{"report_id":"500ad86c-2d1e-47ae-ae75-9dac8fac0330","version":6,"status":"done","tags":[],"date":"2026-03-27T14:00:21Z","url":{"schema":"https","addr":"canadianmopharmacy.com/","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"172.67.200.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"canadianmopharmacy.com/","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"title":"Canadian Pharmaceuticals Online \u003e Canadian Pharmacy","dom":{"size":130258,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"20c2553ccd953ae473a61eccb00aa0c2","sha1":"0c1219bf0b185acf89b25d9bab8c04a2dbf4ebb6","sha256":"65137099f263dd9d45a3dd8ba2f840d38fd6e37d08d858b542e56203a2189eea","sha512":"a815db5efaf8604525d2113cbdfff97f3d929b3df604e4cf2906f728141e09cec0fd122e1f1e77b88529e94e5c581b8a8a8483b46952d9ebaea79cb25199fc6d","ssdeep":"1536:JepvRN0U0PTi3NMZthmPPOfM474PmzefVPLVktOp35P:q0U0PkKhcSte","tlshash":"8ed3a2d392ef51371232a6cb96ee5f2971e21067d22b0c1192fc9f7e86ced453816827","dom_hash":"domhash78029e285aa269daf4e6e76d5a1f6dc6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"canadianmopharmacy.com/","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"172.67.200.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T14:00:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"canadianmopharmacy.com","ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-03-16","domain_rank":0,"first_seen":"2026-01-25T06:50:33.322654Z","last_seen":"2026-01-25T06:50:33.322654Z","alert_count":57,"request_count":57,"received_data":813301,"sent_data":38386,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.8.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/global/autocomplete/dist/jquery.autocomplete.js","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82e1d93f6472b8082fa550364addb216","sha1":"30090ed815aae9f81b1a6bb53d9cb3e140af54eb","sha256":"c6408c0b0ba284cfd8d6a4a93fb72c986ed59a424ea664d268d8d22f39882e6d","sha512":"3f30ff4734fcabd26bfefb8a51ad0b81dc2454eb5289c799575f955c0581b5a62dfdb3cbdd899768a54da309b8821df1985436aab7d8499b57e135080c4e5c89","ssdeep":"384:e0ZfP5t5gm3c0mnbG0FDwH8vVJn/qOeY6qiI1V/X9HkyoG1MxFvBe/:JR75QnJsIVJnxOLI1bkXGixPe/","tlshash":"62e2cc886a466231c53733aece6b400ceb7d963f25012679396d96441fb052492effef","size":34139,"data":"","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-06-06T12:09:37.150579Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/js/jquery-1.8.2.min.js","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b6ecf17e30037994d3ffee51b525914","sha1":"d09d3a99ed25d0f1fbe6856de9e14ffd33557256","sha256":"f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729","sha512":"468c0f964014d76ec5966f5589b2ccc0a7b5f3e8a785134897dfa282a3e6824ce9a75584c9404b77a6962fef99547356aabe8aa71a6499e2568b9de792d90579","ssdeep":"1536:bYUfBybwh3KRI83RExoulFXo7CkSsz/G0bSVze/3260eMSTC5bqYKKhwFvxizJSM:XIi3kIP9kSsgo/ZvxYrtPTKCNtHyUtCg","tlshash":"c893e7e972d6716387b730a850af510bb13698e6b80c8c60f058d9e47e74e4960bbf7d","size":93435,"data":"","first_seen":"2023-03-07T01:12:05Z","last_seen":"2026-06-08T18:33:28.683653Z","times_seen":9690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/js/js.js","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ada744bc3e25b8b585a4981e98e8fb49","sha1":"7e95cbfc365d687357319e76dc417c35321495ed","sha256":"7a3b3b36fc1c56dfdba017a10a6e109deafb9e0e76023ad424da6de8e83460f0","sha512":"9339837d327b586cd33e8e62a6c5717089eb8623e3aae9fb51ddc5ba55cd4c303fe561d0174c83529cebf6db820c7636a73d1803ca27f638e76ac5fc94943463","ssdeep":"384:pLpdbQ93JIXUb45XjGOe+biBWbVIsGtNldseRk1zHAScIXZPowO8CR6SGZL:pLpO5IkMlvBHDmNldseR47YIpoHR6SGR","tlshash":"9e825108f259a76e42b733348abf5a09df7d956352021160f8bc04943f74a98b773a6e","size":18712,"data":"","first_seen":"2023-03-07T12:10:20Z","last_seen":"2026-06-04T23:49:59.972795Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f1828a0afcf5f6a15aded032d135fb1","sha1":"41b218bdd6ec2b234a57d3c672776edd69766fe8","sha256":"576ea21d89e348814c1c14000adf85550f5d91e5d28d8e21f9270ea49bd5197a","sha512":"b450bde81f2ddd5bfbe7b7fb874e0d2368fa469426af19cb8b1cd5b5f98318a1d942c5d160d8ea356bf3f07ed453ad5a3db872dbee48e19ddd8d0a9258653458","ssdeep":"","tlshash":"8201fecbd836c80e4513f58b948ef18b3b8d60b0705ae0649384e1ca2ec4d8177a9096","size":700,"data":"","first_seen":"2026-01-25T06:50:37.027539Z","last_seen":"2026-03-27T14:00:23.035614Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/global/json2.js","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a7722d22af55e8bad4ca0630084189a","sha1":"2eeaf418fa0c3624728c463474bf7d6706d0f968","sha256":"6d85abeea430e9fcf9ddcc86c808950b6c752b57809ad5c07b701edda4ae0067","sha512":"3d905c539ae6601d081f63f15090e7bb6ffd2b5fff7ce5f0894a1ad47e72fea11ca7493cc1bf3cf25f826684ec46acb1d0a9b238230f8304ef40c08fc4b0170e","ssdeep":"192:+TjNkg2sWbzGlybr3I1YxVKR5iEtfZiZ4NP2sNMz:HYiE9E4Nu/","tlshash":"90e1b44eb553643d49f363202e5b0848f37d16b30488a2a5fa8d91d10f71d2843aafbe","size":7206,"data":"","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-06-06T12:09:37.146896Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3938c001a7b6d8b64155e7ff048162de","sha1":"41ab15f9441b7d9d501b02d2ec9f68e2c56a7adb","sha256":"0291283a7466103f9def218bfdc08397a3b273d895497785dc1098b07d38b4b3","sha512":"7b8974f6aea4b902df54618fd475e53701bac2e45b00711ce2c7bd3e2b0a19e2ac3d0752d5e564f9579c58dfbf2ad29fd97beeb514e33236eef7cecc6d1f1bd8","ssdeep":"","tlshash":"9951be67eb411baf0532c2e1f16bfbe581eb30d9d9d36563c00e072a128dacf70525a6","size":2664,"data":"","first_seen":"2026-01-25T06:50:37.028746Z","last_seen":"2026-03-27T14:00:23.047998Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"13c158d0f293fee11715afe39fa23ded","sha1":"49a3c82b855f1c2e443528912cb58367d5cc38aa","sha256":"618e0f3d9835bdaa1c426c3427eab348cc906a5602915b0ac71eff8e16b7baa7","sha512":"f9577a5c6cf96c392d43c4bea09f8777d87809d4567d629025856e155ed1a89a3ebdd1066dda923b852b16001aaa79e076719633b21f3c6ad0d4a7bf3a5e8a86","ssdeep":"","tlshash":"11d02bb3ba805f7f0612d0e1d16bf76581d714a8a9c75493c58a031a078e5eb3006197","size":276,"data":"","first_seen":"2026-01-25T06:50:37.037153Z","last_seen":"2026-03-27T14:00:23.050583Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"57af65d4a5762a3f54adc38f88830a6a","sha1":"bbff7b7104552ced2f2113cc3ba292ad126a5581","sha256":"bd9651799ff5a47ce1fb8a819ec31f5247cb71d379ee41d5e0d1c4196ad25cb5","sha512":"847860e23f4154b4310a480d8ea71a6d7449628c5c434a5d63974da4c8575e8d4cfb0d4404ccde7407fa8711bcf00ef5ff0864721183be013cea4baaf87b196f","ssdeep":"","tlshash":"7dd023169744553f0d32c1d0e45ef765809124cdccdb6573d00803a5118d58fb003397","size":220,"data":"","first_seen":"2026-01-25T06:50:37.032033Z","last_seen":"2026-03-27T14:00:23.052108Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"dbebc310dd438501e06e6e15cc442a1d","sha1":"d6bd30a7981ece61edb5c9e2b3b4f6221d205ab0","sha256":"5e200ac89e0bdb118c21b350232c531f05c0c211a1708e89a51dfc6d4701612a","sha512":"34058195037dc58ea1e86d5ecc8b2849b8eb72355845b4e436dd7bb6653144b7d851e61aa0e3e105a1d4f523345cccc1e90a3b7bbe0afc32775ba6f084ebf2a5","ssdeep":"","tlshash":"07d02262aa9116af0222a2d9b206aa760095208cccc72c33d01803a5820899b7202142","size":198,"data":"","first_seen":"2026-01-25T06:50:37.039223Z","last_seen":"2026-03-27T14:00:23.053417Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1a7f55f34f9a8503046ae6d668b80340","sha1":"96902adb199f2fd3e6bab13857418e013262b508","sha256":"86343041f221bfd7bdfde6c9c10138d65bf6c27dd45963edc6f9bc5eec3e15c1","sha512":"9f745664c52ed501ac63543ff68ff58cf4c41e9fc07f54eb10ce419a20ea278c8402cc3f43dc552e1baafba52312cc755628f4defbd807e0c6dbc4f738f3b725","ssdeep":"","tlshash":"f5c02221f64405af053384c29206ab6a0092309886c3291bd00a0259838e9dff002141","size":191,"data":"","first_seen":"2026-01-25T06:50:37.033037Z","last_seen":"2026-03-27T14:00:23.054524Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2b3f89baf9e4fbb65eda064b58777871","sha1":"90949aef8656f81e0cc0216f92fafee0c89b70d1","sha256":"a8bb49e3aebc9743b3fbae002ac7d4497f72c13d751831c7334a3e181873b77c","sha512":"02e7ca405ed3219f21c187d5114676ccbde2e8c4164aa9c1ef13719b20829862d0aaeb4f8f2797c1110039d89a55f1ce97b185b3d457f98e44b6106f72759b10","ssdeep":"","tlshash":"08d0228acb40196b0923c6c1a12aeba694c624cec3c32e93c509022a0a4fdcff133346","size":210,"data":"","first_seen":"2026-01-25T06:50:37.035191Z","last_seen":"2026-03-27T14:00:23.055846Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"403c5ee7b0affcfe35383b0e119f5f4b","sha1":"ee9dbb0546ba9087d9d1d2eb3adee1a44bf6f091","sha256":"49bf0fd8ae2bd8192f357a42041fd17e86269615d3173efabda3c2198ef386b8","sha512":"6f3a29b7d0e889d0db08d4e5160192d0e6ed813087658659a5c22e143bc5ae1f162a58cefa6bf479b2873a696d47ade5defdeb9a1112e7a03438c8db96ddce64","ssdeep":"","tlshash":"12d0979ba2002a9b0016c0e2716bfbe9408a20d892d3b0d3d04d1b2b028d8df70822f3","size":253,"data":"","first_seen":"2026-01-25T06:50:37.036226Z","last_seen":"2026-03-27T14:00:23.056908Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"98dc8ff67dada6889c29d84ef3dd10a1","sha1":"fc4711db3b4d0663393e33a792fca4d1101f3d70","sha256":"1010b7e11ad26ac527d7fcd03cb64a3466fbcb2d4ac79ebaea0f2f66a865ac44","sha512":"55c935607d40a2019659ef60ddc8ed7ee2b25df6a7cba74566053b06a65f65b72d655e470b0763080e7a99b2daea81d6232db6e5c5fe25d906a0aaae818c7576","ssdeep":"","tlshash":"9fd02e8aa3001a5b0023c0d0e097eaa6809620c985e32153d00a131652cc98b70021ab","size":247,"data":"","first_seen":"2026-01-25T06:50:37.030938Z","last_seen":"2026-03-27T14:00:23.057861Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"272b81d7d0cd6974c03df9cf32af6919","sha1":"c5fde63aaa626c3a1937369d39641ce75a27dfa2","sha256":"6e69cca1dbd7c05471f811c1334036aa1d8e08e42d4a133fb07db8684786282c","sha512":"973e946bb9067c12e4c7331e06b574d428fc8253fbab893c793ac3e30494e41b196034a5e66e90afbe0ae1cc5bb845b704c4c2585cbe4dfd71f45697495500c1","ssdeep":"","tlshash":"0cd02bd27b541daf0122c6e1e027eb79538b6ed444d3d56fc059021b094c1cb30421a6","size":270,"data":"","first_seen":"2026-01-25T06:50:37.038197Z","last_seen":"2026-03-27T14:00:23.058841Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e510ec64dce845984824a7ddfe3654ee","sha1":"89f4431a6bb33e7857a77e5a70714b2c4af31c62","sha256":"a3bf9b50ba44bbe8fd35976d7580b4799c1e78f7066493914f4ee4799b553a9f","sha512":"0870c555e4ffbad52773d69fe933848964e238a6ad10fe4b20c244c006c0e5e6d71e4c610fb02a7f82a491ebd32e73a380cb8fd42711128eeec86a6cd7298922","ssdeep":"","tlshash":"20d02e8faa000a5a0832c8e0f123b795c0ca2488c0e360c3c048072b238daaf30862a6","size":255,"data":"","first_seen":"2026-01-25T06:50:37.034097Z","last_seen":"2026-03-27T14:00:23.059848Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"772f53a023480191543e3295eaebfa22","sha1":"e383cecf924b29f2270b3febfe6c59a76b0a71e0","sha256":"ac101545783bec5f05374c5a3ba8f3e92e406e339c7e6ecdf80f2cc9a6016eea","sha512":"75a88b01db31bd0a80932d291fd64253fb5715d0902eec496c0a5a6add6289f02331fdf02c23aef72a1eaf9c6434b5e9387a30cc58ce99951ce3cc0550ef8d06","ssdeep":"","tlshash":"acd02b8bfa41166b0022c1e170a6bbd9508b23e4d4e365a3e005171601cd5df30811f5","size":272,"data":"","first_seen":"2026-01-25T06:50:37.029838Z","last_seen":"2026-03-27T14:00:23.06076Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/amoxil.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/amoxil.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4265\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-10a9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXBe%2F4MIEdkP35JFyaFEL77ZPeX%2F8oEUJO5JLWCybbC9kbqu%2F85z0lCY%2FyBWT3Ahbu8lKECDEa7b6kZl1j3%2FjrCGD08ewWa7TqsJ4Fur5eNyjZSUlzlRj2AnrPJdLiWc7zMRb6lNEwwI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31f90edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4265,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"340348815a9773bb06ec7901abbbe76f","sha1":"df894091856c46c19cb76b03ef9e90cf93ccd1be","sha256":"fa59174bae412b8c09e45b2b131d9649c38987aa8be2e0570401decd678845a8","sha512":"cc03726624569faf5c603afd6f2f930fbc0c92eab679390cb236bbfbc101b50225c3ccf9aef1feab6a82c99c01e967b14a366ce7f5c33c72323b2af3a747c0bc","ssdeep":"96:jsVWxFT/sPTipqKOy99601wXfwbmrhPXoGD6JGEQrCqH8lo9:jsVWx54KXJc0AIbmrhfoGmsrCz6","tlshash":"f3917e44e541cdb1ecf120b305a2d8c8c7098e732077d27626b17a82703356f82f626d","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.102761Z","times_seen":209,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/bg.gif","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/bg.gif HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 44541\r\nlast-modified: Thu, 04 Feb 2016 21:22:12 GMT\r\npriority: u=4,i=?0\r\netag: \"56b3c104-adfd\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qi8CZekB41bVjUZiMayvkO5TFcBhol8RZRJv5hHwGA4zlN7oqxmVWx9CveA8GNFlTMY%2Fe1801KweXx47T%2BRoIwqqAB%2B8P2emueWmP4xEKK0nZOcOZWoCBKligz5%2FcXm3ULAAZ0zNXHO6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb339951dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44541,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 74 x 1144","md5":"6047759e4e053c5c4b81bf844eedacbb","sha1":"db361fdda20db32ca63e67e91b61e05689054d62","sha256":"60a869bf6a3acdf89eb8811f6d7e2c0e387fc77e887979d94c00cfbb6a4c2b3b","sha512":"216de3ca8864e14624bdc54be70dffcdb9e9f52c60c4c5034325798c320e3bef706252efb36462f6eb297857c9643d1413f083b0b7808d8510ee782e691ffe91","ssdeep":"768:13ag2q2dkhoJSaTUtumbbf4/a1C5vGoY9jTTzVJ7sMVl4/vLk6V4YhzZ:1Z27dgoEaYIuya05vGoyTlJoWul4YhzZ","tlshash":"5c130265e185bbd9b85a2f86e504f05537bfdc85635ae1f1390098f0108e170bb261fe","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-04T23:49:59.959678Z","times_seen":139,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/girl.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/girl.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19069\r\nlast-modified: Thu, 04 Feb 2016 21:22:12 GMT\r\npriority: u=4,i=?0\r\netag: \"56b3c104-4a7d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BBBbCCZztWJ2DOhqbObVzO5F32ZJSPBr63qpG2lp5w02Qs4xQ72pO7ngkLxPeg2TlejVaTamZK3OdME0p5O%2B5qrfWbCWGz7MuSit0MV8OgDPuq2sWMtGpsPRHmXwxMy%2FWDc1KdmWQY3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb33c963dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19069,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 219x213, components 3","md5":"694b52a87b73211dec9e81ea8c6b3dff","sha1":"fd10ea34188d4042d73338dcf9416f504b06a361","sha256":"14cf01befd996e1da6c7b4a8147476d4f8b06a49574f2023076389d4b66522f6","sha512":"7b28900dafda5282496d431ced66c756b3a419dedf450d768957b779e2ea14b65eb627f09202edf30da198a3cae29184ab16c1e290a3540c02ed6cf393ae1adf","ssdeep":"384:EYNg7e1FhfWYnwVv9zr62gjWY3twpO0XbcRZKro:EYySbwVxriWY3nogRZK8","tlshash":"8882c031d6144e31e7e6ea3425e3fb527112bb50b9e3666b284cde1038d13a5ba4b2dc","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-03T14:02:29.21734Z","times_seen":134,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/footer.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/footer.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5277\r\nlast-modified: Thu, 04 Feb 2016 21:22:12 GMT\r\npriority: u=4,i=?0\r\netag: \"56b3c104-149d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1%2BcIAvP9URwmPLQ%2FS8UzS1uEHxxrt6%2Fup6BAsM%2Fwua%2BVGGnFOm48Nfacy0yzCHhRAvGrnpRLrNHVXkXX7qtcRz82AWIl%2Fugsy%2BR2%2BvvK3OQunysTmKrE890b2Ihj%2F06iIVPraIweQKk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb33b95fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5277,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 112x77, components 3","md5":"713cc65181e72bffe891eae605a7ba86","sha1":"4cccc85bdb0a04565908ca4e1c715c4c281a9e9c","sha256":"e0b847cd21fb3b9d9c83ddbc3cbbf9a138ea5963fc3fae4c9ea0828df5510ed0","sha512":"d9a45f4a91e6d4dced42127f59037fbf950db2d6a1184372b87ba5c0bfe33e983200739f4c3d8d77390bf8cfde1bb9bec4a8b591fe7e850ef46df04fcad44884","ssdeep":"96:YSK28lgN26MT0D5MdtbZPAVwzVbUcYAajfa:/8YNMtKwRYAh","tlshash":"ffb16d38ff91ac21faf0d93420f2e7167bc22a18eb636555a1589f15b1510c14e8d0cf","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-03T14:02:29.209833Z","times_seen":134,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/cialis.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/cialis.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3508\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-db4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5s2xsctHq%2BdCs1GNLmonnCbGJ4RtTiXSWGvVPkaGECod%2FinZTaNmLnPXpVBobkid%2FpYjNF2VR6%2BQdjK1ZfjYRbOm0nRPBCd%2BkZsHgdhwQpQWFpSjQVLoLyStNVW%2FMJogU0hak6eR7%2B0m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31f905dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3508,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"b191f55c70a61941e24e221035ed23ff","sha1":"0079b8ca0b0b0e482674e8a2c4a724005dd66b0c","sha256":"7c77775431de9f1c56e2a273640760880297afdb1adc374f4de7cc90daa39911","sha512":"068f7d63ab65724e632664424f92668ca0601c20cbac84198594852935144ae69c862c60083646cfcd1c34fb282b73cbca2252b757a4b35be04ace3fad307758","ssdeep":"","tlshash":"5371181671472d3ce9eea2f30ad7de19e378553ca173f2254d9da513f8206a15a0a307","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.148055Z","times_seen":219,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/doxycycline.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/doxycycline.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3944\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-f68\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RuuBsJwyVSZY5SHtr5sXh%2BDvuGtGRR5eLvqgZxGHQbEE%2BMo3GI%2FRYaNs2TwSH7ljWK9aRwX4HlmLPm4BnaD1QNByUW60mMuCHV4JoNMj1PqWmUZPRWTyrlNnVmxgVf10jjNX5YFexs5D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31f90adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3944,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"0981dced48d19eb5423ad81d7d3d8c73","sha1":"9711a1edd975ee2df142592ca7520e849734c5c6","sha256":"01e625afa4de326cae718b7b3aa06981985026cf19716f7ed989b6e8446bc7af","sha512":"4c1ed4668f1112a94fdded730e1dad2d4ceb7dc88f7fb5ce1849cec81271f0fd40eaef3f26fcc4e4e0f4034d09c3b1e08bbe659c287d836481451528fcb74c9a","ssdeep":"","tlshash":"56812b947aa38f84d9c95a73f92cc700460f8d3460fb9d9e3e17d88a34cb511c0a201b","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.140324Z","times_seen":211,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/viagra%20professional.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/viagra%20professional.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5267\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-1493\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpjrzhQn5Pq%2B4SvnnQFuBr3ONbuywFdbxV3T0OCmPhjmxvR08Zt06obZ8EB9BdtHzNsLk%2FYI%2BZlFwibmIaicxzwZHDkPvSElItyq%2F6%2F3HZ%2FTpLheEFJSwHZx3j2q8ktQ0iME340bj2eS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31f910dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5267,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"566bcb9fdd8d2dd1bbc860ffdba9519b","sha1":"cc7554e8c48f31f629d36607dfbcc4ba223c4c42","sha256":"e84a55436cf45f53c4d6b900811be2819844a60925036f77ffb7f64d62402595","sha512":"610e9dbb26f2f7daa85ae0d89cdf6dc3c8f7c31f4e2b14d15f71e5ce4d70d51c961ba2dcc3ad32f135d3a5cd9a277d5561137a4424a5d16253bf138e51e13cc8","ssdeep":"96:hg0MuZ/1cs66TV3pCG+NiaAsWTsesHUj7dFTNMvMUppWG:d06TnjGxuss7HBM0SpWG","tlshash":"3eb16e3bd447bfd5f8d91cfbca58e65a1e89201d62d70cd9c909b0593a950b1e021549","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.126624Z","times_seen":237,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/prednisolone.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/prednisolone.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3646\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-e3e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghxzWRe2%2F211iBkzI2ZuC7kbgPmM12dSXZRNRjWw9xh6AvXydYz8Z13Qo69c%2Fv2c7SVrzxn2UA5%2F7MieQyvSUEhjgRMPyDTu9I5r0jRD%2Ftyp9A0hZtHDmb%2BwGrNZ95VgTmI2juzplnnh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb32292bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"74c09f906d5d7824a3a190a6a66faf39","sha1":"715d83c0d6eaf83598a7e3a1b6a77564dede65a3","sha256":"dc7bafc295ab459981d125a6f2263bbfcdf40c9e44be7f5475b6e448a3849507","sha512":"efd4282a693031b38fcebfec13cc7805e0983ad667da7edb06566d128716e43741dd8ab6dc4d275e423217bb9f3a752ef95c4f19ef2b954897961c09463ba49a","ssdeep":"","tlshash":"e6713b06f68250f1f7ededb532e72e6370df409066b4c80f62c7815a4d9482be176292","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.152129Z","times_seen":209,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/antabuse.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/antabuse.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3467\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-d8b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KAu9CL9Z9coVwV%2B798%2BtOvPhznsGfrExSLugC%2F930DnsM4gvh1s2T8DHIY4ChovwTTsvkiOY8BbFKoXIKO6WmobB%2FlUr4OGisl9cOokidszUJrl6Ai17%2Bv6WIYuiIxEVqXxiW%2BNVnmAM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb32292fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3467,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"e53a123255616c049711d9fdc05c81f4","sha1":"4af7b4e9989c9ba79e8452ebcbf07f611f531bb5","sha256":"eba08f650748c85ba4e51e1abb3e5eaffc01d11f357ad0ff15cbe4a312e7156e","sha512":"e42954f85b7c9b81ab9e66f82926c9e00caaebbe3d3ab8850c06a48cbd7f08bb77539ec943ae136d293846f2644f0d938b98661c14c99846787ac53236cac719","ssdeep":"","tlshash":"a8614e3d7d4b2d10f5f47d7a4531cf3abb6b00a053ab145923b14264f5a1a86ce455cd","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.133597Z","times_seen":209,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/brand%20viagra.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/brand%20viagra.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4967\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-1367\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7p5jVFXPn8dYQIosCNvFY5a9UahfWG44fUVen37aJbQ4sc3lpYFUu8LgB3GGf7KheEYs3So19TzNQsr%2BWs8nZaqjC7U1nxkK2D0s9Iqb0LlH1ctgxb%2B%2F%2B7D4eyde8IQDwvPfUrYSchZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31f909dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4967,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"7e7b06bd57b0ec87a7cde59d3414636d","sha1":"7894b80b0f17bf7973ead7a9fedbf0a438f87edc","sha256":"281355e4298fbad97da9189dc5d00d19bdb53f6a944ea8363285064ba0be2f5e","sha512":"21f9757bef732647f2adb05736f239ffb3f0729a5e34f33607c3c2a98263f48a98009421aedc251afe1a6afc4f77e03e23ab183ce8c6b6b128a200f0d9a1ec97","ssdeep":"96:O4NljDIxNa73DrtdttZhUNQk+zeyaIIoK7uCfGdxQ:O4DjONa73vtntZhTkWeXT+rQ","tlshash":"75a17de13a029c20d0c9553016dbca736b872863053bd28f6a422616b4f1eb7b72539e","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.137245Z","times_seen":232,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/cialis%20professional.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/cialis%20professional.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6077\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-17bd\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jCidjgOj2%2BSgbqrl8l39xWR4nyFEG9leAHCtWM7O62h54%2BrOx1ycegf5R2to%2B0iCxAqTfnE%2BMCgZjLfRJG7UM2%2FYC6d4ezmlyCbi%2BtFJlOJAjzU0dKpS3vqWEHvoo0TXYMQKRU05wDG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb320918dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6077,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"0816cf93cbe4191b1aa01aa88e1c24e5","sha1":"59078bc5f4f25fcb1153bbc755dfe708074c86bd","sha256":"1dc508a20ce3d0b10b39b859747b3824c389fe80141f31b7fd213a651946fa24","sha512":"c523c1a48fbbb8149a2723adfc3614d7cb240db5dfe5fa782014617b4f44e050ddae336d0f69e811ccfbd7b4ad54294eaed7a15c023b49745c16298942bb1696","ssdeep":"96:wmNqB4M8aDVuNHOamitykG0NiXN+96HEOZWIjq/jYyDWwbtWfaTxUG609dOGph:XovDVu5OamiVG0NiXN+9MX4/jPWWMfaL","tlshash":"8dc19e1b6906fd2540c9aa3023fefca5a7836234207fc56628daaab57d371875ddce01","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.14128Z","times_seen":235,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/b2.gif","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/b2.gif HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 49768\r\nlast-modified: Fri, 07 Feb 2020 11:13:00 GMT\r\npriority: u=4,i=?0\r\netag: \"5e3d463c-c268\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIKWMPMAq4zzVV9PmpULCPdzrS7VoZP1QOAHaogsFJeswF6VIBcYsYM1kYtTtteVY3yKinSOUj1vL9ob%2FTrQWmIawb2cBQs0wV6f0RwivTPtLn4zClycIcKxL5NFm5HoTgMrk5nPIvSa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb343971dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49768,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 991 x 80","md5":"69ca06d3aa5ff0ee99f85fdefd5e6760","sha1":"6d534f3ea28560cf5216fb2da543f6d6cac923b2","sha256":"171083803a9e3d05bbd4b73b5976a3ad3ef1da139c40e17900ee87f3951491ab","sha512":"8941f5322107d08fc95eb050225352d16dad1a0a26f95ede18e19e85415dc3f0f139af242a16f668e799c4a4bfe2ec185f350358ce3ab32594a4151a7526b8bf","ssdeep":"768:hR/pLAF863qKyRp269kpQZ2l8OR3UjBNt0o8Ht8FKYdBXW9zns/GTMA2vTz9ukhP:hR/tAULkN8W3Ug6MUGqEMA2v3qjL5k","tlshash":"9223012345b3a3e83568669d48b70ab64256bb049700c0f98f97c5ff870ef157f09e8a","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-04T23:49:59.985568Z","times_seen":128,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/metformin.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/metformin.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4563\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-11d3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3mXxCTafBWP8m9l1yXJr51uajG%2FXfueXD9AzjHIForCvhIFxC6ecTU%2BU%2BFcY0amNNvma77LaYQtR%2BwLdp3eOggnEOkfqKZyvj2T9V4%2FLIp1adx%2FxNiWKCRcCiBeMCshkJXNuoBTQOL5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb32292adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4563,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"00566ce0ba39d8f00b9a4ac6c3448e4c","sha1":"114b2865d8ffc46585f33acd296bb448f4f1c7a2","sha256":"d17ff181d3b3e89a32997fae42b495d4118a5f7ae8b4d849f23551ee4af392e5","sha512":"baa2c71e472ea3a09c60cf8f7826404f41e17d1b6ce1824811ca5d3c6ff7a3a601a5ba302bcbfb8773091c5f74df7ee4cd23bb4704b063ecb82f6bb5a159167f","ssdeep":"96:IwQaa3BCWa2HuZD3n9oFk8Usrb8agPqO+Fw8VBd5Y+U:1g3oHDF3MasrHgPqO+FJBWT","tlshash":"70914b2ad211a0d1fe43b5a014c74f23a6e385e4b9c8dc76aec960d3493a5e3df07669","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.152587Z","times_seen":209,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/phone.gif","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/phone.gif HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2838\r\nlast-modified: Thu, 04 Feb 2016 21:22:12 GMT\r\npriority: u=4,i=?0\r\netag: \"56b3c104-b16\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mmXxeGrXCeSWHp3kzR5Z9IZD3Ko8yFaOECbpd4T0z%2FZ2mq5TJCVF14Qy%2BgS9ZsSJLIFPMSlr0lYKSeLfxYeXPL5%2B2VF99fT0PKtJmY8sxLqNIsdu%2FcTACVc4%2F9RNsQReIQEQ9pVvouiM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb33d969dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2838,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 27 x 250","md5":"967b8d202af0e70f42cd15a3a610271c","sha1":"94027a6ae7970e82973e95889164a9dd44b7d025","sha256":"3344f00f36fe4ca4e85fa3c13f3c481e8f261cbdf81f6ef48ee1dd14c753456a","sha512":"06d709ed0127c2c7946ffcc069e30623a9419fb9f39f311bbc5d4e6262ff9553dc61d7d038dc07b1a0e5446c78690fa57328ee34b431493661a948b945038c23","ssdeep":"","tlshash":"35510d8dd5ce38429d4ee4d069b7d8751d83c540a9949046dcdac481ff3c9f6890fee9","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-04T23:49:59.984968Z","times_seen":139,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/global/autocomplete/dist/jquery.autocomplete.js","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/global/autocomplete/dist/jquery.autocomplete.js HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Feb 2016 21:22:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"56b3c108-855b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KRwzBv8GJxH9V%2Bo21FgutF3uuc0FAskgOsJq1Z%2B8nqhSslEjSOGbtsAKkF7xI9c95D0nBg2vqKLFJ0m3VRs8sXO4GJ70256ss5Hkry%2BHJcFNxk3iL16m8DkI3X4YjVSdMXy%2Bk4HToNa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31e901dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34139,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"82e1d93f6472b8082fa550364addb216","sha1":"30090ed815aae9f81b1a6bb53d9cb3e140af54eb","sha256":"c6408c0b0ba284cfd8d6a4a93fb72c986ed59a424ea664d268d8d22f39882e6d","sha512":"3f30ff4734fcabd26bfefb8a51ad0b81dc2454eb5289c799575f955c0581b5a62dfdb3cbdd899768a54da309b8821df1985436aab7d8499b57e135080c4e5c89","ssdeep":"384:e0ZfP5t5gm3c0mnbG0FDwH8vVJn/qOeY6qiI1V/X9HkyoG1MxFvBe/:JR75QnJsIVJnxOLI1bkXGixPe/","tlshash":"62e2cc886a466231c53733aece6b400ceb7d963f25012679396d96441fb052492effef","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-06-06T12:09:37.150579Z","times_seen":273,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/viagra.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/viagra.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3975\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-f87\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TyyL7bmxXK0ZKnaozBUfPo9oaUu8AhEqif8lwEA6d8%2F%2BzXCJxBUrq04i8cQqThjiCdwld3sCymzMnCMKeELDPGPfqlRrzz5rsJukpy1YBQHe3i9YqS%2BX2FMe2VfnlhzH9lXX0DzSzNi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31e904dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3975,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"bde018f40c0df2349fb858aafe8039d5","sha1":"0b3dfe15c86c3bc4c98d2668c234a803409a54ad","sha256":"5dca0f0c83e3faf6e289c8791766d9f0a4ce5090446a4cf7a8b9fc62aa2b3fff","sha512":"8f9bc82c2781e83ae8363b99c1938c974e224efbb07bb0f499e3756c918ddef19e31884e645cdc4f8a55ff55ea2527a6de862d61d32ab29e89d5835ecc272227","ssdeep":"","tlshash":"60816b28ca200c95f6c8657a95b1da70a32e226c14b787fb3f01483cf976ec2570c75b","first_seen":"2023-05-08T12:22:53Z","last_seen":"2026-06-06T12:09:37.101412Z","times_seen":244,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/levitra.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/levitra.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4539\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-11bb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bNhsoxPfSNu%2FaDLxBbI2oZBun9pvfUE4lMmJQ6gPrPHtNb0MLVlE0EpIla9zckDOWNWTfJHVytGTEtZbWjulE%2BYQ3PQIDlcDX3Zm8kiOlaj9MbArSp1bUwjmqm%2BrfJAYckmctFGGbiyS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31f90ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4539,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"8238340fa4379cbf340539f27813d5e0","sha1":"646834b1b03e546e240af19393e403dc5f24ba0d","sha256":"f753818c055583544d8ee0b427a70af8e07c8b41555831b6f1d2f546b72d81a5","sha512":"7b805659874197d559f2abf811f3d789c4acacd9ec29dc887a8a7dc2745caaf1a4ef4adf9646867a96ccc0ad07c3b14426a6a430161685427d18fbec6ef0c027","ssdeep":"96:AN0G4mVd+soT0zhH/sGsraGzmJ8YXIUpjoj9AJo:tG3+sjsGsGHyYY2gOo","tlshash":"de915c3b3156bf24fde240bc8e94c2687787af646abb4db15844763278530859d88176","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.151096Z","times_seen":233,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/extra%20super%20viagra.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/extra%20super%20viagra.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4531\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-11b3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aYtp2%2F6YwnQTnbKr7yUl3AFvw%2BydCZjDVhCcGg2HcyKD5pr2Be6Nj7klLKZ9mVqr4Oc2U%2FssafvMZdNjxGZ0EuqDxSgJJlkqzZyn1OinPVO%2BqYJ9MKuKqJrVmZ87zai7XymFuxxbT1hJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb32091adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4531,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"fdfbdb879e81df2f80eca22e0e6c2e25","sha1":"608656eefa332756bf747869dd09348401e0077f","sha256":"c1324e613ee5e04e4e0ac413684677f5bf5141ab6066212b566a4de05b20220e","sha512":"61987f273c4430dd0fa303f7c20427ed79641ee0a2a2564fc4f250832ae11be41c378c6d63e864b0fcb1123b71db9146097bad92ad7e28f518e0ec53e06a8901","ssdeep":"96:vQDAT+g2RMIPtY0Kohv812ZD/4vVkMUQfVfwDSQ4Ydy:vIrMAIM8WD/4vVkMLfVfwO7Wy","tlshash":"6e914c9d784620c3f654b47060f5dd435ad25aa1d5c0aec279d98c8b9ca10b43c7e2f7","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.105642Z","times_seen":234,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/female%20viagra.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/female%20viagra.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5534\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-159e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoAjNe8t%2FGUAkCRsfw6bmCFLegOlJFP6O%2Bnod3%2B4TbebxpeiJVlx01lNG8KzlmMjcr9jqpEwICHSELCrY14O0zBv1vkO9gkQ3VU6%2FeVlrB9Ou0UDQT2MWHV0VLqhUbC%2BS81eWJLxPT9L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb321922dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5534,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"5066c0899ab2aa1e66c24b212c53bbb3","sha1":"1f95115ed92020e5a9adaf4ee50cc0c6328960a5","sha256":"ff7597144a8d46d2aa8252459d0f3c319c11dabb0d0535483f2eb0c342f1657b","sha512":"838e25a3e3e8ba325a2bd20e9b346e9e20644508e293afc1555ce5645baf328523b64fc841c84fe39f1c0b7c69cd3f44c4d66b66a0a4a8b4441985dff486b20a","ssdeep":"96:9Y28egvecHmW8C3OPE/EnViX5Nzjo1bV8eyK7m/CCa5NZ+KvAMYClh3T:90egvecHX3OPEcnVipdj+QKvQNXCTj","tlshash":"73b18e27d844ec22e5fc89312fa7e66a230d04a154e758f7cb8901d6f178220cc5ddaf","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.122087Z","times_seen":212,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/s.gif","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/s.gif HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 110194\r\nlast-modified: Tue, 04 Apr 2017 13:26:00 GMT\r\npriority: u=4,i=?0\r\netag: \"58e39ee8-1ae72\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvgUECUBTTwpag295x8LIUaD3J5klKygFwk2hT6QsDIr5DLO6Gm3SWEN%2Bx5O%2FYIDp6qESBRYz6joYMTyUq0pLgqZSRqdfhcusoClYnXnyfwk5jOcqm6qT6M94ZXNsOXfyQksE61bYIWR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb33c965dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110194,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 969 x 461","md5":"f279e181e68f1d92ff7bafa52b137d94","sha1":"59bd82f5101b5eba23cca4846bb9d12237e3a5db","sha256":"7915d34ff9e8cc6c4a139a1266dfae879369e1a7cc3bbf68378e6cd92525732a","sha512":"2e22ebff6d088d91accd3295ca21b83ee3ccc72beb404439b65c28ce4f3385ebc19b59646fd2e9bd91876b02a91a42454b633767201ba739828d6e2c85a5d91c","ssdeep":"1536:ZiOACh0syofZJUQaWsKdihQPZCzDDF51kvrG5fkGzvFE4oC8gDciFbqMCd1bETMi:HHPfTUbQPZekKhk0vpoCU5HGW6+PPQ","tlshash":"5cb31243ec91584ffa487a283cb378a4357d709a3d75e059fa0394c792a462b309e67b","first_seen":"2024-03-14T15:24:54Z","last_seen":"2026-06-04T23:49:59.968678Z","times_seen":62,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/css/media.css","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/css/media.css HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jun 2016 18:52:54 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"576ade86-4103\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QowS9%2BATZibaEW0vRkXpjcVT5jmuLVKwjCFW%2FrdjTK4jt3tQnaC%2BYyNg6lLZAy4S97iDwgx5hZbtS978eJtVopIv4QPK4S98PNof4ycJkP9pz6P6zHMXb4%2Bmsqr0cVAurA7WpeT4ZAUz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31e8ffdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16643,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (431), with CRLF line terminators","md5":"e95e46c391f18060d44df7c17a439dce","sha1":"e58aa0c732fc6daa86435f04abbd77a6f00784b5","sha256":"6c7dcc15ef5e870d683d88744b9a46d3c483540514a079ce621556fb5da46547","sha512":"49b42254d1cfbd930c3c12f6d93772faf8e5de85bde7d1cb9c0753e1b15c6223719b254b58848d7299c9a7bcccc7923955c5177b0b2d062394c2814968a74650","ssdeep":"192:Z8Wy0XDYPCOVIt+tC9RQtjQH7FWXyXX17QOEpshSpNKCshQqPlHQ+GvcASN1DdMx:l9mpHsY1","tlshash":"5572c20ed6018346a937e7b4efe24357ea320153d70180967e5da3a15f3745892a2ffd","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-04T23:49:59.954703Z","times_seen":126,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/cialis%20extra%20dosage.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/cialis%20extra%20dosage.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4589\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-11ed\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ml3fWqBSam9seBvk2abQG%2FDtcl1hVsFU0DcwpEhTWWfNkUPr3rf5fhU%2BsT9TXUoS04Tl2kJUmCfEQT97pgs3dE2bwyjUANDrvddLAcaF9IgJniqNubcUGxH234LyeTaaQGTHj5RqJ5Kw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb32091bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4589,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"f9efb9d50be18a66398b9318e58fcfc0","sha1":"746f9317246714d861e68aa830a402a0e68879a1","sha256":"a665351d0926c6e1ec86d353912b560bad4798bdb0031eba1a43f06a31784d09","sha512":"7ed88e638be84dbbae4836b80329ae26843d09886f5a866a2c995fa4f44df21101aa295cfef00fb4b23ac4e3ebaf56aff557322b37f531bd20d454a7f9aff7c3","ssdeep":"96:vQ+pNuscpkZ/yuP/PhQtWlzCaXQhJ8iQNKtXYPHlvm/bll:vlPcEJXhQwzU78CRx/5l","tlshash":"99918e1e70835ec3fd2995a26473bc3e36d640b841989c195eefc05714346b1a828efa","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.149125Z","times_seen":235,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/tadapox.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/tadapox.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5813\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-16b5\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7Ut6kOEjDHlaXQVUNbs2mKnTUqM5ZSZvt8MHe%2FCKDFjy3hWw4S0w7cOvZG%2BeZib%2Ftz7sTxLBLRnXc9TgC2IrKGBLVN%2FdcPIq9QXaRcUOVxCrhpzty12rMHC2F1a8DQC6BE%2FElZ4%2FLvC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb322928dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5813,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"9bb06e7d7951225d19af28524cb1da28","sha1":"af00ce519adfe99835f49b6775695a02f7833621","sha256":"9f0659447c0e04ec2309f9876022d6db10098eaed5f80da78f1dd01d5354a01d","sha512":"46099fcd47b9a1d3a1052661f4cadbaf4cad9b1b551c0ece3b5524b79f9fb4ac0a30d8c1a55610519afbca03be1c714e61d0ffb7962b480d9d1ddcd9b0d437ba","ssdeep":"96:Lsa9tzBKSkrj4N8TnLuG99gisE0E7A4/X+d21scWD519tgrpsTbbylsXmmne6Ynu:4FSkgN8TiOhsXE79doDP9tb3bK8e6uqn","tlshash":"d3c18dda20884e119dedc4b0e329e4ad4d8482542cfb482e6d7950687f825f3ef6704d","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.143315Z","times_seen":232,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/sildalis.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/sildalis.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3926\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-f56\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVT46JU4GIV8E7lNmRVonGWNfF9OwiLt8whJbezGqgWhmBgtDddjaoOeuNkx8ZJZYbposGz2jy8ra96wPAEKthNk%2BCDUKFe2kEddHHz1IcYWkaUSwQg76IGBTImHyg9GXDct%2Bl%2BrS5MG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb322930dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3926,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"904ffb8f401a94b65d83db28e9c948ab","sha1":"6239dfcbeee7726c93227965aef8c61ae7ea2383","sha256":"212ec3c1f1d6baf612215c39edc1b1b3ffa797f1ea44ba8336afc40f5b86e344","sha512":"0cd1e05ed237decdb0870bc03645eede25382218a02db1baac64e24cbafb9fdc70dad96e7b47f74060edb5742d4d9c0b7581ed173165088171b6f81a3e71d363","ssdeep":"","tlshash":"f8815d2da852b0c0fea71a3315d24f6092eb44786c70dbb1edce885b8d540818a3d74e","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.153095Z","times_seen":231,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/shadow.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/shadow.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9983\r\nlast-modified: Thu, 04 Feb 2016 21:22:12 GMT\r\npriority: u=4,i=?0\r\netag: \"56b3c104-26ff\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4awJxJAILka3mbTMeF%2B2R2y9IuuBMlXB8KRUd6xTpxewcQmxNodojOT%2B4C%2B992XT9x%2B4QHfPT97wiOdx8SqpPrHxtPxcDU%2Bpu4HLipazSmZxuUlf0WWawe9nEzaNftKeoGd0hntQRqPN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb33c962dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9983,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x28, components 3","md5":"5c3c8af2515a01633783c3c474edb290","sha1":"347bfacde3432786128c91c0bc4d22236a462d39","sha256":"f2fe23bb622fdc2fe787434babab247de3268fee89b415495dc6501ec75d1891","sha512":"29bca5ed1be797bbb69eac53819c4e0e14943c384b3151ed5e11c80f7176c4987bb3091e631be47ccc1aa22acdc10b6917b9a7348cc290f8729a1b58db5c7cdf","ssdeep":"192:/ZYNMtKwqYElbR8Z6p5c03I57P9hw+jK3ytRg3M/dk:xYNg7qQK5j+B3+3HM/q","tlshash":"c8228e24ead66e10dcf5e93008f2e371a1d71668f36376122844ee3d32251c73a4d24a","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-03T14:02:29.222951Z","times_seen":134,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/active.gif","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/active.gif HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 288\r\nlast-modified: Thu, 04 Feb 2016 21:22:12 GMT\r\npriority: u=4,i=?0\r\netag: \"56b3c104-120\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYycd6weWFgwfsDwEkQz2x5ahnFmNxfWA7UnzulZS5LA4B7%2FSnRrdmvizMsT3uomx39nMyorCM7dK2fMvF7KFDZblDhfwZhnTJV1VOHOukA8K%2BFkArXmq9bkv2YKlJfrcZSZ8IDHDxwu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb33c966dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":288,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 87","md5":"50d1b009b5a7550b465cff1dd2419214","sha1":"c445ac58484ff0ec1d7145ece9e06cc049f41e67","sha256":"9fd8fb1dc116de662be2a29aa9f68384e0675ae7d02ac2d45e12adcb301be375","sha512":"34f129627d2fbd208e8902aebe1d11ff243024d75ca1b5bd024cccd5ac61ff9b209d2a25acbe1ba66718dde647ae12a3d3ae834e24ae43c9cac27fb21378ba4e","ssdeep":"","tlshash":"bad0970803e88dacc8cac9bc0d9472a72618e6a503a52083704c40a3ca22b208c80b28","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-04T23:49:59.969315Z","times_seen":110,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/clomid.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/clomid.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5352\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-14e8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4B72jJW9Y1p9Zg1xQl4tCvs1rc7dEFJwCGpAOFPPPcvN%2FmmmoVyxQ4zVYo2sTO4Kwj7V78kepzrQrKFx4EvWxEvQaRzFs8w7mUDweo1Cc9LaRJ8qtfJeJTtvesSd51uTvdZUWKHn0bpE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31f907dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"fd23a6bceef58eea900cdfa71c544a22","sha1":"b4d92473bbd720820e55781ceb349c3c4bfe08c8","sha256":"77348b103ca260fff3c41f9c46d6624445b91262e311d45598eaa9c4f8e58e39","sha512":"d23ffa7e0757775c43226c5263147dceafd868c6ccf8db8d5dbddce666f060917f4ebc5d5dcc9beb0ed52c590a8554dd46f270d9bd3786eb52f179c0b885aa6d","ssdeep":"96:S0len4wXzaMHoLSg/dv7mUhmbHjJBrR7eB1dx8NCrGtD7D+O:S0sRarS6dv7mkmb1BrZYxBrGtj+O","tlshash":"c5b17e384786be10d9f915fc670bc6f4e5733747a6b305bb26686c2330b201b525674a","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.15423Z","times_seen":210,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/viagra%20soft.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/viagra%20soft.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5788\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-169c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNvcZoAwiGTdWciubwqH3udPLxPDe2fEv%2F89TdOCYDmJWDyUI23R2JItadxbFqRX5V05PjLpIkjHHff70YGSnzbH87ICjc8R3NS81MmTk8XmFZdOAA29zi%2BAQF2FP%2F3QAydu6lK7jFfk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb32091ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5788,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"f3d1f0233b9e729c984f2d206a2b35e9","sha1":"a452463ef5f7f2a5ea8d0c041ba0d1e13f6d6676","sha256":"712fe363f17b4d74304f813c2c072294ec9cf4d9f14a8f9aabf14cc184963e66","sha512":"4b0a02b5357b39efa977f1e1585ad9160de1cdeed9cfdc01682b2ec2bee3c51c8e77e42c18f96d5d6c4069209ea127423ed1fe49c7932e3b65a696ff231208c7","ssdeep":"96:u9RWwF+z7AdN60WpWrhN2hIYm+oiX0WpMU+ZBKoPHW0nPQ/+OJi:uVsfA/6ror/2+YmjiWZBKo+04ml","tlshash":"04c18eed53261c24f3c066f51fa7c57a7731aeaca9f7438808532b51f688e7e581a104","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.123274Z","times_seen":234,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/extra%20super%20cialis.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/extra%20super%20cialis.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4284\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-10bc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRM9HLCsD5ZNeS1LnY6KbCH4KzA5y1RqIeAHnEn8SdT7HZ8nw4FNNYETDJx0xac4Ox8syn7HLKFCUMz%2FSAWEk1Hdlm8SfQeFPWEaCA8oGgKC5LoESJ3dln350qPh4%2B4bYgiUdDVDyfBl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb321921dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4284,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"4dd50a50270941da3aa9a031c67a752d","sha1":"470629198343e38c5358c12a2c9e33dc45af6d56","sha256":"e1fe526a4c4722179eaaaf150a4b6509dc46a49c24c61f810fce8f803e35f3af","sha512":"d24b8493ca2ed5f58cfc875f45bc8cd5dfbcdafacaf3d462394b8344506ed9c54525afdb9dcb44d2e46817e046a3e57997cef90be168ebdde7775ab6d26de6c1","ssdeep":"96:vQwk5BfmODw/gBmtKpc5j+LkopdI7XrLb:vIOMxmQpc5akGkb/","tlshash":"4c915c0df613e8d6f9c0542e62ed6d0f99c78042e990b896f6cdc0a98cfa01a94b47d5","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.10807Z","times_seen":234,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/bg1.gif","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/bg1.gif HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 14024\r\nlast-modified: Thu, 04 Feb 2016 21:22:12 GMT\r\npriority: u=4,i=?0\r\netag: \"56b3c104-36c8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7sAOnZhuoHJtaLSXbtFbUy0HRVRY2ARrrRg3zxneDNeL07IdOFLJZctUMy0KYhDr4ndSDtYJRGlHhP01aolg%2B29vWIY7%2FH%2B1F7o0INN0x9qZaysvzbh%2FTUFWLqXpzKQ4zwxWUQaIwB%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb338950dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14024,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 141 x 141","md5":"220498cb134af2f296cbfa70feacce07","sha1":"c8c96a38eb87579640c719c5b103b7f4e0c3bb6e","sha256":"5cffc56d6d8aa36376fce927d9ec3186e24bf87c0ec5849b7cbcf81f49296bc6","sha512":"82e7a5ffa3143dbc41da94f94213836d689744b139948c5d7f8cee52142ea79e8c91fa279f004d9cb16f939c3a0a249168fe37815fac8832037b6e218ab176a7","ssdeep":"384:QwcvfoI616wUY2WhzDVpq7M5xw2vrKcQQEQlvw/AqHPc:Q3Rwh24/DwIrLQt0Y/A8c","tlshash":"7152d058ffaab8d2c14c37b7a9eb2537222e05d36127b9b7805f020e52496f524a706c","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-04T23:49:59.981707Z","times_seen":139,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/cialis%20soft.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/cialis%20soft.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5653\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-1615\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8prn9CC1kVp%2FGwhnk4p8%2BG9XryTHfqyKusMr4RpMdDPzk2fyWsWKRv%2FdZ4c3ztK0j3Bbk6IiWvthnjECFx0Bu47HnKzLsOnWQ0MyVRjodNBzSGQTauW9r97gU%2B5Dl4DwuO%2BddjlrZiG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb32091cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"681eb274c426f943441a656a85295f0b","sha1":"cb94bf371adade508dd2c5868f6d14dffeac02bb","sha256":"a860e0d5bf59fd8c328fc4174b54dda32fe87fc9a2b6f28a6dc2020e74a1987c","sha512":"f23259d77b57dec25ca2fd5f1666e09080b5586ec2a8e75ad89edff8ff31293753413374bfe14371495bc90ad4fd89e27a376dfcb686a296b0f7f8e9429e3383","ssdeep":"96:iO/eK8oZWF4zgkd5ddHWaBv5wLUkTMli3d3dNPQqO74oBtznz/b57Ru1Z5vk9X:z8KdHW8xwLUkTSqX5OEoBtXbHudk","tlshash":"7fc16c4a290fdf21c6f0fcb01bb0c770ea8e957ba397498868499410bec9d05952647b","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.106965Z","times_seen":234,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/cialis%20super%20active.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/cialis%20super%20active.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4413\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-113d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WhIjeIF7r2Pv6Wewnhr%2FeitSFlEt1PDj3TUE4sCPvWYnKhZMrxPbSWzOME%2BjMGWi4O1xSvUWnarqXBZSFA5WSWvo7GYVdQe4s0kHmbaWX%2BSZbftygufdJWGhYVaXoGuApR5vdH6MQMI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb321920dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"0a1cf91081004e097f9dd3fb4d5c9d5b","sha1":"370adc1589041270b8fdb658f20b163f64fe19c2","sha256":"f35524535f31d99a3f2977282cf8d8967a05a6611b4218f8dd483829ff0c8525","sha512":"640186b0359695fec24d6d3064afa6e53a91265a8b54472f27660a948a922971ff63f3f809e45f271eceb1279ec662e7649f3900de28b2617ac1f8a1fde9664e","ssdeep":"96:zDIg07u8DWUIVv2CGAgOl96W7WXY18FFz163UM:t8u8DWU6eCGABz6W7P8z1U","tlshash":"fa914c3c59409d12f3f651b8e597ce80a64fd73c6aa30c869009f0a5b99231f9d8488b","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.127533Z","times_seen":236,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/lasix.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/lasix.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2966\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-b96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T6HHfaexfpZRsGkIBMj2avYoTY%2BNeURKhSItCst1oHYcpRIFz3pQduW5%2B0lzfVYp%2Fxu8xdheEKFAg03l1OPx%2BbjJYXZCzE58X9H3CHp17YpHc1urASh6uiaX%2FxfDrwb6D2gzupZ1S93I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb321924dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2966,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"63fa8be0f79f860f21998dfb95215032","sha1":"61ddc360b6025212d679416c52129362d9e16987","sha256":"b91cd5ca316b68bde5e7c26ee865f69358708ee2a44a2719644c5596b2698dda","sha512":"6838776c057aefe6159a2d92eec0e475e573ec6a2580a0376118341481adcd84fba7bf09dab8e4c1c6716da31a168fe62df1c0d00f064906e752a0762bac9137","ssdeep":"","tlshash":"b6510a5bfa983c39cfdb5032692bc670b90db934723397392509794abc86667044070f","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.128553Z","times_seen":208,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/global/social.gif","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/global/social.gif HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4153\r\nlast-modified: Mon, 25 Apr 2016 09:08:42 GMT\r\npriority: u=4,i=?0\r\netag: \"571dde9a-1039\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5Cc1343pvvlO5THunzTbUfv%2BXU6p7bPInLG8AxWeZWRLnhNMRNwmKX6oHYkslEoguFYpd2E63snxMkqM6YWJyfyM0YzbPOzzLS7D1sP6%2Bf8WSVgdNCi6qvhGB0GzvLMhnZNI%2FgSTWC0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb33e96bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4153,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 252 x 26","md5":"080704c5ddd815b6348c46d8be309909","sha1":"a5d2821e763518e07f02864795d8a6980303de02","sha256":"561adbff165082900783daa1b0f0deaeadd6cb003f8275e4abf2712869638c9f","sha512":"3a010daf4df92700135a3c62e9aa34d02baa880e5ea18ffa6635905ba4a2f4d78fb745b1c9490d7d2ec86adfc26017b18c8bd417a6034a0b407d2dc45b7ab2e5","ssdeep":"96:ix1lDNWlv+nzblDlVAPvhCLkM8BNA8+fmuG1G3rO+nnIaQF/:AUv+nlhyPvwLlAA8UmJzeIl5","tlshash":"20819e0b5f988c03b39de8a41d9fc4667e76d09ce4d0c02274ce54b6b7043b2a5556ea","first_seen":"2023-05-07T14:00:36Z","last_seen":"2026-06-06T12:09:37.153692Z","times_seen":274,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T13:59:58.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 13:59:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: no_mobile=1\nRNPS=CNWKSUU2ZV885ZEJ7GGJT\nunique=1; expires=Sat, 28-Mar-2026 13:59:58 GMT; Max-Age=86400; path=/\ncountry_name=Norway; expires=Sat, 27-Mar-2027 13:59:58 GMT; Max-Age=31536000; path=/\ncountry_code=NO; expires=Sat, 27-Mar-2027 13:59:58 GMT; Max-Age=31536000; path=/\nlang=en; expires=Sat, 27-Mar-2027 13:59:58 GMT; Max-Age=31536000; path=/\ncurrency=NOK; expires=Sat, 27-Mar-2027 13:59:58 GMT; Max-Age=31536000; path=/\nban_check=1; expires=Sat, 27-Mar-2027 13:59:58 GMT; Max-Age=31536000; path=/\nbonus=Viagra; expires=Sat, 27-Mar-2027 13:59:58 GMT; Max-Age=31536000; path=/\nuniq_flag=1; expires=Sat, 28-Mar-2026 13:59:58 GMT; Max-Age=86400; path=/\nshipping=AirMail; expires=Sat, 27-Mar-2027 13:59:58 GMT; Max-Age=31536000; path=/\nb_test=1; expires=Fri, 03-Apr-2026 13:59:58 GMT; Max-Age=604800; path=/\nxspy=W10%3D; expires=Fri, 03-Apr-2026 13:59:58 GMT; Max-Age=604800; path=/\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLJJOH99EpnKuf9s67IAWiBypUj%2BpoYOUsEwYbPrioe4XE2wowL81Q%2BsmzE5P84ha3441xvn%2BMoAM3Izva0%2Fk4yTW3PKd56A8CYImaafqC1Uxrw%2BMDVlS4ff4N2P3apEOR8R0jLxCVQU\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e2eeb2f49b68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.8.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":126833,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"3888118b0d44bbd8bee59caeeead91ab","sha1":"db8fd49874fcca374cb057bb20fd74fd64ef7776","sha256":"270f4db72732203827810b4d3545db7f6364b36bdf99e4e43045472fd3ba9772","sha512":"0a6068a9587da213b4a0e2f621f0392bf2414d29f8026cfb96232c3cfc0668be427628df770f4420fa63194829863120eed8a8aa38092682989079d57f17e08b","ssdeep":"1536:/epvRN0U0PTi3NMZthmPPOfM474PmzefVPLVkzdcl:80U0PkKhcSY","tlshash":"29c390d392ef51371232a6cf96ea5f2971e21067d22b0c1192fc9f7e86ced453816827","first_seen":"2026-01-25T06:50:36.985718Z","last_seen":"2026-03-27T14:00:23.020475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":26,"dns":9,"connect":1,"send":0,"wait":162,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/zoloft.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/zoloft.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4225\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-1081\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tHSz2IWIcVWROXBSXYsgFyuOmwb3OVflzdEmucKYb%2F0F85e9c7r1vBFgd%2BarUVoWYcGD1b5aqx3zWeuvaKPli%2Fcz9dmH5sEwR3dMLdwZwXvgNsGgD9hKIJ22ai%2BNljH8azlfcV71b9t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb322927dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"17aa074c95784addce5fac30cd8ff3fa","sha1":"5bab898e84f24fa5b0f55c9b8b2ef81d7b2d2980","sha256":"8c489669dc2b836f18d6a15ccfb9e93d06206bc1f972102b697f3df22b7c2fbf","sha512":"cbd286761119e2570602b9972146fb0963686588e131d66a7e9d4cebf80573f9bdff507aaab9eb682a018aedc69643e44c8d2f97d33cf52c1fd9bc001a645d78","ssdeep":"96:fGSPkywTnzD75fiRLvj/nRyjjWjK7UeTtIO5Tpzbva:fGSPWGLTRwAChTtIuhm","tlshash":"94914cb92f9d5c7ff6d041705493cb9aa15ea806f9231b022998b11ef0b84368e9973c","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.14203Z","times_seen":209,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/propecia.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/propecia.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6039\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-1797\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FW6LtM6tRlVBDpVhmxFFCyP%2BqkzM2r%2ByKvRjBoFnZ958j9RAR1Pp7De7MiCV6VSiNpBLGNMsrgi67nISD2q0PTVJ2oQesT65dcfVmiMp8znZccZGELiKMKPqOZkAgpyPCefiQTJ4Bmio\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31f90cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"5f561ee7cdb311aa942aaa296c6b315b","sha1":"84380cb6d6055337b37fe9fd1c5e55eaad2f348b","sha256":"ae517445a52952ec9b1cb7d32a0edce93feba6057af1b27bca66e66fc4d72626","sha512":"95c01f6be29c948778dcc225e46e58e92fe61a8aeb3f8f2feb90d249142ccc4bc3400c668de65a6d8b3dfe92c4606191e17e256a4b8e2708eac4c5dfe2591745","ssdeep":"96:IwQHN03sbAR+tLYIujziy2+uc80AgRkKEWOHMEdrh0KZ:1ZIqziy2E8gPEhHMEphH","tlshash":"04c18e14eb762ac2f4a059757377cc634ec271c1a9547596c9c8882b085e3b0f9753b3","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.125777Z","times_seen":209,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/dapoxetine.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/dapoxetine.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4190\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-105e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Axehwmr5mGMwy0d%2Fw4Xmz3c4zGmNWVJ50Kfs5Mmt2S6rOid1BptlybJA64xgMkJNKQNb2xsxmm2i3VrecE7PApidfBSWuPRc09izWuhIDIE8H146FPOZHlgO6mzZMjzWPxh8%2BbGePpOF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb320913dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4190,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"7891e8cc7d1b004b2f18926dead55538","sha1":"707bc7a20ab9298766b6939a249faf95c71c175a","sha256":"3dd913a751a65113f8366ce5a39c21182b9f10171164b656bbb92daa532391f1","sha512":"b2c9b919d7d2e9104605a4de5888d963f15f22b597040dc505888b359fae0fd2734abc5ce409dfc503ff71b1fbef25727f1353d33f16f246067a0904ae26dce8","ssdeep":"48:KiP1+eund7pG6OofN8ntZoBT5i9dO/xLMWOTn2gw2oXOVfmiGlj5J6sJ6Ne2LCzZ:n+eQ7pGBs5T3S2/2oXOVexnJjFnnpRy8","tlshash":"96814b2575008e0dfdfae53b0c1bc27cb3045ab94ee79f84222c1de3b8a26690b49600","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.116547Z","times_seen":233,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/cytotec.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/cytotec.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5112\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-13f8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pOrR8g%2F30qDBMW7Vg86vK%2FyyfNXV2mLEMfCaIjnGIVUlHcJDOy7urptuObV%2FB1YSv%2BojzSEmZybaQ6VFE2toraEwplmBIsCeB3irMHbrHEcavldS8VwNTp7T1Zfksottuqy6B%2BUtgwn6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb320917dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5112,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"d59a49cf8f5f29034ef1496a13941733","sha1":"5bd81b26842292e045014292ef140f9e43ca191d","sha256":"747e4f0b22c44c684718be9361a438a86a1875fc9c62db7c9ab27a596c547d65","sha512":"6541308f23a7c6b5551b003eb2e397d70a3a4f6fafc031ae73e6c07046994f6d532188006f66e89a39c1deae1872f41d24e712377a2f9d47928f6db8c457e32b","ssdeep":"96:ykRo5I3lMMoUGg92hoJ+V1pydy2Fvec6dYDMmHVrYgR9hkhUaBf:BRKGMToJYDr2Fj6dEDwRBf","tlshash":"d1b16b212ed6bc34f1f08d305c75cb3289a905a6fd938d867783822af3c190d2bca665","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.121023Z","times_seen":209,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/viagra%20super%20active.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/viagra%20super%20active.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5090\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-13e2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l30DxxLqpluzTAvYlGRatskspoXH4biwRdBTVhWOzZkKXMaAuPcg1eoi8g1f6XDQAq0K3ktK5I7PoXPe%2Bh%2FZGHTbrxGUZLy03JrPERVhUgy3abvi15vn74%2BgJZUdCgjf9BNToRh%2B9sV%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb320919dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5090,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"14e4d8067b7df3776b0675a5322a86a8","sha1":"60ab354a7b2270829a6bc095c526bf91ccd4b874","sha256":"fecc81a3454072d05d817f14ca9ea588fe09ffd83feb64391db070c662a67cc5","sha512":"c609781712867a6d2699f70f6bc4c909067cb52823dae26529c386c90a6f54137683224f3a23e3cb484b0a9f7fcc0008058f11df122fc402e9346e9c589a3168","ssdeep":"96:6mfK3nQxd0scuhmRSUKG/JLGLrwP4pa0GtAFgpN9NECW8icIxem0BlLOgkTqkG:Xiod0scusUUUrwP41DhCW/xem0BlLOP8","tlshash":"10b18e536200ac0782de3c75623aeba7171fa4b4b73f99c9109726877513086cf78247","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.111112Z","times_seen":235,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/active_c.png","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/active_c.png HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 3381\r\nlast-modified: Thu, 04 Feb 2016 21:22:12 GMT\r\npriority: u=4,i=?0\r\netag: \"56b3c104-d35\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHetezIgWRNA1ClIPuoyyKi1xVtV4LHyEQEm3dJUt5uz%2FNPVL6d4G6ZBvuZpu9%2FoiUb9BjuVenCSsen3dd5Zze1URN4ojltJVjUvjT9GWgGgRDgzkL0U6JQCAyUDT28Wmdyw8hhOvSLa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb33d968dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 172, 8-bit/color RGBA, non-interlaced","md5":"ac804fc7aabdcfa87251d2659efe319e","sha1":"de44e6a7a190499a2b83c10a6bf320adbbcddc75","sha256":"aa3e403839c05f37dc2d63e65ea69e03b932e6c3720b54cd393b3d3276d0a1ab","sha512":"c61c4e49614c96a1dfb5831d11659c7d1eb444eea4ae664f83236393b945693ef647cf0fc5026d60b950c4ecbd6ae2a7b2631e17befcb6e6814d171678a98019","ssdeep":"","tlshash":"f16109a3f8661002c457d98850fa1077ff92059066a0e0ada5cbcb4f7f680b60d32ccb","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-04T23:49:59.947408Z","times_seen":110,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/global/json2.js","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/global/json2.js HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Feb 2016 21:22:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"56b3c108-1c26\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJaXbtPpEcCjlr%2BDQAGEDRyDPZCyNOdcMvRvd5TqzfIQsDXSsuHQ8N8b0829fnJ8fTe67NgNneZ6Kma0ScXexBZzqVSy0u5CIdTXY88fyCfBttcHFd7YSXLq1mUjOIl2UN0wkdVkRk%2FY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31e902dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7206,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3377), with CRLF line terminators","md5":"5a7722d22af55e8bad4ca0630084189a","sha1":"2eeaf418fa0c3624728c463474bf7d6706d0f968","sha256":"6d85abeea430e9fcf9ddcc86c808950b6c752b57809ad5c07b701edda4ae0067","sha512":"3d905c539ae6601d081f63f15090e7bb6ffd2b5fff7ce5f0894a1ad47e72fea11ca7493cc1bf3cf25f826684ec46acb1d0a9b238230f8304ef40c08fc4b0170e","ssdeep":"192:+TjNkg2sWbzGlybr3I1YxVKR5iEtfZiZ4NP2sNMz:HYiE9E4Nu/","tlshash":"90e1b44eb553643d49f363202e5b0848f37d16b30488a2a5fa8d91d10f71d2843aafbe","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-06-06T12:09:37.146896Z","times_seen":274,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/ed%20sample%20pack%201.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/ed%20sample%20pack%201.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3513\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-db9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DD69gtBmUYb20Drj7XPvlZkojseLdDwiLk7%2FzWpaP0VxvWd9Tm5JKJQr76OeSl0PWTrxA7gq7g5RyxpyD75wwlTJ0Ts6YdiGRbnzVxVxEKieTGHsMBCCzCneASBxPYovtkOwtAe0GmVH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31f908dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3513,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"c22cf243e5cd7502b79701fb7fc67a2c","sha1":"fad905227e983f5f1a5c1c5626c68e614a5b5fd0","sha256":"9b9f4269c8afcf567cf9b81ddeaebb30a8e4c9f8dffab8733d5deb92cc51c96d","sha512":"7f88d02b6b27b2eefff417ead739d442e4191aff4656415cc169813b477cfbd35207a314fc20ed9c063815d0273c0f0ee8dc194e4d5330b344ba63b101fdf4ac","ssdeep":"","tlshash":"72713d23fa5335c8f908883216e3cee156ca4470b850f851bced51972c155a4a1ab7ef","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.148598Z","times_seen":209,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/brand%20cialis.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/brand%20cialis.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5874\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-16f2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvwQj%2FehJjvDconxQT504ku15fUFYRIS%2FMaTGWVxD4gcLu0pmX%2F%2B9TV8nwIZtLy4iWfa%2BfvpsvGY4ndEZiAbJMR0XimPCtcNVRm6AHuipuG6ABOXYYaQXAER%2FwTjbeicIMsvme5shcjR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb320912dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"19b085e21552089644a6e614e679b76f","sha1":"4175edf80b8c7ada8d02762f1aa2f8dcd4ab9a7d","sha256":"4c1accc78c572867ab687f082ae8f5add9a70c3e2265ed9cdbac30f9e3ecda0b","sha512":"ad512334a401b13ba7bf74dbf10cf4c0b2324314790cb334dc9edd8067631d5bf05579eebba1f6d98a08a5c2c83ce153bc7cd929d610216c43d437ead8b85f91","ssdeep":"96:Ln26nmtSmCRPPMVFBY6sQekhWsISrqgRbTeg/Vy3oCg+lew4WB0pWBZiY:zfmtSm8PaE69cwpTeg/VrpeqWH/","tlshash":"5ec18d5a8ea30e34cbd9e496d724e24d1fc9b5268d13b7bc9d0c73a5bda0405ee38504","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.104294Z","times_seen":232,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/zithromax.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/zithromax.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3843\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-f03\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPMOXsDvvcQjCFD79d3dxCKtKuAmQdQIlE09KAA%2B69iRKBPQSkZUc1b%2FVmTN78KG8dnhTHgh37%2FiA%2FZsHCC95WAO3RPdfApvS%2FGVVVjCBft4HplAx1J6APmlIX0lazsFsmgNiXKt3z7v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb320914dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"e4a42c4d26bfc3d844ce621fa41489e7","sha1":"e92dfd6542bda3e5f5b9ba82b67d6f8c6f5ab90e","sha256":"6cb54236cba0692838c0d2fd76a8ed5c219d21b13003f47077cb7f3c2167cca8","sha512":"4cf555e1765f8c8326823870e7774ec912816ecf7a236f07a4bb166a4cd53590ae2bbd24702f55526db3f962f85fba3aec31949aba85620e9f8e1de94398fe04","ssdeep":"","tlshash":"73812ab0b79d3e698dff0f6a0216c674aa0654742377f6d048ac70e2fc54d9225b27c9","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.119519Z","times_seen":211,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/nolvadex.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/nolvadex.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3326\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-cfe\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yMOmzIfsR7k1A8pfvqhJSkpX96mpbMCQNez2Zq67JPPl%2FCYYZYOckOROWPIIRChDwV2ubtGaUsDDuCHog6ZNoAUnD%2BnNKbLxyo1HZYf7%2FlC3TMpKeLn5fWvPr%2FaJVeWHMI9jPJ8x56b7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb320915dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"0d091f525a49ddd18c9299e79b5a13fc","sha1":"26836cd21e8fe05b0e6cee24e5bbd78806d98c56","sha256":"f0e547ca846690a25349c166b0a6f3a6e40e415ad9b02ffed418410a57e565a4","sha512":"099ff3f1ce977cab111fdc8702029cb36719b74792a83234b7489abe60ed9e2f1dd9d20500e8b88400cdd15eb184bfceba7a5b2a9a9ebc2547d449508c634430","ssdeep":"","tlshash":"df612a2d13438c6cd4d2573b2955ec5dd6676f2ab72f3f744951aa8abd50362480104d","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.151576Z","times_seen":210,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/kamagra.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/kamagra.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5036\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-13ac\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDxnApkkflPLnYZYlKwcR1AMx1bYZKbSfL03VuFYqzR8pWDhKcdkDvgP1LJvzHaBedd5FD12teF9%2FZRCIpyJkFZW8woZXTE6S1vOFfJaqK%2FqgsaKBvh8CRzDgirB2b9MtrgDhGr21W8d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb32191edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5036,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"14b5efe9ad72299ec3fc3788b6426be9","sha1":"242d73245bd7361003fdfe5f3dbac26f7c37f0b0","sha256":"4d4c36fb8fadf293d6ce259e64de76c07543c9fb5f47006f702a50efd15d20a6","sha512":"d087d3ad2ac76024021cb18de76926119d22b45cbf906d7c78f78d9f1fbc201456ec12cb71659cac3c11811a65ae3204ea25707db9f1015ad80548986c3f2769","ssdeep":"96:Hs1WVwVxYw/KWt88pfUfjWwGRTghkC5qAZbuYn2sy5lgAKtxh:H4VxYw/K2UfjVoCk6qkbr2x5nK9","tlshash":"d7a15cf810979d71d6f5a2129240cbb80fcf7936da571c476e823894b43008ae6182fb","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.131526Z","times_seen":231,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/cipro.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/cipro.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4814\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-12ce\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsIKjFxDuU20vXGT4voHIjE1GfuUeIu%2BjLDa6fz2nNea%2BWrwr2NXIXfj3iIunx%2B%2BRzE0HEfaUtwn05RgewsRhgakY5qEHZVnIbSOrtX%2Bh1r6zxsdO8Gvy5Tz1XBVtBqvpt7BsDWlmTAk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb32191fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4814,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"effbea99685389dbef6096271bd2e8b9","sha1":"7120503408cdfb59314388066584b5b7aaff404f","sha256":"edfe4db3a674b360ed85aae8551f37fb2827e07a85e06c848e720ecef3e7c0fa","sha512":"40514571a49f1c2372689115fc096ed52b42ff99e5fdb9607c1b35ad569483860484e6e6fa021186fab04c86d8d9bcd66f366fda3264d80d9d57d6d2d9c5f6da","ssdeep":"96:0VvSf4yKVA9pieyzyYKrMnq/ZD0IOxG4kr84F26NdYVyvBv8dPHi:4qfUsseSOrMq/GkI4FtLYV+oq","tlshash":"23a18e5bc51cbc74e3d60978d2a4d3542896630d7dfb089f10c550e0fcca8b12a1a771","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.132249Z","times_seen":209,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/propranolol.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/propranolol.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5360\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-14f0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eemoX612Z7xzVo1TTKC53QL9WngyG19FehNzpfUsaPgEjKidWZgXcyJS72iBUUt6Vht9IkzZrTZ2BWp0GGgTxvcGD9oeE58wsotDfMsUAnh91cvc3G8YQn6EzpcIrVfH9KWSW3KWcjvQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb322926dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"1d90b39261f67aa9009113f4e68752df","sha1":"4d167e990eafaaed47a192b10785efeeca9733a3","sha256":"37ad56fc220958ad44b392bd495ebf41224e42ce8f8080729a68a5fc4db02d9a","sha512":"ed2ce69e842595fe852c5e77d96e6a227e72ae6d4021912eb421da0437ab1b8236e56aa31856f67ea1162bd5fb9beb010c635146d6ef5b33128dee2bfd3e4644","ssdeep":"96:U5QznwozBncD3DK523/Mgq8oZsk44r4K6cPprfE2j5aDb6vnx4GLeG+zmi:3znwozBc/K5Kktsk44r4h+prs2j5aDbj","tlshash":"98b18d38fb923e11dacc5f71f926f72417f12c4038d70d352262c6fbb9002aa2a24705","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.129541Z","times_seen":210,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/img/b1.gif","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/img/b1.gif HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/templates/100/css/custom.css\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 13951\r\nlast-modified: Thu, 04 Feb 2016 21:22:12 GMT\r\npriority: u=4,i=?0\r\netag: \"56b3c104-367f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFCJDpY5Q03w1TLau1qBXOIvht4SoldpYnP54VXf3SseDSTrN%2B3zTOGeMueDjDGkqy1iK1cSzkXiU05s4qksX3fpg7mBJR%2B2g9d%2BL%2F44s3cclq5k%2FsZthzyilCrh2c%2FREOUGzGi%2BOu0k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb33d96adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13951,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 189 x 387","md5":"cf2b748aa3fb5af87b0dae33c1ab0553","sha1":"9ca0be5ca141e66e928ca2c1578ae07217de120f","sha256":"a881d88121aaac691e2ea51c4f9dc77ea9683d34737824c68fe59ea14ccb4c83","sha512":"de530ae5ae66f6fe413aef6b1ba14dad161ee84137cc44569a53bf4becd1611143f70b6d788ea929864526cb01bfb9834b92e4b9b10fd87fd34ff7ca68993f6b","ssdeep":"384:KXHeU3k5PFJ46ygFqCpvz3YNb8deTvjeT/OvdQH:KXrkHz+b9Tv4OvdW","tlshash":"f452d059e97baf3ebe41a6ee3cfb2221440a8a54b4af7f8994e8f504a3c54f111315d0","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-04T23:49:59.969922Z","times_seen":136,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/prednisone.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/prednisone.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3290\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-cda\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnarCSNkbjGbZ4%2BOH0zEUtAm33IIafDaCQKk7GVEnsGy5H9b5KEx3eIYhQTiW60K%2F3F0MqXdIq0oZft30b7oqCZUPM7lTKrNb7ZeWHkKTPbQYDD23n9LXO94wM3B%2B7Kc0Bugd7J8uRs2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31f911dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"beb6e31cc6fecfa0dbde687b2b8f4634","sha1":"5f0ee37c4b2141ce7e8aec78271ded07fd41a4a3","sha256":"6291f39687cafb2f1a5b55995cdbe1f59e17ad203ba4bdd31d4eaca84bf4f08b","sha512":"83294c1ab8d1c7fefcec1649e6faf5056c6314e740a669e29050df9dee1aa5e96ab42a7a945d6ae65db7fcbc434e4c1340533d4255c54755bba63b2611c4c7de","ssdeep":"","tlshash":"25611b5ff45620d1fa8c8eb0b9d30d96ebd28c8197a2858aecc6414e18b1aa6501d6e9","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.115466Z","times_seen":209,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/xenical.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/xenical.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4475\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-117b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fe6tnCH%2Fro5forHN1cvmEwUP575a8CoWTU1DfJySvGgZPxOEcOvtq5%2B9jgwlNNCkw3mecwGwrFRx3WaYbWg35EcPGkR5Kc3SMnfGG15KwNe9gyy%2FOMvNSW53h8wDNsb%2BHwIc6nJALydX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb322929dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4475,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"e9bb244061135ed9bc26eed8fffdd637","sha1":"dcde48989b2e5fc96576b8d58561919dc10f1228","sha256":"dfe33e85433e578ca5f2b57a088592c1f8342941d60cf2642544dd57e594d4c4","sha512":"4369151753e3b9729dffc69b70a9a7c671c78ad62337f06ed38425b3fa987f83978eeffb843d740149cd76b0325b84bc19826b37f8200a8fb9fabc43be1cf2b3","ssdeep":"96:0cMYlpn1NPjSikK7bUT6NuHQXQi8+aLzgf:pXnHPOVSbUWNuHsQZzK","tlshash":"bb918d3708aa5e2fc5e123742a11c71af3326e72201311bc7498a412bcc545fbd73aad","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.13295Z","times_seen":209,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/favicon.ico","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D; js_test=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 0\r\nlast-modified: Thu, 04 Feb 2016 21:22:16 GMT\r\npriority: u=6,i=?0\r\netag: \"56b3c108-0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVBEd8E4rrQk0tb83SpIu6sDf5rILzrQmPRU2%2BfQkO1%2BvZ1dVAYcE1gsWJEbg%2Bbz3TFAmKHtn0tc0wy%2FGYOR69%2FmWNKFPVdBcWWC6f%2FaBTtUYGjnBIObINT21NgPhNqrrDf4p82ReoSD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb3549a7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/css/custom.css","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/css/custom.css HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Jul 2016 16:06:20 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"5787b87c-61a2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4ujbXNXNhphKOamIn%2F48qpJ44ZtnEszEQGSz25KGTXfj5npEAm%2BuadF%2Bv%2FsBs4EkscUEriXMESoOk5sDN40fJMNnuHBpykfFToINm%2FLxf%2F2nDhTkygWy9iN10nOuzyTELCbF0swymbJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31d8fedfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24994,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (304), with CRLF line terminators","md5":"780d2622494cfa8673fb64f9cf728e05","sha1":"a331d7d918771fe99c768e235bec3c4bf3f78339","sha256":"f8f12a72754b0073f9d945c3c146722dcf0b4ec4c9a779d3cba97ed1c940144b","sha512":"74ce97817212b44c34d0898998b5b148d8335c7d64219bea2066a83dc6d5fad429406e795333bbbf49a2440758048028af0bed4e65fe625b47ffbec0e8441a9b","ssdeep":"384:ZDbP7jZFsPF0ke1gQK1C9UWblB9jd9IRWWk2+:ZDbP7jWFuzK1C9rB9j3I3+","tlshash":"4bb274665b263209b0abd3e8fa63c7dacf3d0107f60201b8bca915a4d34d56551b2fde","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-04T23:49:59.976926Z","times_seen":131,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/js/jquery-1.8.2.min.js","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/js/jquery-1.8.2.min.js HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Feb 2016 21:22:12 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"56b3c104-16cfb\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtD6zux6E21318hmMyFsbbD82jQ2mZdZB1UWtAmZZuMZAww%2FvfB79nUsc%2BVAV6arsHrYfs4MJ5SWo0jvmOIuDKjwkjFs1jJpRAWJBgUYxT6hqxnyELfurbnXupuvazivRmN8Hvu1WJMB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31e900dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93435,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65480)","md5":"0b6ecf17e30037994d3ffee51b525914","sha1":"d09d3a99ed25d0f1fbe6856de9e14ffd33557256","sha256":"f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729","sha512":"468c0f964014d76ec5966f5589b2ccc0a7b5f3e8a785134897dfa282a3e6824ce9a75584c9404b77a6962fef99547356aabe8aa71a6499e2568b9de792d90579","ssdeep":"1536:bYUfBybwh3KRI83RExoulFXo7CkSsz/G0bSVze/3260eMSTC5bqYKKhwFvxizJSM:XIi3kIP9kSsgo/ZvxYrtPTKCNtHyUtCg","tlshash":"c893e7e972d6716387b730a850af510bb13698e6b80c8c60f058d9e47e74e4960bbf7d","first_seen":"2023-03-07T01:12:05Z","last_seen":"2026-06-08T18:33:28.683653Z","times_seen":9690,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/templates/100/js/js.js","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /templates/100/js/js.js HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 09 Nov 2016 16:52:18 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"58235442-4918\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TF9GIEm3aS8sE0pqBXUR8gxAn6NRMQ11qEtcP6nwsoCRfjAGZfd66vRtFJ87Hvl5Msm6CW0cNnGk5DmGuge44dxHlaagqZkkVNcK2trW1M%2FrikJQaambVff%2FehSdBOl9p%2F8vP4sBxvjL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb31e903dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18712,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (351), with CRLF line terminators","md5":"ada744bc3e25b8b585a4981e98e8fb49","sha1":"7e95cbfc365d687357319e76dc417c35321495ed","sha256":"7a3b3b36fc1c56dfdba017a10a6e109deafb9e0e76023ad424da6de8e83460f0","sha512":"9339837d327b586cd33e8e62a6c5717089eb8623e3aae9fb51ddc5ba55cd4c303fe561d0174c83529cebf6db820c7636a73d1803ca27f638e76ac5fc94943463","ssdeep":"384:pLpdbQ93JIXUb45XjGOe+biBWbVIsGtNldseRk1zHAScIXZPowO8CR6SGZL:pLpO5IkMlvBHDmNldseR47YIpoHR6SGR","tlshash":"9e825108f259a76e42b733348abf5a09df7d956352021160f8bc04943f74a98b773a6e","first_seen":"2023-03-07T12:10:20Z","last_seen":"2026-06-04T23:49:59.972795Z","times_seen":135,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canadianmopharmacy.com/system/images/valtrex.jpg","fqdn":"canadianmopharmacy.com","domain":"canadianmopharmacy.com","tld":"com"},"ip":{"addr":"104.21.85.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canadianmopharmacy.com/","date":"2026-03-27T13:59:59.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canadianmopharmacy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 13:23:11 GMT","end":"Sun, 17 May 2026 13:11:16 GMT"},"fingerprint":{"sha1":"6E:E4:7F:16:BD:44:26:AE:44:07:47:36:CF:6A:08:8A:E5:84:7E:F9","sha256":"54:5D:DB:C4:63:A6:CE:3D:2D:0B:3D:13:94:9B:72:92:A0:AC:4B:76:EE:8C:44:4C:2B:31:93:7E:37:EF:41:E2"}}},"request":{"raw":"GET /system/images/valtrex.jpg HTTP/1.1\r\nHost: canadianmopharmacy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://canadianmopharmacy.com/\r\nCookie: no_mobile=1; RNPS=CNWKSUU2ZV885ZEJ7GGJT; unique=1; country_name=Norway; country_code=NO; lang=en; currency=NOK; ban_check=1; bonus=Viagra; uniq_flag=1; shipping=AirMail; b_test=1; xspy=W10%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 13:59:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7673\r\nlast-modified: Wed, 12 Apr 2023 10:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"64368986-1df9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TMBRY2nzJ%2BaHuCKOHkXxLZhQaROyv1C11T%2BbMEaSECjTHbQn%2FLmuRxqv321qiC4yO7XpE9gUa4Lpbi4ROYfKSLOh000O%2FtDGTkfQilK1MJdSNwnQ5hxzsebJM4o867PpvuUJ2KVdbL22\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e2eeb323933dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7673,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 100x100, components 3","md5":"4e1b80e480141ed96c5fd53b30e953d6","sha1":"c2b24c4b4b9d9e5378ccc352113f364a87e5da16","sha256":"f3943cd2f46564bae002fa5b3a067395e7acd39ed333fbbd0bda2d6d2c2d689a","sha512":"48ae37c58bcffc1767584a8e760ccc67017f35eedad498b99d7049523a705a513a6d5b53ed25017814621281cb6c5167c92fceddf28380d954e3112bfedf004d","ssdeep":"192:KN9NbCeC00lFu+BkKKwXzNPruIlsQaO7WjqemU3oWS:KNbbft0/hUQBDumsxOGmU8","tlshash":"60f19d6022f4ed36ece65134a680c2a7c39ee461b22713b31dc49590f1d378a4ee519a","first_seen":"2023-05-21T16:50:35Z","last_seen":"2026-06-06T12:09:37.149589Z","times_seen":209,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"canadianmopharmacy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}