{"report_id":"71000f3d-cced-4326-9e6b-7319e446a76e","version":6,"status":"done","tags":[],"date":"2026-02-16T16:03:49Z","url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":0,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"title":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","dom":{"size":3073,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (346)","md5":"3c508183830cf41a1a80212ec47def31","sha1":"59226fccf7cef1cf55c0bd01676668e7cccc8c5c","sha256":"381fb29bd0e2a286b3eaae69fe3da6c6baf9bc8cfd54b2e9546219486178e9f4","sha512":"8c34e53236b117d708899e06e46c657e060e0bbf228e8087f79bab463297a632e67529b3d1bc4d17f7c42b8d12e9dfcc9cbb83882f5e37ac12ad009f0d7c1591","ssdeep":"","tlshash":"35510d05284ccd2b512146e4a591ff6810af9a21e318cc88b2ff45ae6f97ec609165b9","dom_hash":"domhashdf50c2aec1567bd9312e0ea8fc6ccb5b","first_seen":"2026-01-14T14:30:32.438504Z","last_seen":"2026-02-16T16:03:51.2004Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":0,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-23T16:03:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"exploredoctors.com","ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"domain_registered":"2009-01-28","domain_rank":0,"first_seen":"2026-01-09T18:11:37.14791Z","last_seen":"2026-01-21T04:07:44.026589Z","alert_count":56,"request_count":14,"received_data":348451,"sent_data":7982,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/jquery-migrate.min.js","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-07T11:07:05.877969Z","times_seen":924137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/jquery.min.js","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-07T10:05:09.478515Z","times_seen":184372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/common.js","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68405e0cfdebbc37b12b2593e84ea2fc","sha1":"7b3db3b476fe6de455977cc98b76edd818b65566","sha256":"cd7ccd00e4787d22d17e5f49d4ac6d38053cc679a01dce0d9c5f82e15e2cafb5","sha512":"51c6c0dc86861b8488dad133fca1c246359dae42d22d8a522f756df6ae5a03c4adc88323cb219e9d1951bdb63b7863677dce7213551155bc7ead3b5ea01d2cab","ssdeep":"768:qr/+gMKuv58WOVJaTnc6YQgpPpott+lxoi/o35SjdhLK2dJ:SaTc6RAxott/0k5SjdlK2dJ","tlshash":"f633b5c4fb2e219540b7202a596f10c8b53ea8735c458ca2fd3cd5642fe4a1db37ae79","size":53960,"data":"","first_seen":"2025-10-07T18:11:49.013831Z","last_seen":"2026-07-20T07:30:02.693603Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/jquery.placeholder.min.js","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57533339c8886b027abd478bdaedb72f","sha1":"282a102382737523e34456593a723fafecf3a488","sha256":"380fd24db43b138332d8b904d3009051e30fadec1616e3ef2853e0a9dc010ee3","sha512":"de12e84b5c280d9a118737223389eab683cc2d058988f2ca0ffa667f400284b935d4a6af341c9e7fa26be022e55894b20ba87d0ebfb04c0d78a7ffb1295661fc","ssdeep":"","tlshash":"5e51dc4cb6a6b6f6557bcc70007fcc05a132a39be2299485a152d6946b78cc8e732d8f","size":2719,"data":"","first_seen":"2023-03-08T21:11:21Z","last_seen":"2026-07-31T14:14:45.060168Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/intro.js","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8924bb959065c0fe899781b83722112a","sha1":"5f579e419b53267c2a4ce5bef1fdc7ea8cc627f5","sha256":"487f79c0af6dcc20037e5f191c70ee57ecce23d0c8e1b72bd20c443ab3142aaf","sha512":"eb2883f38e88d5b5ef1ce347db43f5978c704ac7185c1d2e34b5fada494ec3dabdefd3ef5c9d52e066eb81ef989b8c098d5d78c9a8198f7f519f495719562bdf","ssdeep":"","tlshash":"855132b0f76a8c55237a242a51ed68c5b92dcc720d45cf6bad3924781cb896ea304f1e","size":3015,"data":"","first_seen":"2025-12-15T04:36:49.030924Z","last_seen":"2026-02-16T16:03:51.207068Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exploredoctors.com/langpack/ko.json?v=20220804","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /langpack/ko.json?v=20220804 HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T10:00:11.228377Z","times_seen":54401,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-16T16:03:27.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/ HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:27 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff; path=/\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":3195,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (346)","md5":"52cd0db90b42e41bce42e7a983b03f21","sha1":"edd34af29477d7943f51d6418d3056b563b3c989","sha256":"76c05e010d219f93b073d902cefa4ce8af06c938fc148f0e62a7c34593f7a90b","sha512":"961f6a74afe0197aee293cce9ec60a143af3614a560eb3ec5cbb20241bdd80fff442ba49d57ebcb2196affaeadee75ac4a52156287245fe163aaabbfd1e2b382","ssdeep":"","tlshash":"a4611005284cce2b412146e4a5d1ff6814ef9a21e354cc88b2ff45be6fd7eca09165bd","first_seen":"2026-01-14T14:30:32.442014Z","last_seen":"2026-02-16T16:03:51.202231Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1203,"timings":{"blocked":467,"dns":247,"connect":108,"send":0,"wait":260,"receive":6,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/@img_logo_aType.gif","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/@img_logo_aType.gif HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 05:50:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8156\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8156,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 647 x 199","md5":"bf6c879ee85b2e987c8ddf4716e0cbd4","sha1":"9dec217c7ebc92c44a2fb80464859122f9ba64ab","sha256":"b105d3a8af30e0d723db8fdc93ef9f602074a8583cadcbc5798852a24492b301","sha512":"ad4cd8803f729682aaf2a7db6e42e9c360d0348b4bacfe5e6587ba7a6946bb78ee3b52c136e89bf22d57e324d3c747fedf1073cb96e7278d0e06dcc633c754de","ssdeep":"192:/NuaYNzh7u0iwENVCdiI8k37rC/xYsRUCZTD5k8Por:EFNzh7NPENUiIfvC/xYIlLPor","tlshash":"7bf1af0a6d8aa0d7c8e1e86838ef5c7b386504d3ccf5e2a1689c9077773c2666049d87","first_seen":"2023-09-12T07:57:28Z","last_seen":"2026-03-15T00:18:02.252566Z","times_seen":16,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":431,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/jquery.min.js","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/jquery.min.js HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 05:50:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 87533\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-07T10:05:09.478515Z","times_seen":184372,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":225,"dns":1,"connect":108,"send":0,"wait":115,"receive":218,"ssl":122},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/jquery-migrate.min.js","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/jquery-migrate.min.js HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 05:50:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 13577\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-07T11:07:05.877969Z","times_seen":924137,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":224,"dns":1,"connect":109,"send":0,"wait":114,"receive":103,"ssl":121},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/common.js","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/common.js HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 05:50:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 53998\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":53998,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"68405e0cfdebbc37b12b2593e84ea2fc","sha1":"7b3db3b476fe6de455977cc98b76edd818b65566","sha256":"cd7ccd00e4787d22d17e5f49d4ac6d38053cc679a01dce0d9c5f82e15e2cafb5","sha512":"51c6c0dc86861b8488dad133fca1c246359dae42d22d8a522f756df6ae5a03c4adc88323cb219e9d1951bdb63b7863677dce7213551155bc7ead3b5ea01d2cab","ssdeep":"768:qr/+gMKuv58WOVJaTnc6YQgpPpott+lxoi/o35SjdhLK2dJ:SaTc6RAxott/0k5SjdlK2dJ","tlshash":"f633b5c4fb2e219540b7202a596f10c8b53ea8735c458ca2fd3cd5642fe4a1db37ae79","first_seen":"2025-10-07T18:11:49.013831Z","last_seen":"2026-07-20T07:30:02.693603Z","times_seen":10,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":223,"dns":1,"connect":111,"send":0,"wait":115,"receive":217,"ssl":118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/btn_login.png","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/btn_login.png HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/webmail.css\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 12:04:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1980\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"49605bf6478700854d51f457f7627d15","sha1":"96ee5c2e9a42a514616b0dfa44dc335ab29e8ad0","sha256":"be9331b4cefe2f433091c3d10c857c1ae89db83f701e41ff2509d19be9d3b7b7","sha512":"daf60ce8e8cc6989ac8b80a7cfddc81e26bd936dc8853d84abd90be7efcaed4fa3aae50085851f9e57b061027c88d08d97f3200c5554da480d63e62c4093b4f5","ssdeep":"","tlshash":"8441b6cded9a4c85db0ed95014f23e93ba2b8ac1ea94e589adcfcc5600303e6490d6d6","first_seen":"2023-08-08T07:56:59Z","last_seen":"2026-03-15T00:18:02.2596Z","times_seen":20,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/favicon.ico","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:29.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 16 Feb 2026 16:03:29 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-07T10:00:11.228377Z","times_seen":54401,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/webmail.css","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/webmail.css HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 12:06:12 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 114670\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":114670,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (341)","md5":"775c2ee13c07846ecb897377d647a0fb","sha1":"ade4df9816b10c60b87e5e0c7efe21702d2f7fd1","sha256":"f07ccb9b6db76d5b733fd900f2618ba03695c3a7dd7e223527d053565cb75c7a","sha512":"d530f3987143ebf067bc5380db817cf26617008790d0e252b3abd9cfdef8b5290c4ddcca6ba95b5a145eaf8846aa947f3a5679dffc8b2a42ebbaf288141ef3db","ssdeep":"1536:ygo66hVC+97JZlzIURtEfRO8fH+Una1aZyt2UwDY7kifbdd2GY3:cbG+BahY7kif2","tlshash":"abb397236751220eb5abc31279816fc960395037e153ae7cbeadb938d28dcf851b7b41","first_seen":"2025-12-15T04:36:49.025882Z","last_seen":"2026-02-16T16:03:51.206324Z","times_seen":7,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/intro.js","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/intro.js HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 12:31:06 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3015\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8924bb959065c0fe899781b83722112a","sha1":"5f579e419b53267c2a4ce5bef1fdc7ea8cc627f5","sha256":"487f79c0af6dcc20037e5f191c70ee57ecce23d0c8e1b72bd20c443ab3142aaf","sha512":"eb2883f38e88d5b5ef1ce347db43f5978c704ac7185c1d2e34b5fada494ec3dabdefd3ef5c9d52e066eb81ef989b8c098d5d78c9a8198f7f519f495719562bdf","ssdeep":"","tlshash":"855132b0f76a8c55237a242a51ed68c5b92dcc720d45cf6bad3924781cb896ea304f1e","first_seen":"2025-12-15T04:36:49.030924Z","last_seen":"2026-02-16T16:03:51.207068Z","times_seen":7,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":282,"dns":1,"connect":110,"send":0,"wait":112,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/jquery.placeholder.min.js","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/jquery.placeholder.min.js HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 05:50:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2719\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2719,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2570)","md5":"57533339c8886b027abd478bdaedb72f","sha1":"282a102382737523e34456593a723fafecf3a488","sha256":"380fd24db43b138332d8b904d3009051e30fadec1616e3ef2853e0a9dc010ee3","sha512":"de12e84b5c280d9a118737223389eab683cc2d058988f2ca0ffa667f400284b935d4a6af341c9e7fa26be022e55894b20ba87d0ebfb04c0d78a7ffb1295661fc","ssdeep":"","tlshash":"5e51dc4cb6a6b6f6557bcc70007fcc05a132a39be2299485a152d6946b78cc8e732d8f","first_seen":"2023-03-08T21:11:21Z","last_seen":"2026-07-31T14:14:45.060168Z","times_seen":136,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":223,"dns":1,"connect":112,"send":0,"wait":115,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/bg_login_aType.jpg","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/bg_login_aType.jpg HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/webmail.css\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 12:04:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 49032\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49032,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2294x628, components 3","md5":"b59030d8704b8d3e412466f30cabb252","sha1":"9b8d291ee366b32439e06562973f5834ffc395be","sha256":"57ef988be43cf53d94dedf963cfc17243f14a695139bc1a474bb8810453adf04","sha512":"ab9c3a0248637c1fc42d629fb6ddf03ea382518b0f0b1be132ea16ad14a7837b680324628ef7f762f661da49f108e2fc767caac0b8cb1014e755d09778b3f119","ssdeep":"768:LxuuuuuuJlAo112uDL4bDeWJRcaElWidpAin6/68mqpUS5w5El+un3UaU:Lxuuuuuur11rLYe+EkidpDn1dS+5q+00","tlshash":"a023c01272244050dce89a7cc6d76a563fb50068441679f7f9b889fba0a376c7c7dac3","first_seen":"2023-09-12T07:57:28Z","last_seen":"2026-03-15T00:18:02.25462Z","times_seen":17,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/bg_contents_aType.png","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/bg_contents_aType.png HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/webmail.css\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 12:04:32 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5428\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 654 x 600, 8-bit/color RGBA, non-interlaced","md5":"c82e706df63854bfff1bb64d79252c41","sha1":"a7d2b1d4edc14e665426519ec4a9a579bbbf6387","sha256":"1b893d2f9d6e5452c20baaebf3b8287473bd8c78f41b7c4e6fc25b6dd3c20e1f","sha512":"3832c9f7c25d14dcff9600f6af8b75843b4b6bba828c1af85dc46098056196d5ac102d7ffebddf810d14e0b43d79666b1912ee00c4b9e68e5dc5fcf5dc3d5de0","ssdeep":"96:/3XzGManORyFCjLQE0UhvOnJ1sdIcGTKg7eEbc67G1EZU:LGMane4CjLKE0DL7eac67oAU","tlshash":"3cb1eac605cbe7f44270ca024d72f802c792755877b0c7f281355eda4c9a866eabe9bd","first_seen":"2023-09-12T07:57:28Z","last_seen":"2026-03-15T00:18:02.257621Z","times_seen":16,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/sfix_tab_login.png","fqdn":"exploredoctors.com","domain":"exploredoctors.com","tld":"com"},"ip":{"addr":"65.60.45.202","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/","date":"2026-02-16T16:03:28.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.exploredoctors.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:24:43 GMT","end":"Wed, 13 May 2026 12:24:42 GMT"},"fingerprint":{"sha1":"69:99:DA:FA:6C:B4:87:F9:20:85:55:62:74:50:AD:4E:CF:32:9A:03","sha256":"5D:6F:A0:66:09:AC:EC:1C:38:2E:A9:A0:81:B5:10:D8:BA:09:24:D5:43:AF:C5:B2:C4:39:ED:88:88:FB:1E:78"}}},"request":{"raw":"GET /jbijk/FixsCafe24fixed/john-sbmental/assets/sfix_tab_login.png HTTP/1.1\r\nHost: exploredoctors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exploredoctors.com/jbijk/FixsCafe24fixed/john-sbmental/assets/webmail.css\r\nCookie: PHPSESSID=2957d2e0e6b1798f53420b2d8db953ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 16:03:28 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 10 Dec 2025 12:04:54 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 966\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":966,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 53, 8-bit/color RGB, non-interlaced","md5":"09eb9b570aab55bfed67e426909f5e4a","sha1":"917536895fca6b77384ee25d1b80763d41303b22","sha256":"438a6addf8261d16bb4f17baa184d169991d80bd466d2d70e02289375678d879","sha512":"fa0d66be74be084cc3b47f4dcdf7b66900e65bf2755a0ce3e402d3f8f1d8d39b6ed855cf3c10562283df79b7449ea1e3c955142edeb4451b9ca982574686c7d2","ssdeep":"","tlshash":"e911509afc02bd02657d95c22cfa8423892b0ec09ee0e365b88be90b1d340f2445c7cb","first_seen":"2023-08-08T07:56:59Z","last_seen":"2026-03-15T00:18:02.258817Z","times_seen":19,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"exploredoctors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"exploredoctors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
