{"report_id":"947e580f-92eb-4ea6-ab03-937ac16b7ef8","version":6,"status":"done","tags":[],"date":"2026-02-13T19:35:38Z","url":{"schema":"https","addr":"all-med-rx.com/","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"all-med-rx.com/","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"title":"Canadian Pharmacy","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T08:57:29.345088Z","times_seen":17833421,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"all-med-rx.com/","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T19:35:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"all-med-rx.com","ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-09-15","domain_rank":0,"first_seen":"2026-02-13T19:35:39.089877Z","last_seen":"2026-02-13T19:35:39.089877Z","alert_count":138,"request_count":46,"received_data":2758431,"sent_data":54251,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"all-med-rx.com/js/messages.js?v=f2867a5f013c4b1d9d72e7e419c5f207","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3c7edeb0dd83bb0618a0d9aa3dbd814","sha1":"d929fd36a576ee095e8fdbf931b17b6c76f20279","sha256":"365570fb2fd555c0d67c972ef631390014cbd9fbf17620c7c9cccd5410abdb4b","sha512":"935977f247fd714f722685ae350ae05488da456903e3930d2fd85691f66324450e42840b7a80899b834e866802b7709439d6024fc89c1ee3ce97cbc9a1c90844","ssdeep":"384:CKROZWsFSFDqoToOocoIo3FJkBbWa6VEMOaoyWds:C/ZWsFSFDqoToOocoIoUBbPMOByW+","tlshash":"e452d6947a7f083e8fa602e3385f300bb3f5461759496c25c2dce45921ede18927fb99","size":14331,"data":"","first_seen":"2025-09-22T10:06:08.25556Z","last_seen":"2026-07-25T04:20:02.849553Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/index-a7f55180.js","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"8e70358471bb112f3623a07f9f03abbd","sha1":"51d06c768138466f490e62f2b2763557964ad60b","sha256":"c757ddf1e6b1a249ee42323b91cd56fa6c3804e087afc40e0a56745fa2d03a1b","sha512":"955c4f7fc7b8504b952c4ffed7dd6640bb529d14e53954db1a865abcd7ced09ffeb348319c6e778de8133c23b8964d7d5fc6b57d46020046e5cee75781bdaca6","ssdeep":"","tlshash":"ff4136da31c2713027f3112de13b1a0ab37b4255689e95d0c71e8afc1eab4ad8246e5c","size":2132,"data":"","first_seen":"2024-02-22T22:55:10Z","last_seen":"2026-07-25T04:20:02.843806Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"5980727114f2feab4ad0bc7804630fc4","sha1":"64df0bce91aa12f952b342f83436844110e8555c","sha256":"67019891d9c6ceeeb1832fa9dfce3ce366abbfd0d9abcca4e0b4a9adf0f19bc4","sha512":"594ed50f4b5c680ab12abcff16baf1cb03b57e71c8810b8b8673122bb0e330e30a8a0971fe0ed7f7bf45ba76514134e12696ba5d38d91b06ce414635a67d7f37","ssdeep":"","tlshash":"94c0126a10ee58644d72f302f46f1f61b41ec0f098854883b594ce5565931745f095ae","size":190,"data":"","first_seen":"2023-04-16T14:48:11Z","last_seen":"2026-07-25T04:20:02.855876Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"7a986d2d8d3416705f9b3d077b6b89cc","sha1":"40c305254e16e286fb01b7a289b6a7997423ca09","sha256":"195ebdbf14e084671508e39c25956a48382235a07de2f65497f7df689ea86621","sha512":"760149dc86b5eb87219ffdcd70ce5bf9b09cc072106c96a66d5c322675d5a33253d889b14ab4cd3e13ec64832fed6267e6179ed81303062a706a861b70edb956","ssdeep":"","tlshash":"abe02631309d9c7bae873a50b0ef9d12662c00d89182ac48ff6c8f2644833310f2d03e","size":351,"data":"","first_seen":"2024-08-20T18:58:00Z","last_seen":"2026-06-30T21:02:31.143602Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/utils-b14068a0.js","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"0b8b514f4fb14ce3618a9179743d076a","sha1":"f3076fece7d13a4415b8f4c4f889d9b40d1cb884","sha256":"3c4a6ed4094dcbde7376990487f69400a601ac498353999d6493857ff0edd794","sha512":"b183e8d6de30f03fcdcb4dd670d47c0fd1ce2051b2960400a8febdc3d2c55a8e415ee3a6a3f9931986421ed191db02e6b70f5d88a5173c611b9c81336c564ed7","ssdeep":"3072:ME/8aABjN03k4Pc03C4PyQQcdyEZtMyMuMEnn+qXBU64R1iUQL7b4tQI2lS/IsbY:M175y7ZtMyMuMIcC","tlshash":"e634cfebd63c9736a5d97b35968eb3cd1a8cbca3c848527826d3b54f53788e0706c205","size":249602,"data":"","first_seen":"2025-05-26T03:05:58.505743Z","last_seen":"2026-07-25T04:20:02.844528Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7261eb5bb293b61c2a44a429b7444d54","sha1":"2f9dcaedb1ee6b8ea6ff8af79c3e0bb5a3fe08b0","sha256":"484c2298bc8058445bd0debb8fb32da4bcfc7d7edc7454924e5737aa82d62180","sha512":"7578a6f9d6d925dd0a2dbd679e20e05691db1288e60031738ec2da284da34934476ec7cbeb46a35033c64d121ceff591dfd8923c249631512ef701c4920c2766","ssdeep":"","tlshash":"d680044440005d44703171707513111510c14031054310101d50530d71505c7ccd0154","size":36,"data":"","first_seen":"2024-10-11T08:46:25.178589Z","last_seen":"2026-05-25T08:00:56.248083Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/MoonLoader-ddf81262.js","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"fa7dd204b5fc74b836227fb0351aae91","sha1":"876a7ec6368e0f319c7119f54530865eea9fdf78","sha256":"a23dabbce8087006971106128620c89833691c59402d447af6abc1e86f6d9333","sha512":"1747029bc4f0629a658d923b6acaecdfe1687a5be1f42ed3242dc2ad3978599e6242190dc9eb6734af1b8eddbdca3206568577e7c8f18c24ebc4e76b5262d375","ssdeep":"192:HSBMtijpFUA2GLY483i6STxnVf2fWURcAmAhWWR:Q2GPgAXgRKWR","tlshash":"f812969af88c763d1a63ce3550ab73502224351fa824514de276a8fc0f5f81922bfe38","size":9898,"data":"","first_seen":"2024-02-22T22:55:10Z","last_seen":"2026-07-25T04:20:02.84747Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"2f7c1ecae5a66c7e6b9b5944fdde31d5","sha1":"80d5ae29856a0168af1ad67ba40f82d04a84ae82","sha256":"ae1fcaa7b4f863688221ae03d77b3b4f62d1d3c631e3440a7e2f6b6943ffcdfd","sha512":"fc259adbf56c5dd74903c3408c2abd8783448b09fef3a78a588b6288166087aa83f5e00ac4487820ac67222badb2c58ba51d69c67df060b6780686e8a733c75c","ssdeep":"","tlshash":"f7f08271109c1dbdca63be426c9f3a1651bd35517ff19c908e58673048820d0813683f","size":555,"data":"","first_seen":"2023-04-16T14:48:11Z","last_seen":"2026-07-25T04:20:02.853842Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"fd7d05dc1844665da04ff8c97a40da5f","sha1":"0a56ca34ca87766b781a9fa383cf76de7b17057c","sha256":"5c2c0cba9b9e99a3f02681469247907cea95b7b8e5085bff2e245c6806d8a2c1","sha512":"f0103c91edab680e7b37753876520aa3d58bb5f44aebc4b76b44e192c129cf5f7ef7eb28dfc8efb0f549ff69bb20c56f3a923f01cbb783f080691eae849e40e6","ssdeep":"","tlshash":"a2c09bd390fdd45959f7303151153fb1b80925f545915844e1789c45349bc50571547e","size":139,"data":"","first_seen":"2023-04-16T14:48:11Z","last_seen":"2026-07-25T04:20:02.855204Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/app-cd420ec4.js","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e952a0ed131f950c5c402469fcb5b28","sha1":"fff06f9a1cbd374883006c399c2573079dc9ec4b","sha256":"36ce00cddffe452b800694086aef561e11e2e456c62098fb8b069a01678ee521","sha512":"c3f49d5c416dc0c3b6e15cebff030adb88ba52386bc950c3cf6263d71da16547cf67422f84ff5a5f366f49aca5fa10326158fdf81fc37552baeeb3e014d1acf0","ssdeep":"3072:Gc7zmwvagyRFenvujL0U6CNyARYx4ip9PqBAPZ8zeZmGjiU08XiA3yFiLZpIPV81:VTvUCmjL0U6xA+XHZPiKZZM8SOrZ+PVU","tlshash":"a97407dd7292b07543eb21b010af050bf23e6954a84c8858f129edd93eb8d59927bf7c","size":342163,"data":"","first_seen":"2025-09-22T10:06:08.275394Z","last_seen":"2026-06-30T21:02:31.134087Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"f652ea988c5a8b1126cdae089fc72d61","sha1":"bc30914d5925fa2580e1c09675faf66851a849b3","sha256":"8304ec1d77419dd604d136b67e81b45592d2b87e8d183e2d4142dffe94bc1971","sha512":"5afc1fc4e5eb939168506952e9d398e3123a1846cb093676bb1558fd080e8636235b58f6b8b159a254fd703e66718151935d9922a083b6b790b297aa2bede321","ssdeep":"","tlshash":"0d8000aa8000882e08202a200e8ba22222a20832080a0020aa088e82b2a2003c008eac","size":30,"data":"","first_seen":"2025-09-22T10:06:08.334528Z","last_seen":"2026-05-29T21:34:04.069478Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/192/24e341.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/192/24e341.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 42520\r\nlast-modified: Mon, 08 Sep 2025 08:01:34 GMT\r\netag: \"68be8d5e-a618\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 198, 8-bit/color RGBA, non-interlaced","md5":"c35e94322aba59bd57d8600067709ca5","sha1":"fc33ccff8d6db44f3509af5e66f1aab998a4aded","sha256":"6aa4f2bdffffb66986c6a25b6bfebf639df2765afcce15b0b4ca053da61b573b","sha512":"f5ef5ce8ee8337a8e1f64dce05336bf80c07f34eb965f7ea8acedb6f3a88faff8c9d4eaf23760159f285809af1ba8b4c3f71a53b4f5531a8db1523c33f94b908","ssdeep":"768:8Z+1O4GKd4KXPCrjtndTC/kDQq/g17G7Mt9o+PQrIth887CQplVPE4z7W5:6+AJQh/Crz7/gQ7Mt9vC8CEEsk","tlshash":"7c13f2bc07eaad0bd1dc89fb96e094335d6bfb2418ad745cfa67838a4552033901d27b","first_seen":"2024-04-02T02:52:30Z","last_seen":"2026-07-21T22:24:59.86792Z","times_seen":73,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/flags-54dc5bc4.png?1","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/flags-54dc5bc4.png?1 HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-7ef45e43.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 70325\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\netag: \"692ebd90-112b5\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-08-11T07:58:53.424724Z","times_seen":6413,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/app-cd420ec4.js","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/app-cd420ec4.js HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-53893\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342163,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64769)","md5":"7e952a0ed131f950c5c402469fcb5b28","sha1":"fff06f9a1cbd374883006c399c2573079dc9ec4b","sha256":"36ce00cddffe452b800694086aef561e11e2e456c62098fb8b069a01678ee521","sha512":"c3f49d5c416dc0c3b6e15cebff030adb88ba52386bc950c3cf6263d71da16547cf67422f84ff5a5f366f49aca5fa10326158fdf81fc37552baeeb3e014d1acf0","ssdeep":"3072:Gc7zmwvagyRFenvujL0U6CNyARYx4ip9PqBAPZ8zeZmGjiU08XiA3yFiLZpIPV81:VTvUCmjL0U6xA+XHZPiKZZM8SOrZ+PVU","tlshash":"a97407dd7292b07543eb21b010af050bf23e6954a84c8858f129edd93eb8d59927bf7c","first_seen":"2025-09-22T10:06:08.275394Z","last_seen":"2026-06-30T21:02:31.134087Z","times_seen":105,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/OpenSansRegular-999abf19.ttf","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/OpenSansRegular-999abf19.ttf HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-7ef45e43.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41732\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\netag: \"692ebd90-a304\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41732,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 14 names, Macintosh, type 1 string","md5":"5874364d5ae80a8671d620d78ff9f1b5","sha1":"2f3d1e30fc79b7fbf302335238d1efc1b6f1141f","sha256":"999abf196e9c69fff63b7a543659139449e655ec99cdd8086bf5596e82616ff2","sha512":"8d21f62850bc63b200ba9d8f7871d97d992bd0b5a5ac368687c894c98d41222990807f72b06dba1099da1cca6ea845e83f0d43f168a4c2e3c90eeb9a83cb0b2c","ssdeep":"768:tWZEsIzm62YnUQ1jSMlXJ89m18FqBFcHhDD6G0U0ODccczhDlp:YaYM51mE89m18FiFcBDD6GpWhDr","tlshash":"9e132a08e3626b36d52730ffc1263ac4462bf1546b1fc38f3ede4bae695112c8d61a56","first_seen":"2023-04-05T22:00:44Z","last_seen":"2026-07-25T04:20:02.82586Z","times_seen":113,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/logo_header.svg","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/logo_header.svg HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd82-54dc\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21724,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"040449bfd07189f13c60fce3d886879e","sha1":"f46362e1e5093f46898a91d059b3a2fbc5e9c043","sha256":"27ee42cfec0d69cfb32e70df61716032e135f78c7df6931115717e62c6b4a5b8","sha512":"e9362306466f8dfa4f7082f66fff1d393aaad91473573217754a939f65ac9e952bc250ba109a3cc38e1da3938b631ae0dd5a7c9f2b980910a956d4c12dfda3aa","ssdeep":"384:CFdGGSpu13+dcLxcvZ4ROvzTlEU7zgnsBSKCjpSUvLENVb5Pp80Yoh:CXGGSi3zObnKdh/0PPrYC","tlshash":"9da2a4dc6bb651e8f488f2ffef4194b83a02a9fa2806c868c3ed0d19d54581ce915dd7","first_seen":"2023-05-07T17:53:53Z","last_seen":"2026-07-17T13:05:44.323931Z","times_seen":49,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/186/6dec53.jpg","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/186/6dec53.jpg HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39321\r\nlast-modified: Mon, 08 Sep 2025 08:01:32 GMT\r\netag: \"68be8d5c-9999\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39321,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 294x282, components 3","md5":"7ac02f3d2bfa6e6de2771711803f6b7f","sha1":"22b301bc146c6c88a717a0666175aee8eb6c8458","sha256":"e5babff39bd3e65102a05b63f0a686dac1c4b9c2a0673cd684cfeb573e00f7a0","sha512":"cdbda2e30a5df8165bb0c9bd3fb45eef4a133160b364c1eceb6ac37fd0c43d16275180b26305b18cef5fea04c9448835c922d4dbc30eace13201b7299504edf8","ssdeep":"768:PoDRPcX3eFnQJ40mgf7REZZwBdZ4zCpxeNXlDqPL0lQlFocC6zvroUL78J2TglxC:PMPPFQlN7eZ+Bd6mxeWPolQWubwc8LC","tlshash":"a703f2ae19986e343058d1496152fe31bb7464c08e9bcc396e41351deea8dc2e5cfc8a","first_seen":"2023-05-31T15:16:53Z","last_seen":"2026-07-21T22:24:59.887753Z","times_seen":84,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/153/9d275d.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/153/9d275d.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 130141\r\nlast-modified: Thu, 13 Nov 2025 05:15:47 GMT\r\netag: \"69156983-1fc5d\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130141,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"0074f672178534b136e0cb188908fbe7","sha1":"0d89c9d1de630a17e8546e3b194ec9aa1a0c871d","sha256":"d9f57fae1e42e1a12cacad10c6fc63f398eb8b20bc9fefc7e82389400cf22983","sha512":"39c4225ae6f69f966da4fdb2c392d1894edfb904ee0c709eb73e44afa67148bd6d052579b2356c7200b9633b4cfb4e9c0bb2282c7c0036a188700e0e032d009a","ssdeep":"3072:fsz3pusC8Zzy+QCFzTlVPXZoPZh7QeCXYjJzzOIkiyhhL:e3S8ZO+HBHZo/QeVE3XL","tlshash":"20d312834480a8630997b7517e2f5c60cbb188c4ace3f57e06193f75d97a4cb0992abd","first_seen":"2025-11-16T04:03:16.066734Z","last_seen":"2026-07-25T04:20:02.845232Z","times_seen":103,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/js/messages.js?v=f2867a5f013c4b1d9d72e7e419c5f207","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /js/messages.js?v=f2867a5f013c4b1d9d72e7e419c5f207 HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 02 Dec 2025 10:21:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd91-37fb\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7095)","md5":"b3c7edeb0dd83bb0618a0d9aa3dbd814","sha1":"d929fd36a576ee095e8fdbf931b17b6c76f20279","sha256":"365570fb2fd555c0d67c972ef631390014cbd9fbf17620c7c9cccd5410abdb4b","sha512":"935977f247fd714f722685ae350ae05488da456903e3930d2fd85691f66324450e42840b7a80899b834e866802b7709439d6024fc89c1ee3ce97cbc9a1c90844","ssdeep":"384:CKROZWsFSFDqoToOocoIo3FJkBbWa6VEMOaoyWds:C/ZWsFSFDqoToOocoIoUBbPMOByW+","tlshash":"e452d6947a7f083e8fa602e3385f300bb3f5461759496c25c2dce45921ede18927fb99","first_seen":"2025-09-22T10:06:08.25556Z","last_seen":"2026-07-25T04:20:02.849553Z","times_seen":117,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/arrow-right-028749dd.svg","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/arrow-right-028749dd.svg HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-7ef45e43.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-145\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":325,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a82abdb4cfeac7e0c665cd97e1c9642c","sha1":"9d8f0e65dc0d4842c5fdf186e7834cd89ec4743c","sha256":"028749ddae49266df907d36dd2634e158c5bc1078036aaf05a9702b501e5451f","sha512":"67babf826c5e414fe7e056314ecd93cac3306a961a8ae66a3983bd380501c1f4d5957d618a3bf14013170cfab884035ef26716d13ae7e6c29e04cbcc746c1ef0","ssdeep":"","tlshash":"65e0cd94f369d07e964ccf1057fcdcd4a135b456a0d201c9e9d12ca1763648196065dc","first_seen":"2025-05-26T03:05:58.501946Z","last_seen":"2026-07-17T13:05:44.317864Z","times_seen":50,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/OpenSansExtraBold-2ac9ecb4.ttf","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/OpenSansExtraBold-2ac9ecb4.ttf HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-7ef45e43.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 44024\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\netag: \"692ebd90-abf8\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44024,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 14 names, Macintosh, type 1 string","md5":"092df5f6b8241c80ebdfbd5d41aee451","sha1":"1945f2d0a0a2d3f58f48f3c80c249c5e277af7bf","sha256":"2ac9ecb4550b01efafa7fc0b31ad2a1cec552672dc7e5a5d44b6d7974e65b4f8","sha512":"8ca536cadc5c1ae944dbf06f6e34faf0664a760abc7c4bd193678b0cd043fcc4c0237b1f5e657f06f0c1d9686737497ef843a19d09e8ff803484ef061980c662","ssdeep":"768:IT24vEsIz0IPtdfXqJKEqohU5t2bdCdEAqI9zGFoArxYVc2YU0OdccczhDlP:4X49PtdfXb3PiLXAzCo8yu2t0hD9","tlshash":"f5133a45e3a26b36e51634fec123b9c00733f040ab5bc34f7fdd4aa69a511ac8c65e96","first_seen":"2023-04-05T22:00:44Z","last_seen":"2026-07-17T13:05:44.272848Z","times_seen":53,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/OpenSansLight-73c93f9d.ttf","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/OpenSansLight-73c93f9d.ttf HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-7ef45e43.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 43400\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\netag: \"692ebd90-a988\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43400,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 14 names, Macintosh, type 1 string","md5":"12c8a8c628ce99ed729f003698183a3a","sha1":"7bf688c594e28aa61437f019f13860e16ded9122","sha256":"73c93f9df94d68ab414688f344942996e14776702c2cbc1cef6f467b17d6d7aa","sha512":"ce11a7b55594523231688dd7d095d9e27a7f3c3d4f564241b4b206238fc5b5e2d14354f9f11de19a15b5dabfe4650e81f32c74a80334bfdbbb8e63b58722c4e1","ssdeep":"768:cGzcEsIzmAtvpeHRMd9jGJogCEuUtfqKJOjfZsjPSXnZWFTlu2TPXU0OIccczhD6:pzD5dt9KotEuUtfxOrZsjaXEFTlfLAjk","tlshash":"25133805d362bb39e523b0fec1267ac00267f054ab1ec34f2dde5beea94516ccd64a16","first_seen":"2023-04-05T22:00:44Z","last_seen":"2026-07-17T13:05:44.315326Z","times_seen":51,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/164/7bd589.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/164/7bd589.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 27887\r\nlast-modified: Mon, 08 Sep 2025 08:01:26 GMT\r\netag: \"68be8d56-6cef\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 198, 8-bit/color RGBA, non-interlaced","md5":"d4805c757577d65246ea811a98f024b5","sha1":"d10d40bc6f1f6797f0294c7f0c9be69a4e9aff96","sha256":"1b5ff105d59a66f4acb3c387f63eeb5c0fee3838847d9b1c452355c492c2d9a8","sha512":"9c1d1317b7364e9ae82fb55cffa8365ffca2d83076ddda544bae5b01c923f36db7b7f46e9d912fc8fd187586f7af35dc7b2cfebed38a38dc5f5f0b3c46aac764","ssdeep":"384:uWiWikriSGXZioO5/rtRUMYfGtU5ijCbKsKJPDqk+DjLAKHMuRXvy33FlEoOR7Br:UmFrbUtGhgORA/1b/ybo7B6iqfaK8vJX","tlshash":"b0c2e19b984c22e4b0d9dd41146b455f151707b4321bf4069dfe8ec26cf54f87aad374","first_seen":"2023-05-07T17:53:53Z","last_seen":"2026-07-25T04:20:02.828488Z","times_seen":140,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/187/975c74.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/187/975c74.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 23843\r\nlast-modified: Mon, 08 Sep 2025 08:01:32 GMT\r\netag: \"68be8d5c-5d23\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 198, 8-bit/color RGBA, non-interlaced","md5":"3f34c21a29ccbef2c0934d5ab8155c04","sha1":"b8c84720d987290a0a6578f749f1b7ad8082444c","sha256":"7d2c61536098fae6e408835df7755b6188498668c171092e6bffe98436b7015b","sha512":"99f648704be2f4b9f2d7ba5ac276c82e953e3e11f69ce370eb7910272dae1ceb50c7cae2ce5e5c263ed21be100bdc0031364605b0d422e8584a5f90c5e6ff406","ssdeep":"384:aQpCO8lcxU4UBHvpZItc7hfq7ArLWRMINCHTomLSam1nVb4ojt/8rlH:XF82cFsgfq82iINTv4oZ/AlH","tlshash":"bfb2d1aee080547077997eca6da4cc6fcc7b1624d75ef9c8665bc4dd7180a27881cf48","first_seen":"2023-05-31T15:16:53Z","last_seen":"2026-07-21T22:24:59.875953Z","times_seen":84,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/stock.webp","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:21.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/stock.webp HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1378\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\netag: \"692ebd82-562\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7fc3555b7ae50fa06e1af61592af2923","sha1":"04b7f52dc3a4ba92ca89e245daebf16f3b423a04","sha256":"2a0d941bba0c7b1944145406dc2c3c6d547f01e7c073490561f6a0c03440d051","sha512":"a8810122726867c5a7d5474a183286c332b20f4863a202be701f928a6a404ba33497c1a783d119d3e0bf3fe2cff8ce0d1da41d347e875e54371f75760998fa85","ssdeep":"","tlshash":"d921d8a863b615a8c3d11058b1b20c923a69f099281db0d6e6e67cb502707180fe4901","first_seen":"2023-05-07T17:53:53Z","last_seen":"2026-07-17T13:05:44.28873Z","times_seen":50,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/app-7ef45e43.css","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/app-7ef45e43.css HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-28eff\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167679,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"806b3c89d9f9a3d97597146c2ca8d808","sha1":"de56f1bd1ba97e41f7bcc52d0143c36aa4e7a857","sha256":"7ef45e436e14cf9b09899d6eed9b1c947000c6346285100393b97800320222d6","sha512":"4b85fe09ee01b20684d265f4b75f36f05f01210f673d70354184e625358edef3b952922a578ac059a57acabd0ed8b69952aa5715525bc1ada19607b3208e3ee3","ssdeep":"3072:V5d5lCit5SF/wXM5sht73FLptSvXN4h1wBo621Dvy1B:V5d5lCit5FXM5sht73FLptSvC62C","tlshash":"30f3a82385b7303cf523d563a4e05ae9323aa902fa534bbae9557d3c82c51d20673fd9","first_seen":"2025-09-22T10:35:56.74322Z","last_seen":"2026-07-17T13:05:44.321108Z","times_seen":44,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/advantages-5.webp","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/advantages-5.webp HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1966\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\netag: \"692ebd82-7ae\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"862f1e326d0b87277c444721123afabe","sha1":"f7bc14cec20137988c7e272131c9b7f3f7e9626b","sha256":"c2c7eca7e4a427a3677783635b25a563da10e7580bc6abdde2e889ea41cbd2b1","sha512":"9133e09b01e69780bcdeff993df4ec09fd3b42f2c6929a0ce6e17e1f679630ecf882b523348fbe15a7eaa1fec5479c43bac6b5bbb8ef7e41b44ed075595e236a","ssdeep":"","tlshash":"29414c517dd2a1d9675acfbfeda09c244a6e3d485b8062d0d68e185c4ac430d1e14011","first_seen":"2024-08-21T10:14:37.509129Z","last_seen":"2026-07-17T13:05:44.300355Z","times_seen":50,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/app-918af51c.css","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/app-918af51c.css HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-190\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":400,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (399)","md5":"e32f20267b1d0dd055580e7bddcbbfb1","sha1":"cdb69314ebd9f35387fd4507f0af1579f3e17f05","sha256":"918af51c26dc25cc119bac78e29dba9ca8d62837700c2d153a4f479fe247c183","sha512":"8786c7eebaccf59577ca2512ea86844b5d0a8344e37e28f34138119b6c2367093ecc055897fc084b70088a995be072a76b3b5411494555677f46bb9fb1a13daa","ssdeep":"","tlshash":"07e0ab63348c0f5580bb830079c053e13a111a720b95ebd909a0832015b79c53dbec30","first_seen":"2025-05-26T03:05:58.484435Z","last_seen":"2026-06-30T21:02:31.138862Z","times_seen":111,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/mastercard-footer-37999ace.svg","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/mastercard-footer-37999ace.svg HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-7ef45e43.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-1499\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5273,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4464b001df13f776d5e03915e04da5f1","sha1":"d898a110c622ddd3e89fdb6938081deddf6351af","sha256":"37999ace402039bb44ca9d000e882abf133ab898eef48ae32af11f09e2951915","sha512":"640ab0e7942d18d4b60a9c762828f56a447b4384577f42882f5d1e6d3c8db9b20b3779a1e2b896f6775eea1a01160176cb44ea463df19b55303d7941a120a252","ssdeep":"96:OV+kqlgK5Hf0LzmSantykxB2q9LCNHWkyIkV7hSgh4JLo:aqZf0XmSOx7CN71knSghMM","tlshash":"a6b186ed2b7094d88dc8c7f6ad1805e93523a47eab258a50d3acdeb458c6d7cc806d81","first_seen":"2025-05-26T03:05:58.519574Z","last_seen":"2026-07-17T13:05:44.323025Z","times_seen":49,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/utils-b14068a0.js","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/utils-b14068a0.js HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-cd420ec4.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-3cf02\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249602,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0b8b514f4fb14ce3618a9179743d076a","sha1":"f3076fece7d13a4415b8f4c4f889d9b40d1cb884","sha256":"3c4a6ed4094dcbde7376990487f69400a601ac498353999d6493857ff0edd794","sha512":"b183e8d6de30f03fcdcb4dd670d47c0fd1ce2051b2960400a8febdc3d2c55a8e415ee3a6a3f9931986421ed191db02e6b70f5d88a5173c611b9c81336c564ed7","ssdeep":"3072:ME/8aABjN03k4Pc03C4PyQQcdyEZtMyMuMEnn+qXBU64R1iUQL7b4tQI2lS/IsbY:M175y7ZtMyMuMIcC","tlshash":"e634cfebd63c9736a5d97b35968eb3cd1a8cbca3c848527826d3b54f53788e0706c205","first_seen":"2025-05-26T03:05:58.505743Z","last_seen":"2026-07-25T04:20:02.844528Z","times_seen":122,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/sale.webp","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/sale.webp HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1650\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\netag: \"692ebd82-672\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a409b78483eab41d82e9125ac02496f","sha1":"f3e6d764b6326462d9dde62a5cef938c7f3b9123","sha256":"7b3593ed20ebb627ec3d9aaf3ceaf0deb6edf69f5ad6b0e6dad3100965169750","sha512":"45c93fe7b097f1a625ff0953aef0cabeb6011d885abcb7c19a1f73dc93601900c4015862a9fd0748dfb59f1a300528cb3961327803787fbeebed110e79844fe4","ssdeep":"","tlshash":"11311a83bbd0bdf3e17c2d41112d32437438f7aa683a280780a188247914be57d22cef","first_seen":"2023-05-07T17:53:53Z","last_seen":"2026-07-17T13:05:44.318715Z","times_seen":50,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/163/7a0415.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/163/7a0415.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 24463\r\nlast-modified: Mon, 08 Sep 2025 08:01:25 GMT\r\netag: \"68be8d55-5f8f\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 198, 8-bit/color RGBA, non-interlaced","md5":"891484d7a22ee79c6cd6c112fdc2e82a","sha1":"9362433de7f33c7a601267b35bf905d897cfac61","sha256":"e3532aee563600743fc82b0ac7eed96dac0d6c94d47af8215492ee79d0b76c68","sha512":"29ec2df540e35b81fd3c3c5933aa2906befe99f06b4170fc9ea26030f5c587e1819fffe778d098dec4879de2fccd3d093132a2e01222357c358c43f50d3ebfd2","ssdeep":"384:EnL6hCWNAmIgFyabM3pzh1fOOdTYxzfin9iTlHJzhlvqcJCEkAq8ktx0i1f2z:IkNAhSM5zhZbTo5TlHJ9scJZCtxC","tlshash":"4db2e03e2ef11b8054d3bcd165c7f40f4c879baad683923aa6450461c3b5c4b0faa68b","first_seen":"2023-05-07T17:53:53Z","last_seen":"2026-08-04T06:16:38.23528Z","times_seen":100,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/header-visa-4e48f1c1.svg","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/header-visa-4e48f1c1.svg HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-7ef45e43.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-4df\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1247,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e00cdd6a9d467c5391a873d683f5a94d","sha1":"516c46c4f5062f461dd225b2c915f985c9100803","sha256":"4e48f1c1365381c351d7c9197604643302dab6226b99b5591daea090bc219c42","sha512":"ce7f3feb14e0eab9c2f7db159eef0f43099201ae4ba8c251d6b0477138451d3c52d57a3b42189485037cdf6018313741251a4c7e05d9b5ab72846ed01dca996b","ssdeep":"","tlshash":"f92165ca3bb648c2c5ea96f2ae10587c097de0e13bd600448649eb043ddcc597e0cd90","first_seen":"2025-05-26T03:05:58.48565Z","last_seen":"2026-07-25T04:20:02.836039Z","times_seen":93,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/flag-icon/en.svg","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/flag-icon/en.svg HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Dec 2025 10:20:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd83-1f7\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":503,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e012041960568ee9dccd83b559c8bf9","sha1":"e2ba638872d6e03ccb149bb37e56f7f76a2e1cdf","sha256":"a9bdacbab76ba47fff50f9841fd0d0cc09f6a2d74c1c88cd3ce2148150511353","sha512":"a24a41f2e99364094348ebcfdd2a51aa3dba93004c981e4fd6914dff104c394f04e59284c91ba21158fe5c01c70b556d3cea08c5ca36b233feef0b8a945aa951","ssdeep":"","tlshash":"42f09ec8d32d7045c70793104cbcb8e3d4d962ce559400dab4d09ae4216e7a7d8d7d91","first_seen":"2025-05-26T03:05:58.507666Z","last_seen":"2026-07-25T04:20:02.851505Z","times_seen":113,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/188/efdd3b.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/188/efdd3b.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 142549\r\nlast-modified: Thu, 13 Nov 2025 05:15:49 GMT\r\netag: \"69156985-22cd5\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"838368187dceb820a6acb75dd1a1d2b1","sha1":"af07df97627854905657fc0f525c5b77e48881b0","sha256":"41a31812c0192d17e9a6bf1c6549d61eb4858b243af4405ba93725dd390ea072","sha512":"a65da374dcaabc77e0afa76d93f59ad9afe338cfc2ddb102243b9e9391338bc0669b59f2e5ac2cb123273fad7a527314cd57fee3bfcfa33eab7e1d3db1cac1e4","ssdeep":"3072:EvO+SRzgIes9LR4gAoJYhwlcKNhewwhOfeWY4goHjX/e:EvO+S1g4LQoG6heww42RNuS","tlshash":"5cd31248aa7e149feb97b2de08fd8740ca28879c1adc7c5e24d53c414b82ee85767c40","first_seen":"2025-11-16T04:03:16.05172Z","last_seen":"2026-07-25T04:20:02.837139Z","times_seen":98,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/166/41ddbd.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/166/41ddbd.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 40305\r\nlast-modified: Mon, 08 Sep 2025 08:01:27 GMT\r\netag: \"68be8d57-9d71\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 198, 8-bit/color RGBA, non-interlaced","md5":"12dad29b9ee132cbead918f22c1973b7","sha1":"1bb9b2b8f784187751ea55522f9d93f968e1e189","sha256":"a53dd79119af6ca70d73897052f2862028e09ee065b4f0bf0d9ecb5043aa25c4","sha512":"35a79a58ab753c4e7f6f78ad07b436838c8f32b9f5262ed40c69ffa767fcf998087a2d1522a5008c951d99f192f14cdf8d657330687c712ba8097ee9f0da1452","ssdeep":"768:g4++UBShH1nYRDkx6NaH5UJAnwCIVdk2OLts+n75hiYs:g4++U8h5UwxcjNCIVc2w5hiYs","tlshash":"ac03f18429306261e7ed774b3154563aa164ec409df88e667f4cd2e9cfca3e8364f48b","first_seen":"2023-05-24T04:52:16Z","last_seen":"2026-07-21T22:24:59.888281Z","times_seen":88,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/162/87d162.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/162/87d162.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 138370\r\nlast-modified: Thu, 13 Nov 2025 05:15:47 GMT\r\netag: \"69156983-21c82\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"2fc1b01b94ed7849df3db8db9ac443bc","sha1":"8a1f1e5fa30e0c1b4e1d42351a4e06df7ad3451f","sha256":"85534768b0811bcac9fc905ba28ed34609ea691aa59bb65793d19710ea1596a9","sha512":"8c47555b07a33ebd211c51b9d58ec7d0ee2612cddf7e075152100c1704d31f5df02271397ac9092109ac011a0b5a4decdae54563a7ffd061cec50fbda8f6886c","ssdeep":"3072:xUxwhWWCtbH4ffBCCbOUxZFNgNkbxj58QBCkkgsNozb6X:axw4WCtbYfjFqYj58QB5kgsNozWX","tlshash":"70d322bebcaccee454bf132a4e945d5c2d7c28c995066ba0b05f73423ab15fb0719923","first_seen":"2025-11-16T04:03:16.062033Z","last_seen":"2026-07-25T04:20:02.846037Z","times_seen":102,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/shipping.webp","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:26.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/shipping.webp HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1298\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\netag: \"692ebd82-512\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1298,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bafa11a03beffcc8b72e0b45bf4fe59b","sha1":"fe51de838e0a8ba0c2d2f1e997c42548c7633719","sha256":"8f8ad8c2fc8f3dc8dca0fe956f3d5a52d99d73af5e67511fbf17ebd37735cd77","sha512":"af2909631ed7341e03b67e511ebad764f79ac89d95bdaa7550ba47fb97795f0d9efb23cfc833f1a65e23968da34a2344a2af2e26d145e800758ee062897a85f4","ssdeep":"","tlshash":"0121171186dbb005e4026d100f9e06003d5287f8c39b774b81deef22b1c8b6188bff20","first_seen":"2023-04-16T14:48:12Z","last_seen":"2026-07-17T13:05:44.277861Z","times_seen":50,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/cart-new.svg","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/cart-new.svg HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd82-76d\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1901,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1296b3a7215dce7fb22f3ec23d98892f","sha1":"cfdb5cc59909f4423297edb356220ca9c9193db4","sha256":"86a03a2a5098a1a6915540f720d0b156336c039031f5231cf58daab1a625d6b1","sha512":"c6691c4ed1d58b3eb324245f105b80778f4c84f6b241c7929f77f1fe0e8c95b5a8fd345f842067c753c6a2a71a35c0f3774cf5323b3e68404dc93ff6008ea72d","ssdeep":"","tlshash":"1b4142fa031a677cb08177faf7262474b4d0aea13417bd3153703b4a699884d8a009db","first_seen":"2025-05-26T03:05:58.493285Z","last_seen":"2026-07-17T13:05:44.281378Z","times_seen":49,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/ems.svg","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/ems.svg HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Dec 2025 10:20:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd83-f81\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3969,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"52b22e996070b904aff96ca740370185","sha1":"8f450ad21990903a4cf10745a52c5fbe0f2f805c","sha256":"326f85445988623e8bfe466fd2d78c0ea84d53b8be7388f86e8c9d5029a28b05","sha512":"9398f5de25cd0d16188f2ba5fd65c9a708948231cde261526063e7af113e124f06cbad515a3b6d8cdd12db28da3ab813e47b256904a0efd38e677c9c4d8f3db8","ssdeep":"","tlshash":"6681a5f36360f3e5d801a779eb35ac7631a538f22fdf81d8c4d02a04a4a40651a9dcd0","first_seen":"2025-05-26T03:05:58.497401Z","last_seen":"2026-07-21T22:24:59.877333Z","times_seen":61,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/header-mastercard-063da343.svg","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/header-mastercard-063da343.svg HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-7ef45e43.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-148f\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5263,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be39f89b3bcc9ceb62d43fabb084aaa1","sha1":"c16c5d81283676984d6496d85618380a6a868f6e","sha256":"063da343a16622af32129d3441f137a2d65e5662c3daa20d01bc8f0d7d97e7e8","sha512":"731aca25b8bf58db50b055a0f4f8d584b647aa11651bf9334bae04015b0c04dc06551e4f0da8a8088987eb7672d1dced3b5c734b58d9efa7da4f6e8dd8f58416","ssdeep":"96:OV+kqlgKUHf0LzmSaOtykxB2q9LCNHWkhIkV7hSgh4JLm:aqOf0XmSvx7CN7SknSghMa","tlshash":"f3b176ed2b6094d88ec8c7f6ad1805e97623a4be9b25c650c3acdeb458c6c7cc906d91","first_seen":"2025-05-26T03:05:58.509523Z","last_seen":"2026-07-25T04:20:02.819083Z","times_seen":93,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/favicon.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/favicon.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1289\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\netag: \"692ebd82-509\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 32, 8-bit/color RGBA, non-interlaced","md5":"df8a8c1fedc853ef8768610cca6d19a3","sha1":"191c8492f5ee69c774caac0aeae4331020b2e5df","sha256":"840ecbb5e74e6b47a306de3e358e4e076846548c48289b8656d4db9dbfa9d2ce","sha512":"28a7e5a5f91e219254466e1e7a5bc21972f721efac9bb1890e32331be14c1cfc35403029e29f1e9bb926aa1132fb8e8ec01a033546d84a55a70233ab1e060e91","ssdeep":"","tlshash":"8521c58a62af09878c2c992bd75041b4b6bcb8253325062a82a2ff38c617e730054fd9","first_seen":"2023-05-07T17:53:53Z","last_seen":"2026-07-17T13:05:44.311296Z","times_seen":50,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/189/7b44eb.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/189/7b44eb.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 21681\r\nlast-modified: Mon, 08 Sep 2025 08:01:33 GMT\r\netag: \"68be8d5d-54b1\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 198, 8-bit/color RGBA, non-interlaced","md5":"38b9cbef577c42646e8e4b54da13f8d5","sha1":"4164feaeb2a6470f22cb2c0628d01d99b41acf0b","sha256":"880d3a84cca2cc79c378ceaed011d0783d965bd09cc9231f45470f887bd9fde9","sha512":"d59081d2ff269bafb354c2f003a16df1f182dcfafa66c100c9138aff9a7091c8c17cb122e9c014b899923575426f398fc7f4a100a9bc5f15f8743e61633ab15a","ssdeep":"384:BJn8T8WSfzcg/GrQ9sMvEIlyjf4v9ZEY0f7XRUa2yCeRYd8Jx5P9pngQ:BJnY8WGj/+yL0fC9WYQhUZyHYC7LpX","tlshash":"49a2e18519c48e50e9a0b5a7dffa20de6d6fdea08d303dc2a520929375523b94ab7331","first_seen":"2023-05-07T17:53:53Z","last_seen":"2026-07-21T22:24:59.877735Z","times_seen":83,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T19:35:14.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Fri, 13 Feb 2026 19:35:14 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; expires=Sun, 15 Mar 2026 19:35:15 GMT; Max-Age=2592000; path=/; samesite=lax\nalliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D; expires=Sun, 15 Mar 2026 19:35:15 GMT; Max-Age=2592000; path=/; httponly; samesite=lax\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":290480,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34633)","md5":"7817b9c485a1c89fccbf629b2b21d8a1","sha1":"4532a1471491d63ba89505725d7f3e18e03c86c0","sha256":"afdb84bd87880052ea5ce4918a8324ba4a170f69087eaa5274d150443812c575","sha512":"09492e457d5f12e83e38aec7a9927ac768e790d58a982e375edd929534fe84d8dd3167c9c4be6c02aa2b55067f7b871d9ce01c7a7a93fd7b98d1a2017c36c946","ssdeep":"768:RRvZstlOC+99TsBjbmb3dRK3SbBJAOaFmvk5q7jJNZD7wnzgu36csLgN:R5+lsQBjbmbHbBJLccBzwnznEgN","tlshash":"b554bfe1c5b4d43601f182e961b41f9bf9c9b0e9cdc2c94ac3fdea497971e81af06858","first_seen":"2026-02-13T19:35:42.011377Z","last_seen":"2026-02-13T19:35:42.011377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1430,"timings":{"blocked":145,"dns":45,"connect":43,"send":0,"wait":1138,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/advantages-1.webp","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/advantages-1.webp HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4700\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\netag: \"692ebd82-125c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc091ace987e301fe239b76de2303d8a","sha1":"a42df02b97b6a4e4abc87742505be21684c35870","sha256":"00f3f9f2503f83bb1d8de62f45e88453ee55a2c9c6e48aa086c9c61340e2849d","sha512":"005d23a3697949a9706999f042c793665c6d005e8159de3dff22eb48c698d3bb3d3b1351db445229adbaa0f2d8f4645de4fab27171d442d4cd584f3d0da4ca04","ssdeep":"96:AFZXs3N+tTKF99/Oproz9YflKcFnaW0hifK6E0jjU2Ro+I8Vn2hJ:AFZs3N+G9UrXA81GyHjhRo+I8oJ","tlshash":"9ca17ed641d5c9872e2aab7d7079d037ae1682809f728bdbd4099c0bd68e0f405db155","first_seen":"2024-08-21T10:14:37.504921Z","last_seen":"2026-07-17T13:05:44.326019Z","times_seen":50,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/advantages-4.webp","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/advantages-4.webp HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1632\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\netag: \"692ebd82-660\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 203x170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"db28b0e634fadd02d77ea5cc1de8993f","sha1":"78cb8621957a72f27e26ceb0d66cf72595f02ebd","sha256":"9f80b380fa7862ea3a0248f61a63e4a893eb6ffd9de45a3f7ee4972c62059644","sha512":"44220dee15757dd242b417a88398d8c4d82a0e242ee9b8aa653d4bf2e053ffacd0a7db714155f32e80001aac79d86818468dc3d8ddd68b5284512b1c9bc66ace","ssdeep":"","tlshash":"1731ea941ad424882d7bc991be73feaf750f9f5a5712c0d09a1191e4e0429cb348a24c","first_seen":"2024-08-21T10:14:37.562088Z","last_seen":"2026-07-17T13:05:44.299573Z","times_seen":50,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/MoonLoader-99e2ca3e.css","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/MoonLoader-99e2ca3e.css HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-154\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (339)","md5":"635c6389aa00ea65759f87677c93829b","sha1":"01853ec76a5143819eb0510430bae029f37530af","sha256":"99e2ca3eb2b22e604a0f2cfccfea44125a336633c7e93d3e59b3fb19b3da0fcd","sha512":"8bea1bebe93284e5d039c3ed937400c6e6877c70c58c9a46327c8f3903fcd4b31df066d13fc7cbac42e3270292dbc6109dee32e92f75759efaa41df206f7ce20","ssdeep":"","tlshash":"00e0680c31d3c8f38213c2c26380b31a94288ea27437cc2e48b522aa818009033a662d","first_seen":"2025-05-26T03:05:58.524059Z","last_seen":"2026-07-25T04:20:02.842311Z","times_seen":123,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/visa-footer-87d2644f.svg","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/visa-footer-87d2644f.svg HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-7ef45e43.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-4e1\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfca391c52448f140b03e811c9ad0ec7","sha1":"5ef5b37340e4660349207050925ef6ad56d4082c","sha256":"87d2644fd3b00be0c3922ae4c80f176ea11fb0f06b4ab655ac1ce14616d729c7","sha512":"0f779e5b15aece13e8685bb06356714d701ce7817f5835514fb5100f9b18ae5227a6c008e606110eec8513f8df57692cb5d41b26884f84c7e9defa82ef557b05","ssdeep":"","tlshash":"b42165ca3bb648c2c4ea96f2ae10587c057de0e13bd600488649eb043ddcc597e0cd50","first_seen":"2025-05-26T03:05:58.511622Z","last_seen":"2026-07-17T13:05:44.322335Z","times_seen":49,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/OpenSansBold-3a95a809.ttf","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/OpenSansBold-3a95a809.ttf HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-7ef45e43.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 43868\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\netag: \"692ebd90-ab5c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43868,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 14 names, Macintosh, type 1 string","md5":"c3b34d59ef4c949d25a4f32b5096471a","sha1":"83091aa303e8077e88eac93786199d9f945d622b","sha256":"3a95a80953a81fb10c812abf05b1c83f18069e6cde584fceb5a0f725bc642e08","sha512":"2dc18c6a2fa1bbbfd17d459dbbc7daacbfbade845be60c163afcb0473288daed5a85bfeaedc7f3ca4fae7704edfb297638bbc83ab75b259187c4c215caaecc57","ssdeep":"768:09v56EsIz0f9a2wwNgCLWQH18rMBYZKYn7iQJttIqaw0qVHZFsoHUq7bHcczhDlo:0p69pRaC1HaTZKY7iQ+0ZFsujhDy","tlshash":"d6133a54db92bb35e50530f6c521bad00227f084ab5bc34f3fdd09e6aa110accd65e67","first_seen":"2023-04-05T22:00:44Z","last_seen":"2026-07-25T04:20:02.826742Z","times_seen":118,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/index-a7f55180.js","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/index-a7f55180.js HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-cd420ec4.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-854\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2132,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2131)","md5":"8e70358471bb112f3623a07f9f03abbd","sha1":"51d06c768138466f490e62f2b2763557964ad60b","sha256":"c757ddf1e6b1a249ee42323b91cd56fa6c3804e087afc40e0a56745fa2d03a1b","sha512":"955c4f7fc7b8504b952c4ffed7dd6640bb529d14e53954db1a865abcd7ced09ffeb348319c6e778de8133c23b8964d7d5fc6b57d46020046e5cee75781bdaca6","ssdeep":"","tlshash":"ff4136da31c2713027f3112de13b1a0ab37b4255689e95d0c71e8afc1eab4ad8246e5c","first_seen":"2024-02-22T22:55:10Z","last_seen":"2026-07-25T04:20:02.843806Z","times_seen":124,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/167/244075.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/167/244075.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 35535\r\nlast-modified: Mon, 08 Sep 2025 08:01:27 GMT\r\netag: \"68be8d57-8acf\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 198, 8-bit/color RGBA, non-interlaced","md5":"9f101df58b72f15fd42932593aaaaf5c","sha1":"3f03223a4eb85aec8b3a0c8f89f20f23427c7abe","sha256":"06614f5774820f8d2b9f5bea493e5e461a9df90acdf1f5bee70a8f35b61e48c3","sha512":"9cce46a5758f7d9ecb815531260c1154435ccbf780366580ea817459f1b13e8c908ec0fbb185104af99c00c253d3b17baabde35b618311f8b146236f587293da","ssdeep":"768:G84iNu1OowMme+Rn7eo6fdqU6Uto9fybiPmuSesZQEJk:RnNuMo33eK0UMu9eSQek","tlshash":"c5f201c1e928c9dbd458f8d09cf8628f35c0a1b5a66c85524a25792fb3c72fc760f686","first_seen":"2023-05-24T04:52:16Z","last_seen":"2026-07-26T10:02:22.734288Z","times_seen":86,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/advantages-2.webp","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/advantages-2.webp HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3862\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\netag: \"692ebd82-f16\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4650561301a19ab6a0d4a15634f9c6b8","sha1":"891c82f83f0a7a0c7d8fbd81320c46af02e282a8","sha256":"a606ae98f30ee6139eca3aa9bd6ada4b612089f782af8c5e3e7f1ced9cfb57be","sha512":"f1e0661827bd5de678d773fba13986050fc22060cd4d163bdc5015849afc3d10c7f8eba8a7f12926cf54011e0f699f4ecc86b9291b48339172521371eeb20be4","ssdeep":"","tlshash":"27819e2a6250537e4dfc40d3abed2bb35241afc6cc835d639c50381ed97e88b21cac59","first_seen":"2024-08-21T10:14:37.505945Z","last_seen":"2026-07-17T13:05:44.304424Z","times_seen":50,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/images/third/advantages-3.webp","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /images/third/advantages-3.webp HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1508\r\nlast-modified: Tue, 02 Dec 2025 10:20:50 GMT\r\netag: \"692ebd82-5e4\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c85f8833bb2ffd989b8c69242066faf","sha1":"754dc3c4468756a2b9e2d52f2f9364f36c496678","sha256":"4a50bd3a21572d7f76ac4b1d925d6baf8b43561438dfcc1c21d50189384b52c7","sha512":"aeed7954ed779038d11b1b89be3da0fac4386ca3342f523d135f4c69697e7b89fd13e859f133adf52082708df46b5a8edf0f58885488fa4a154b0ccbe616d952","ssdeep":"","tlshash":"ce31ba239f2e504cd56032635a8625a3db45d3e166415b6122ca64db51db825137a31b","first_seen":"2024-08-21T10:14:37.507127Z","last_seen":"2026-07-17T13:05:44.337264Z","times_seen":50,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/build/assets/MoonLoader-ddf81262.js","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:15.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /build/assets/MoonLoader-ddf81262.js HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/build/assets/app-cd420ec4.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 02 Dec 2025 10:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692ebd90-26aa\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9898,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9661)","md5":"fa7dd204b5fc74b836227fb0351aae91","sha1":"876a7ec6368e0f319c7119f54530865eea9fdf78","sha256":"a23dabbce8087006971106128620c89833691c59402d447af6abc1e86f6d9333","sha512":"1747029bc4f0629a658d923b6acaecdfe1687a5be1f42ed3242dc2ad3978599e6242190dc9eb6734af1b8eddbdca3206568577e7c8f18c24ebc4e76b5262d375","ssdeep":"192:HSBMtijpFUA2GLY483i6STxnVf2fWURcAmAhWWR:Q2GPgAXgRKWR","tlshash":"f812969af88c763d1a63ce3550ab73502224351fa824514de276a8fc0f5f81922bfe38","first_seen":"2024-02-22T22:55:10Z","last_seen":"2026-07-25T04:20:02.84747Z","times_seen":124,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/184/239633.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/184/239633.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 147433\r\nlast-modified: Thu, 13 Nov 2025 05:15:48 GMT\r\netag: \"69156984-23fe9\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"b8890023578fc99b090ce64cc350e84e","sha1":"21716dea0baefae518ace2298864434e94b9d7b8","sha256":"4dc1e5383398ec9e89d81c99d45470bf42ee2103cfe56d7e6fb8b7768f07759a","sha512":"61c22eec529fdac32ebeee0cd6eddeecd476c8084d1456ad39fe2abd87516016e24431e95326a6fc2395cc5ab1d6279b89a530e43584293fbe485bc76187f3aa","ssdeep":"3072:TnyS5fV4LQ7I3FfgZrWHsoyj8OVb68NpSju41Mn4:THp7eKVugxYvJ","tlshash":"97e312c07261f17db4c912a0fbeccc2af2ad905f524e196d2815de0b4a1e9ae5cde4c2","first_seen":"2025-11-16T04:03:16.080494Z","last_seen":"2026-07-25T04:20:02.820679Z","times_seen":98,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/160/1d1329.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/160/1d1329.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 517523\r\nlast-modified: Mon, 08 Sep 2025 08:01:25 GMT\r\netag: \"68be8d55-7e593\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":517523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1079 x 809, 8-bit/color RGBA, non-interlaced","md5":"9e807c4a5d49350f3d356f6337cdab4c","sha1":"ce3ee2771f2aec9b3411e7b7879e52e5df1cb8cb","sha256":"02efdf3540df7d179744665c15f01cde1721731b7055e3d52d4810ce07c1e679","sha512":"87855bb8b93f77b37ed6b9451814aba2b510c3f5828c344e7beb2531e97bf5a39c501b5a5610f621f2b4023ae0497967b2dd579f9f0f57e2c232194c857b619d","ssdeep":"12288:sE/yxImvftjKTWc0J8a62o6gHjuIwunn91iu0BjR8eHxmI:s8yZntNc0KMlgHS7uaVhaamI","tlshash":"27b4234f527fd87ec89162736702862181bfa22f13be7d1a517cf6d136a2b1c9b02527","first_seen":"2025-05-26T03:05:58.510611Z","last_seen":"2026-07-21T22:24:59.860653Z","times_seen":77,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"all-med-rx.com/resources/products/190/2ab453.png","fqdn":"all-med-rx.com","domain":"all-med-rx.com","tld":"com"},"ip":{"addr":"51.38.142.171","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://all-med-rx.com/","date":"2026-02-13T19:35:16.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"all-med-rx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 15:05:32 GMT","end":"Mon, 13 Apr 2026 15:05:31 GMT"},"fingerprint":{"sha1":"27:CC:D9:8B:BB:B2:2F:A4:2D:90:1D:42:26:16:D2:D8:94:F1:F2:D7","sha256":"55:6A:D8:19:C3:D0:34:F0:4D:DF:EB:1E:CF:22:BC:9E:B3:99:3E:11:F0:64:31:30:A6:F6:33:23:8B:AA:03:50"}}},"request":{"raw":"GET /resources/products/190/2ab453.png HTTP/1.1\r\nHost: all-med-rx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://all-med-rx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkMwY2hGUHFZSkR2dXRONDRBcEdvQ3c9PSIsInZhbHVlIjoiWW53L3prdWFpZ0hnQThnc2lleEc0RWROakE5d1FrM1hlZTY3R3lsTVlxR3lmTWxQem5vckhEMWUxRE41RzYyN0s0cmVHK1pFOFl4WVBuR1lFRGlOaVBHQXRKMUZFbjdlSzNaUFNBU3cvTE81UW5kQXpIbnZyQTQwV25kZlZSdDIiLCJtYWMiOiI1ZWJhNTA5YWVhZDVhY2NiNmYxZmFlYzk5Mjc0MDUwYTBiOGQwYmU0NTFkYTMwNTc5MDk0YTI2MGY2MzlmYjVlIiwidGFnIjoiIn0%3D; alliance_shops_session=eyJpdiI6IlhzTi8wdmZDN1QvRk5ZczBZZXVhRXc9PSIsInZhbHVlIjoiR29UUVV0bG56Z0wvT3V0akloKzljbzZ3aDJVV0pSblBhQlVvdXkwM0tkN1JuZlFwTTRsZU42ekcvY2pDMjROc2h3WERoRGpRZjdGOVdlZXluZ256WlhMVzh4TU9LTFZkRG83eTBSdjlKRHp4UVZvQnd5YWZRZEMzUXJWNUhSNnoiLCJtYWMiOiIzOGEwODQ0Y2NmODZiNzc3MmJiOGM1MDA5NjIxOGJkNDAzMGFiMjY4ZWZkZWYyMDA5MjQ5ZDNkMzI5YzI0YmQ2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 19:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 23594\r\nlast-modified: Mon, 08 Sep 2025 08:01:33 GMT\r\netag: \"68be8d5d-5c2a\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD, PUT, PATCH\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 198, 8-bit/color RGBA, non-interlaced","md5":"c37a1ba65b9dadddf752dad5d11cf5ec","sha1":"6bc644d2e099bc37be041d7466c2ce77a141b894","sha256":"673502c5e64d53ddae31656a47d0986f2eeed2ef7a6b743f11cc8f0b279f1ce7","sha512":"6756c6ed6c98c6295176f20f5e9dca1b385aadbeae68bb389805116c8dd8ec83379696d855350943caa0540e4abd6724b1f427b9f3e168cf3582526f6817b39e","ssdeep":"384:uHAnz3Z/nzFldTrVsKpaACIRKVh5L+qrdlAmcHHLgYLDh57u/e:xz3ZZfxRKVht/3AZHlXh5C/e","tlshash":"8ab2d0d5ded2f4d1b045ce7544a1d0bfa46fdbd1ca84e025b731f8168ca819209bb1eb","first_seen":"2023-05-07T17:53:53Z","last_seen":"2026-06-22T13:55:33.704817Z","times_seen":100,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"all-med-rx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}