb7d3228dbc5b6a22c715fd59a9aaf2a4c0e8f6","sha512":"ca268562b521c4899c1e89fda5309457207a634699dd1d328906e3256e470b5d9242c1eab41337ae09d520d0ded3a94889d9a53e0be291ceb3d008613216e1e2","ssdeep":"12288:2+zEK0Fa+YgOPKr3PWNllfARnZADpelR1C5+6BGN91Lxn3GI/5RgIsBWO4RHsm:nzPgOPKTeXDpGx3GO5RgkRv","tlshash":"40357ec473e4b17043ab5256805f493df37a5875a90e8168f260edef39b0884927bfb9","first_seen":"2026-07-12T15:37:32.796668Z","last_seen":"2026-07-12T21:56:34.063466Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"customers-server.herokuapp.com/crypto/card-order-cost","fqdn":"customers-server.herokuapp.com","domain":"customers-server.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"46.137.15.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:58.121Z","timestamp":1783893358121,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D5:86:CA:E6:BB:C8:C0:C3:EB:2B:C8:C0:76:9A:97:0C:C9:9E:B5:45","sha256":"49:FE:8D:59:BA:2A:D5:AE:6B:FA:66:ED:C9:36:A0:57:D5:A0:D8:0C:08:90:30:DF:81:B9:57:50:66:CD:EE:81"}}},"request":{"raw":"GET /crypto/card-order-cost HTTP/1.1\r\nHost: customers-server.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tuw-mujab.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With, X-Tracker-Site-Id, X-Tracker-Anonymous-Id, X-Tracker-Session-Id, X-Tracker-Path, X-Tracker-Referrer, X-Tracker-Title, X-Tracker-Url\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: Retry-After, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, RateLimit-Policy\r\nContent-Length: 38\r\nContent-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; frame-ancestors 'self' http://localhost:* https://localhost:* https://crmpanel-new.vercel.app; object-src 'none'; base-uri 'self';\r\nContent-Type: application/json; charset=utf-8\r\nCross-Origin-Opener-Policy: same-origin\r\nDate: Sun, 12 Jul 2026 21:55:58 GMT\r\nEtag: W/\"26-stDvS1UzKrtlhJqUBjm0ASByZro\"\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nOrigin-Agent-Cluster: ?1\r\nRatelimit-Limit: 60\r\nRatelimit-Policy: 60;w=60\r\nRatelimit-Remaining: 59\r\nRatelimit-Reset: 60\r\nReferrer-Policy: no-referrer\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=qERYzUlkgJIwXyDJuPM42vs5qn4dVqpj4rQLpH3SpP8%3D\\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\\u0026ts=1783893358\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=qERYzUlkgJIwXyDJuPM42vs5qn4dVqpj4rQLpH3SpP8%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1783893358\"\r\nServer: Heroku\r\nSet-Cookie: heroku-session-affinity=Q38DAQERU3RpY2t5U2Vzc2lvbkRhdGEB/4AAAQMBBUFwcElEAQwAAQhEeW5vTmFtZQEMAAEJRHlub0NvdW50AQQAAAAM/4ACBXdlYi4xAQIARMPRiGUYPESFILe+D/Zb99ZRg5hULdX5K5efJpGPuro=; HttpOnly; Secure; SameSite=Lax\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nVia: 1.1 heroku-router\r\nX-Content-Type-Options: nosniff\r\nX-Dns-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Xss-Protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38,"size_decoded":2099,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ebf938090ac544cd1e996d4fb99279ec","sha1":"b2d0ef4b55332abb65849a940639b401207266ba","sha256":"9e669f915540d4657f057a7c183015989aa89bafef4c5e3cec00c19d391c1201","sha512":"2e811a9d12855ac384f7835fc75bdcb7d4399a5087a5ae4618b33a424866c22376dc47740309a92f83187773b4998cd7c5997ceeabb73b7086a30d3542e0ab65","ssdeep":"","tlshash":"0b8004d17145d453c00435141534dfd0147c41174400110c500d0004cd1007515431cf","first_seen":"2026-06-21T14:00:44.138594Z","last_seen":"2026-07-12T21:56:34.06559Z","times_seen":4,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":33,"send":0,"wait":45,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tuw-mujab.com/assets/stablecoin-transfer-DPV_SKap.png","fqdn":"www.tuw-mujab.com","domain":"tuw-mujab.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.tuw-mujab.com/","date":"2026-07-12T21:55:58.244Z","timestamp":1783893358244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tuw-mujab.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 10:47:55 GMT","end":"Sat, 10 Oct 2026 10:47:54 GMT"},"fingerprint":{"sha1":"F3:44:A4:0F:DA:CB:1E:4C:79:36:4A:7D:1E:A8:1F:4C:77:A6:49:3D","sha256":"D9:3E:D4:DF:9C:E6:C7:A5:35:01:7F:02:6A:8E:F3:2A:93:CA:A7:68:25:E6:91:7E:E4:90:4F:B2:26:A4:AE:6B"}}},"request":{"raw":"GET /assets/stablecoin-transfer-DPV_SKap.png HTTP/1.1\r\nHost: www.tuw-mujab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tuw-mujab.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34418\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"stablecoin-transfer-DPV_SKap.png\"\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 21:55:58 GMT\r\netag: \"5f2aab100c40aba7639bd8eb0e8b8cc6\"\r\nlast-modified: Sun, 12 Jul 2026 12:22:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xn25w-1783893358249-98307ff5f0b5\r\ncontent-length: 1604737\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1604737,"size_decoded":1605273,"mime_type":"image/png","magic":"PNG image data, 1122 x 1402, 8-bit/color RGB, non-interlaced","md5":"7281b7988e8ea7d35885ab44fb55a690","sha1":"7e5c5aa6648b59381be6773e17a73494d6d8ba67","sha256":"949806f581e46af8719fbd706c0a61111e9ceea505b17aa427b4714968876a96","sha512":"8adfb8d7f2cb97c635aaf27b83787f3515a298c90aaf195a6c2e43d8f0928a16d4d6d256f4fc759c72518605be62b970361ce0bd370278651569aeeeff97fe21","ssdeep":"24576:0IRejUGxtzgg9xuSaPGTIbpx6kQAdZk1OmDc4ba:Lubgg9GsjeC19Dvm","tlshash":"ab2523e89c92a3c4cd2a7b7b6e8397965b901ff0d461f7c2618ef514d090f463884abd","first_seen":"2026-06-21T14:00:44.141941Z","last_seen":"2026-07-12T21:56:34.06645Z","times_seen":4,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.tuw-mujab.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}