{"report_id":"ae460cf6-1837-4214-9939-8cb1208e827e","version":0,"status":"done","tags":[],"date":"2026-05-25T23:50:07Z","url":{"schema":"http","addr":"aaaa5115.com/","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":0,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"aaaa5115.com/#/","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"title":"5115.com","dom":{"size":52700,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14594)","md5":"fa46e72316f77165c3825dfe645abc55","sha1":"4651c6be6d6c5e193a8f1b9663aba4acd523bf23","sha256":"4dde6a540723a4422d963bfa2c5fc5c3c57a4a7e66e339f1ed2bd883082ffea3","sha512":"cd301c20cd26d37871c134da554826e97b8613bba9bc407dbda18ce3f597c63a01606dfe13162406a6e7f13e36efbffb7d48f27b4fb95985342cfacc443a4805","ssdeep":"384:l70twT8bCN6+mfh2aBH4pOkDUgLfhmaZSaER6oIoko9Yo2woQotoqoyoKo5oEv/t:l702UCcYp7DUkNXfIZgB5RuX/ao9XW7o","tlshash":"7b33326029c899670633e5d094912f2d75a7a30fc10f8a02befd52c96fc6cb8753e59e","dom_hash":"domhash29adaf52088f207e898dca462db01d11","first_seen":"2026-05-25T23:50:21.401987Z","last_seen":"2026-05-25T23:50:21.401987Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aaaa5115.com/","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":0,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-29T23:50:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"img.badendental.com","ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"domain_registered":"2011-02-23","domain_rank":0,"first_seen":"2025-12-05T16:43:10.189373Z","last_seen":"2026-05-22T23:37:33.755726Z","alert_count":0,"request_count":130,"received_data":4986894,"sent_data":75442,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"aaaa5115.com","ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"domain_registered":"2024-09-29","domain_rank":0,"first_seen":"2026-05-25T23:50:17.531705Z","last_seen":"2026-05-25T23:50:17.531705Z","alert_count":245,"request_count":49,"received_data":796774,"sent_data":25807,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"sports-www.badendental.com","ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"domain_registered":"2011-02-23","domain_rank":0,"first_seen":"2025-12-06T04:07:18.69809Z","last_seen":"2026-05-15T18:13:32.072335Z","alert_count":0,"request_count":7,"received_data":3437292,"sent_data":3781,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sports-www.badendental.com/static/js/manifest.723f65732b2b4d19739d.1777434674994.js","fqdn":"sports-www.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa379ae0060d92c4fce445fa3a472d8c","sha1":"aa7f6260ae1e49d5e1f730c7bab2a4edd7c69548","sha256":"c88dcd9e41364a7ce6f6e8d1c1d9bb87d665496a1d7c5f96af461545d344a6b2","sha512":"cd777b46f5d0d6c47bc09c6588ac6fe859f7816b03ae869e735264169eccbe5c93f1ff42624dfcc73b13a98292f6e69b64f1b97f76934e3eb0baad8ac96db770","ssdeep":"768:3zN/rtvnRqadMSUtqOR+6XC0QFHNeL4CiNZPDIFwt:B/rqadM9si2FipmPMFwt","tlshash":"39d24c3e9f1ee8db2936c4505c5148ef255d38947d1240c1adeeaf2b1859f4cb273ba2","size":30128,"data":"","first_seen":"2026-05-04T00:52:31.768561Z","last_seen":"2026-05-25T23:50:21.450508Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sports-www.badendental.com/static/js/81.b58ee60d93d1da1ebb69.1777434674994.js","fqdn":"sports-www.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ae141fbae56f084a9672ccd1a75f200","sha1":"a8ad0d434e9e01edc47150aa52cf3027eeaeba09","sha256":"063cba0c03b75f51b78abb0c4ff092f682d24db859a6a1822062ef3609d25b73","sha512":"7583817e45905692be7d31732b8c8eb3558d77b22b8007c411ba5439198bd1f39faec1eceee5aa5c697ea74621d2494906748f6922394d38382741164e856a55","ssdeep":"12288:Sh3qBO7apBLFcqiBjF5eDLktJ9lZ6JVF+oiEBt7aLCanco4mN1vLSb95A:Sh3qBO7apBLFpkX9lZ6JvSEBz5A","tlshash":"0f35d71a7083f67a4d9e9011152a1528b0752fd85409c0abbb7cdee49be4d7a326ff3c","size":1130776,"data":"","first_seen":"2026-05-04T00:52:31.81754Z","last_seen":"2026-05-25T23:50:21.543855Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/js/216.84f9759846cd9c080722.1777434674994.js","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"81532799d28ff8de7adfb8a917eefcde","sha1":"632654a34d005b5f0e7cffd32fe78d3a68cde3f5","sha256":"966afb58bb3d0678f71a10999a792ac9479f4f8cb0d4edc964abffc8ad16c931","sha512":"3675204307dc7fb34a7cd769c37ad9ded7f945126e016fb5850aa6a67e4c96f7e90ddab8ae2781f40ddde036bce75df6aa7946465b3be5ef34bc3a1fb4aca615","ssdeep":"192:+O3hvfr+GEHj1/7K/hmpbPGuxkFqAZWSNPX4nDIJyO:HSGondxGZA0cId","tlshash":"4722a616f68ba977056d5160a22f053dd5356bc8a208d467f7bc8cc8a4e5e3e232f93c","size":10648,"data":"","first_seen":"2026-04-11T19:20:47.158138Z","last_seen":"2026-05-25T23:50:21.545324Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/js/367.0ee9c881e78af3160487.1777434674994.js","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2cecf683b01d24e7ef79c9963d1a2bd","sha1":"227f874004a0668968298e4987f75a38c3db0aa1","sha256":"9d86570e7ef2ea00c8c585760738b1ebe387bbbd123e9e27557170d70a80602b","sha512":"4530a84ae16377ec930d2e937f05dd33755c462675008fc2b9af44ef9976eefda6b491a98eb2ba6441ade76161bb3394edf20c5601a0bad533d07634cc44f775","ssdeep":"","tlshash":"9421356ce78473d46b794864801edcc368bb80440fafb89044b1d39c9aacbdb631dc5e","size":1428,"data":"","first_seen":"2026-04-11T19:20:47.138593Z","last_seen":"2026-06-08T23:49:32.976473Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/js/51.4d53c806422927ec8d58.1777434674994.js","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ccf3db864d4a161cae22b8ed3b0f88b","sha1":"6a12956a235e220aaa47014a9a9f24bcfd5397d0","sha256":"8d1b03048ca1f2c8c3ac1c7508f9a386648d5d34d789fe1d4e0dc371c8402835","sha512":"d0f53e480bacf5264fc567f3617449e58063739ad835effb128c0e50099dc82983f8a61f4f9c0cfdc058700a52646cb51dcfcbfbbfa9c6e5c27358945ba3704e","ssdeep":"192:CBVcx1QjpzwlqYxKfD3I3zF+JtDU9H9ZgJSjuPzTN18Geagn:CBix14pzwl8mzFytDUkGuPzTNFeHn","tlshash":"a382640af083fcb279769570512f2629d9660f86a04490b4f33cee95e5e2e2d571f92c","size":17585,"data":"","first_seen":"2026-04-11T19:20:47.102983Z","last_seen":"2026-05-25T23:50:21.413463Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b976dc3d2deb5b25cb2bb30c5c6289f","sha1":"07a99a4282eec5bbf5f872435d2081d3a2bd985e","sha256":"4c2b3148867ab1872b24530751b4afe0c03d8ad4682b5b3d08c0e8919722dc63","sha512":"af866df2ec6f47d41218e70f694ec2ba2fd35551889e9fea70efd2e9b9640e19acb01cc36c9f4393679c64d4d4e6322744d7321b4e6a4257098cbbd37c7d60b9","ssdeep":"","tlshash":"45f08cce45d4860126e361128a9b3a04703300fb4818e8113d0c5a45bba8f6f866ffee","size":641,"data":"","first_seen":"2025-03-03T02:26:25.660253Z","last_seen":"2026-08-02T23:52:30.760321Z","times_seen":456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sports-www.badendental.com/static/js/0.06180ec16b1699383a70.1777434674994.js","fqdn":"sports-www.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb29b73ff587b6af9c9a69ef8aec54d5","sha1":"344cbba445724b29b0f04bb6066152f6ff09bcec","sha256":"fd823cb70001fffe5d9c47b1b49c5c2c3bdf5c5a7676a9c8297ff182bb4aed4a","sha512":"5682a4ded173ed31d96e7d5fba45cddf6878f6e820e662c6ce0d95601b4a1fdb8714ab02e046276dcf4598cc575671b4de6278cad937d77521e217e402e4e0de","ssdeep":"12288:MkFfGnOrvnmo+kIs/7dympvumw02QC2ky3kYlpbUB:3fGnOrvnmo+psRympvuo5C2kyUYrUB","tlshash":"e155f78db2c5b0b107eb60b4402f160bb237695d740a94d8f6b5e8e5ac7894e613bf7c","size":1291677,"data":"","first_seen":"2026-05-04T00:52:31.816704Z","last_seen":"2026-05-25T23:50:21.551112Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/js/1.b3737435d6a1baa443c8.1777434674994.js","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a8b0ed8ee1aa2f4949b2b5d2facbf0","sha1":"9f8b242acd3de277cfc91bcc98d4066c597503bf","sha256":"4f0be4209abbd1eff13ba5efca710d14d447c01cd3ac4eff2c5e090ed3eb0b8f","sha512":"d1615b67d3ae1f62cd1802ce6155d1bc5aa02065f5b95eb5419b7c37a399d1382f1c0cb2080324a6844239d267fb80bd0952558f6714d34d8ae34f2f0e02e7e5","ssdeep":"384:UWT9kV6pUzAxtJN4RnvG3+klkFf7qOXpXCbtbQvhvZXabgvkCN:TT9kV6pUzAxtmnO3+klkFf7NXpXCbtbW","tlshash":"7c92c754a582f9b51da95220941b3039e27a1fe4700e816bff3cddd56ae1c7a321fa3c","size":21238,"data":"","first_seen":"2026-04-11T19:20:47.170985Z","last_seen":"2026-06-08T23:49:33.010643Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/js/11.6407baba58fc6af0142b.1777434674994.js","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"c687ba5b8a79fe780a53ec5d822087aa","sha1":"187fccbb20107f38be1fa5cea38e8ea6945877c4","sha256":"a416e80be4aa7a0f3a711e10c5877064add5813f38b11002ac37e65513976359","sha512":"df8b84b272823317cf47743354f8c9ebfe7070838d9352f23abe308cfdcdb9574ba11d6eb6bbdb7477dcb5162915636e1951c743808ab831eca13bae5f8d4446","ssdeep":"192:bSto6wm/LT6wm/Q6wm/jc67XZXfHGDqhbSE7pK:2to8TnH6bc8c","tlshash":"d412d8569082f6badc569012662b0538f0b51fe8a01954a3fb7ccee4a7e483c671f27d","size":9272,"data":"","first_seen":"2026-04-11T19:20:47.174728Z","last_seen":"2026-06-08T23:49:32.973848Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"img.badendental.com/uploads/activity/sign_quest/default_entry_pic--360x360--.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.594Z","timestamp":1779752984594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/activity/sign_quest/default_entry_pic--360x360--.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10886\r\nlast-modified: Sat, 30 Aug 2025 13:55:09 GMT\r\netag: \"903d7bc5cad2b81f18cae43577583fd3\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 c7236ff17633cabac94cf63861c8285e.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:17 (W), 1.1 PS-NTG-01FLw54:5 (W), 1.1 PS-XUZ-01HTm40:9 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: 0yGodEjvOVLYU_NJoTmvz9-rS_daGIXlq9fZVau5GnSYDBFMmvjGww==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45232\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10886,"size_decoded":11571,"mime_type":"image/webp","magic":"ASCII text, with very long lines (14516), with no line terminators","md5":"0aff36f30e3c3603d306afea49a3e4e1","sha1":"f781157eb086beca2e52ddc4d3f6fec44a93489e","sha256":"fd7243aa8089b0ab40fd481f71301658e184e628464bcbe7d1c4c5fb47f029af","sha512":"bf03e51f1e551c149a68412d685ca987f16efe02621e98c6b2b8e6f85b241b33df99b30db94e38cb393724d91ab879b9523480421e6bc5f2d7da5c5b2578863c","ssdeep":"384:IRlV07mYsk60C/IQAGROMvz3yEY04srjTDUCMRMM6dO:Yv0aYRJUziEY5snTQRMjO","tlshash":"e052d03d17af4f4270a82c34300943a1ddafa7528a4a49d32dfc7b9e5d9a4d2d913f89","first_seen":"2026-05-25T23:49:00.31233Z","last_seen":"2026-05-25T23:50:21.40612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/nav/index/nav-list","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.744Z","timestamp":1779752984744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"POST /_data/nav/index/nav-list HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nContent-Type: application/json;charset=utf-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 340\r\nOrigin: https://aaaa5115.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: 582b456eb411d787e3952d1f27a90412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":22409,"size_decoded":17295,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ca5b91efa75bcd1741fe941b38ef2566","sha1":"685edf32775d390ae4d3321187ab8cce0128becc","sha256":"4e5e814f477306ae2463104ae1836c12e137b32d44fe7df5be45382b66480734","sha512":"7fc9a9101df40a75ce38bef7053817110e79a7fccbd75b6f957eab8a39f24d22e20bf2f13535e2e40dc05ad13bc54c872211fbb2773036d6fd8f502ad0f9495b","ssdeep":"384:JmW0Rgq2qPX/t6DlES5z8W+1iypM6/1/GBRmKwo9cw68Y2lYeaelfgwnfHE:Jmja9Avt6iSmW0J/1/yRcp8Y7lelfgws","tlshash":"6aa2d113ad0ce674553ea08e789ba6bebbdf89f27d142c33d9d6505a0a274c7c903127","first_seen":"2026-05-25T23:50:21.408777Z","last_seen":"2026-05-25T23:50:21.408777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220103/a8fefc2e84fd32aa.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.770Z","timestamp":1779752984770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220103/a8fefc2e84fd32aa.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220103/a8fefc2e84fd32aa.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45244\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/js/51.4d53c806422927ec8d58.1777434674994.js","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.339Z","timestamp":1779752985339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/js/51.4d53c806422927ec8d58.1777434674994.js HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 73355\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: W/\"5ccf3db864d4a161cae22b8ed3b0f88b\"\r\nlast-modified: Wed, 29 Apr 2026 04:13:53 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 dc1548cf52adc92ab6fc1a9c02f4182c.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 79b9c5bd55be494a6932f12cd838ba08\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17585,"size_decoded":4888,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17289), with no line terminators","md5":"5ccf3db864d4a161cae22b8ed3b0f88b","sha1":"6a12956a235e220aaa47014a9a9f24bcfd5397d0","sha256":"8d1b03048ca1f2c8c3ac1c7508f9a386648d5d34d789fe1d4e0dc371c8402835","sha512":"d0f53e480bacf5264fc567f3617449e58063739ad835effb128c0e50099dc82983f8a61f4f9c0cfdc058700a52646cb51dcfcbfbbfa9c6e5c27358945ba3704e","ssdeep":"192:CBVcx1QjpzwlqYxKfD3I3zF+JtDU9H9ZgJSjuPzTN18Geagn:CBix14pzwl8mzFytDUkGuPzTNFeHn","tlshash":"a382640af083fcb279769570512f2629d9660f86a04490b4f33cee95e5e2e2d571f92c","first_seen":"2026-04-11T19:20:47.102983Z","last_seen":"2026-05-25T23:50:21.413463Z","times_seen":17,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230511/0ca13307245728cc.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.362Z","timestamp":1779752985362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230511/0ca13307245728cc.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20230511/0ca13307245728cc.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45332\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240509/a449af3bc0b998d3-1.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.396Z","timestamp":1779752985396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240509/a449af3bc0b998d3-1.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12180\r\nlast-modified: Thu, 09 May 2024 12:04:24 GMT\r\netag: \"d4cb6904ee946a065207f61048ad0b15\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 d378e69f0d86636650cb287a06732cf6.cloudfront.net (CloudFront), 1.1 PS-JJN-015mq212:12 (W), 1.1 PS-CZX-01vAA43:17 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: FzQsUG8rmp-Uy4Cf38gVwunkXKCzOzIGJEIbk600504UqpDpzmZVIw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45347\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12180,"size_decoded":12842,"mime_type":"image/webp","magic":"ASCII text, with very long lines (16240), with no line terminators","md5":"f8178bfb72f5f78cd9ece7294b9951d5","sha1":"fd37d9656534332d643c34756d0304ffe09adf05","sha256":"9e96b4735dddcb936275c815e6a4afed2daa6cf58cc94ebbbcc6937a55480d29","sha512":"54e16ae2919f059d41df540fd804770cc587d7a2a04d84b6b7085bc330ddf4183a41a34b08e868d21f030b7d9e66b4f57bd65c7f50676615a396b60717893bd1","ssdeep":"384:d3kD8lJ6Os4aYv7A8KMW1xJ96MAW/bp0YD8hKSFWIgdG1/RT0:d3k4lJ6PyvpKMYGKpTD84sgs1W","tlshash":"6572c0fac9523c5e03fae7e110b34110cef80c9b652e99a84f1b6aced68e5e04115b97","first_seen":"2026-05-25T23:49:00.350627Z","last_seen":"2026-05-25T23:50:21.41467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/activity/trending/list-v2","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.193Z","timestamp":1779752984193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/activity/trending/list-v2 HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: b30abf00b56e1171cd1b7aa57349e0ab\r\ncontent-length: 670\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2351,"size_decoded":976,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2499), with no line terminators","md5":"e7539f0c661cb0aa9e27bbf04c1a030e","sha1":"ba608f5ad2df448effbd3618ba2360ba749cde55","sha256":"3ea17fff913d7b8ab7fe26b8546be4139960e3e8c63bd9f171b837907e1366ab","sha512":"5454b5b6eb5f83434437a9d003f87e073bfe3924fb5d3227fc0e67d5f73894ceb43f81a572ef8571cecf37be9205b14ca1e4b46d8a341e1474201fec46605d90","ssdeep":"","tlshash":"7151b1df2884f4f19249487225f09e5bf18bdcdd04675bd0b9a0cd9581f7cf74522658","first_seen":"2026-05-25T23:49:00.339462Z","last_seen":"2026-05-25T23:50:21.416671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/activity/sign_quest/default_entry_pic--360x360--.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.562Z","timestamp":1779752984562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/activity/sign_quest/default_entry_pic--360x360--.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/activity/sign_quest/default_entry_pic--360x360--.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":8,"connect":8,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240531/c4afa9a036a0162d-1x753.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.327Z","timestamp":1779752985327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240531/c4afa9a036a0162d-1x753.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7195\r\nlast-modified: Fri, 31 May 2024 08:43:56 GMT\r\netag: \"affe99302e95628c6d5f1ce0cfd08b18\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 9e1541f10d83d5abc7af4a716d8fa156.cloudfront.net (CloudFront), 1.1 PSjsczsx2kw13:9 (W), 1.1 PS-NTG-01beM227:5 (W), 1.1 PS-000-01TT241:12 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: R8xH3qjlZ-dKiSRV4wYnqVG6GZaRPlJ7J8bd5GEM4k2UH0phSKQg3g==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45311\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7195,"size_decoded":7879,"mime_type":"image/gif","magic":"ASCII text, with very long lines (9598), with no line terminators","md5":"bdd50e473891f23e81aee3537a78e2cf","sha1":"c1a561edbc0a699e9de3293ae6b629981493daa7","sha256":"cc35d269c6fa5100aa5958ba978bd5e8fcdc75e5d4491e5848114a07e4dd2429","sha512":"5b49db646fd297d4a92ea7fc89f3170a8d4271895e259c28e7dfa0ca288ea5bd8c29d077403903bb45d7adb414fa9aa1aa02f6192916b9ebaf83a691b386c829","ssdeep":"192:KQB78kDWFxylOn0z5tXI5fkJw9g9phEUINz7boCiZv+NeNhI0RpL+m4Fv+9WM:KQB7NDU30z5tXAc+9g/mfN6+NeNhNRJZ","tlshash":"2112b08e573be133c05f052712b9bec96c1d651a5415c3dc8eb447dfabc524586434de","first_seen":"2026-05-25T23:49:00.293099Z","last_seen":"2026-05-25T23:50:21.41871Z","times_seen":2,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240527/f93d3e044f71f6eb-1x116.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.663Z","timestamp":1779752985663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240527/f93d3e044f71f6eb-1x116.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240527/f93d3e044f71f6eb-1x116.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45361\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/86606145693166fb.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.016Z","timestamp":1779752986016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/86606145693166fb.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1638\r\nlast-modified: Mon, 26 Sep 2022 16:58:46 GMT\r\netag: \"22e9eb9bbfc16c722e46db4584cd3fbf\"\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 e30c1b0e0c77b1b52d0c4aca8cc45fb8.cloudfront.net (CloudFront), 1.1 PS-NTG-01hgS97:15 (W), 1.1 PS-NTG-01hLn226:6 (W), 1.1 PS-CZX-01YZs45:5 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: jvdmo_lbBUw03q-lPS27rLhmgbtPuLSjL-IeWDn1JjuvWKcgCVaAsw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45420\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1638,"size_decoded":2286,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2186), with no line terminators","md5":"24e5b414b585fce3336087ead8db7057","sha1":"95469a33ca44c7e95c05aa638c3a30ee2a09b836","sha256":"f925dc82179cfa2291249e8dc854aba0c87b7a89f0a4bbeab3034ddb89b305ea","sha512":"e267732ecf1c5bd2ad877a779c25ec847d1bb43b829fa3df5cb870e25dc2d8f5b75d3e4fa670a16f8c87a1a1b5d0bd20fb11958bc2e5caf850a5704dbfcf0387","ssdeep":"","tlshash":"5041d7f69d67f898d409f59123e689c184ac7d7f8c75b1b310df9052855b9e888bc074","first_seen":"2026-05-25T23:49:00.305676Z","last_seen":"2026-05-25T23:50:21.420985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/e86a6ff091852897.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.016Z","timestamp":1779752986016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/e86a6ff091852897.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1936\r\nlast-modified: Mon, 26 Sep 2022 16:54:45 GMT\r\netag: \"7517674118eb2540c69907330a1f987f\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 2347835d64b95b688a16fb2618f2577a.cloudfront.net (CloudFront), 1.1 PS-NTG-01aVu55:16 (W), 1.1 PS-HIA-01tWB184:4 (W), 1.1 PS-NGB-01DVr174:13 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SFO53-P7\r\nx-amz-cf-id: ypH_9RhHWtlIvJY7977sly_tRD1m36xkL6CCQaYnsskBvz3Elu7iPw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45421\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1936,"size_decoded":2624,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2586), with no line terminators","md5":"e59456c95e5ad2dcb1c6328bbb2cc957","sha1":"0934412d6f687cca895503c8657f56ba731713d1","sha256":"32fd1e2cbd3a74a7afe4742545bb4ac7a9bdf0f8b0a9cd1482be70c1e2ab2d5c","sha512":"5dcbc166f1cfbf924162703f6f03f7a5b9802ff49690a396bb5d0725b3c1650141f020f70cecb3ff32c3e93f612573f0f5d71dc000adfdac58d8f1d67a6f541f","ssdeep":"","tlshash":"1f513c699c25ef531799ee422d058dc76fe71f06135f4fbd623238b259d2e844d2900e","first_seen":"2026-05-25T23:49:00.271051Z","last_seen":"2026-05-25T23:50:21.423317Z","times_seen":2,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250820/237acb03491f86c5--3840x1200--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.279Z","timestamp":1779752986279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250820/237acb03491f86c5--3840x1200--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 285282\r\nlast-modified: Wed, 20 Aug 2025 11:44:58 GMT\r\netag: \"37840d08588c8bcbe23050da655e2c05\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 3ddeb9e5fdbbb95fa44384c54197c100.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:13 (W), 1.1 PS-HIA-01tWB184:15 (W), 1.1 PS-FOC-01rf4118:19 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: eiQr5pokwSWqG8FQW2l9HhkIRBwH1uqJaqm85r4euV63iwaLOY37_Q==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45464\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":285282,"size_decoded":285973,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c07bcca6ea2b84dc97206a24b8ba4010","sha1":"e79460b8695e3fb69052c18518504e99465ee846","sha256":"59ddd7a8abd15e516134c532a9a863a82f5bf1ba1d7a060a697130e869a8a969","sha512":"eae2a3e1ceb8f0794ac084d100796174dcaaee59734ea51a8b7fea14e527f472c76c3a73375f527782a65fc2f255a47c6049f22d389b04d417041cc0f75e354b","ssdeep":"6144:NVArh7chGQGw+6IYp16yS1WxJYlM1L7mLBYrZwF7IGG03qPnfeCp+14L3XTHRZ/c:NeuhGj/Zu16ySExJiMZiBmwu30cWr1+g","tlshash":"fd842338fae8eab40f1cc758396b4e089cf12e63602c7b79836b19eb7c159911d17719","first_seen":"2026-05-25T23:49:00.277792Z","last_seen":"2026-05-25T23:50:21.425331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":411,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221111/b57f4f36fb2415ec.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:47.087Z","timestamp":1779752987087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221111/b57f4f36fb2415ec.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20221111/b57f4f36fb2415ec.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01b_PShlamstdAMS1vj92_47818-45518\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/adv/index/list?adv_tag=xianjin_tiyu_pc_index_piclink_centerloop","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.652Z","timestamp":1779752985652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/adv/index/list?adv_tag=xianjin_tiyu_pc_index_piclink_centerloop HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: ff614a1c322d6f7671e9068fdea516f9\r\ncontent-length: 1092\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3938,"size_decoded":1399,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (4204), with no line terminators","md5":"440f9d4a2f93255a7eb63fe0ce5613a2","sha1":"a0fe9753e4a2106b0e98f1d3aa854dd563369aaa","sha256":"76626020093b2c9aa7383c65c7d262918daad72874f3f482e1c0817b3cd1d357","sha512":"24d86822130059699b2e5db148b5431f5577cb9b35dcfe1eb938634045899f607c5e0503bde448b75c33c7789993b25eca46f7627fd869f5e67d56ca9f15b233","ssdeep":"96:f5/ghiOLixhs/QGhadA1DhqBXluBhgZPXRhH/HnxhO6pmhye05BhyOshhs9tbh/+:f5gt+xTGRDMuB6BZHxrmy5BJshObEWNs","tlshash":"7991368f4415dad08ee61a4e68b3afebf38640134acf5d86558cc358c1dd0bd675f289","first_seen":"2026-05-25T23:49:00.321678Z","last_seen":"2026-05-25T23:50:21.4275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230908/9dcb70ff64c747d8-1.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.795Z","timestamp":1779752984795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230908/9dcb70ff64c747d8-1.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20230908/9dcb70ff64c747d8-1.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45251\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230511/f751fc942e0886c3.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.330Z","timestamp":1779752985330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230511/f751fc942e0886c3.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 8254\r\nlast-modified: Thu, 11 May 2023 12:05:16 GMT\r\netag: \"c1b01eca37de950871652bd31745a8c3\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 c7236ff17633cabac94cf63861c8285e.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:4 (W), 1.1 PS-NTG-01aB9225:15 (W), 1.1 PS-CZX-01ZgV58:18 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: 5GkgfQ8ZSXGKzKocLZqsC3DCSKR3B4kPMS0C65EQtpVVpdyfTgaq3A==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45314\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8254,"size_decoded":8939,"mime_type":"image/gif","magic":"ASCII text, with very long lines (11008), with no line terminators","md5":"66854f51b33863be64b621c6320909b9","sha1":"0aee1012ec8d0f02dc3febb80a0b4d4ada919f32","sha256":"34a2d2c99c2e1cfa947e29612ba18856bee3e8e870ad95cfdc7023c9f8ff2098","sha512":"bdc850c491a1f145380fca18494e5a96ad436cf24e7a1a1546444336128116108bb42999afc87c5e1bfe4caa14c040f954862bd1dbdebf973beea35b9baedc56","ssdeep":"192:ZEH1PZunhBmGsko9Szzyy1rXewvnQ6xW9X3o3002bh5f7tcHUjIztEVySZ:ZEcBmGro9wyy1ies9no30xBtsUjstayS","tlshash":"5a32c02df66ba97d807c0d427bf9af3808a78d47c5b20f92151e33379516a3368a54a3","first_seen":"2026-05-25T23:49:00.353004Z","last_seen":"2026-05-25T23:50:21.429059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230511/23b60e1463a7f0ea.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.384Z","timestamp":1779752985384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230511/23b60e1463a7f0ea.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2208\r\nlast-modified: Thu, 11 May 2023 12:04:42 GMT\r\netag: \"dc33067abf7007bfcda670933cd89412\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 f485912663487526227b85e90a0da778.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:11 (W), 1.1 PS-HIA-01rHo246:4 (W), 1.1 ianxin96:17 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: 1EehxaCINzRDVjuJXUFxVfsidcCMvuzHvYaf7D3Yla4wluLxURJqow==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45336\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2208,"size_decoded":2889,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2946), with no line terminators","md5":"68a568ffda5f239ee62e6379c53cbe3f","sha1":"4fabd5ef25be4056a113116c3c3b1de4ea59964e","sha256":"cc088858bcf2e7e82efcd004dda8e809bc1e537433db7e0456e73914bed6ff28","sha512":"3d89c326bedd8230c4c9dd065253137d5f3996dca9280c3278f598e958555377c908237a340f914c01fced31d77bc94950e68235d5a875a62e5eb6d37164d265","ssdeep":"","tlshash":"33516ef66127c99d61e56e0e8a5200146fadf70c90d9c2da6bb013ce09cda956dc13c6","first_seen":"2026-05-25T23:49:00.344511Z","last_seen":"2026-05-25T23:50:21.430297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230826/9c06e8e80df05296-1.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.395Z","timestamp":1779752985395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230826/9c06e8e80df05296-1.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15064\r\nlast-modified: Sat, 26 Aug 2023 13:58:10 GMT\r\netag: \"b3403b51fa121f25e32e3633701cd475\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 a56ccbbcd3dd18067f76faefb437c740.cloudfront.net (CloudFront), 1.1 PS-NTG-01wPO228:19 (W), 1.1 PS-CZX-01OFj122:19 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: u_snzSXQdRXeIl2YxYg_CvMCwU8MwnJOKKWGO6djEbq0jYAz5QQGCQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45346\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15064,"size_decoded":15727,"mime_type":"image/webp","magic":"ASCII text, with very long lines (20088), with no line terminators","md5":"57fc8e53e6bc5f31a1e26d92dbdaa2e2","sha1":"9f7c16a32e86bb3064948d7458b0849528d23f2c","sha256":"0004568b76bbe05af5454f872674dcc677d0bbeaa07c8d647dc50fdb67753b77","sha512":"87f37aa059efef8ec9f076202cfb9e5bd47406c7f816a7a1312580dd08942dcaeadc7f0da58d5a1ca1c937fc35b71adb53a33cc5330583e3da46422772abebf9","ssdeep":"384:5UWupUKZ8otznki5req+VebrfZXiS9fOKBjqn+//9Y+l1jvLr:5eU25tznT5vZX9x4+W+l1LP","tlshash":"7b92e178412421b604f11398a21acfa8a50ed55ed39baaf451f4f1d8ccb39bf4b9173b","first_seen":"2026-05-25T23:49:00.300363Z","last_seen":"2026-05-25T23:50:21.432158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240605/6ea75853adb8e1f4-0x792.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.750Z","timestamp":1779752985750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240605/6ea75853adb8e1f4-0x792.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39114\r\nlast-modified: Wed, 05 Jun 2024 07:31:53 GMT\r\netag: \"71152e6436aad61a7122708c4473ff93\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 1f75f186545cb8823cd1adfa34e499e6.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:7 (W), 1.1 PS-NTG-01beM227:10 (W), 1.1 PS-000-01geo49:9 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: Z1gdSprMVLimw_-ZG29yH_1ttomy1y1qZcpQG0pLuQbboo4zbL5Izw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45381\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39114,"size_decoded":39800,"mime_type":"image/webp","magic":"ASCII text, with very long lines (52152), with no line terminators","md5":"154465af5c9e60354d7dbb09e17c0e5a","sha1":"064eb92fdb8e7fdc9efaf2eeec227002a1ef8f17","sha256":"06d863764517dcdb95e4f39e95a07d95d31ec56b9d5bdfdcea7ddbf64747eff1","sha512":"df136185d4f6f0253ae1c55bb046ded94efe231127f95afcc764f0412c639363de97027969cbfe4d0324a78fd0c7ccc59ce7894fa6e3130843598a3d0158e4cc","ssdeep":"768:h5O5K5ojHVuW0eSu2807balpnC/PXm6PzEn41z+1T7dhtLj:h5lmj1uWe5//az+PXmZn41zmdj","tlshash":"6b3302b3b1159d2e0466be182eb8cfc2bd202563b09c7ab78969320357dd72dc69305d","first_seen":"2026-05-25T23:49:00.326339Z","last_seen":"2026-05-25T23:50:21.435079Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1335,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1333,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sports-www.badendental.com/static/img/close_banner.36290e6.png","fqdn":"sports-www.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.557Z","timestamp":1779752984557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /static/img/close_banner.36290e6.png HTTP/1.1\r\nHost: sports-www.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sports-www.badendental.com/static/css/81.7031d1c5b520d1339912.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1135\r\nlast-modified: Thu, 28 Aug 2025 07:28:55 GMT\r\netag: \"36290e6b68822c9d5d0710c3a625aeeb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: iun5zmdouLJvc9dMh4_M6LsKj2kkYSfX\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 21c117ed38b7d44044fd703d4ba06d0a.cloudfront.net (CloudFront), 1.1 PSjsczBGPhq161:6 (W), 1.1 PS-HIA-01oG8155:6 (W), 1.1 PS-000-01oRY50:10 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P4\r\nx-amz-cf-id: KNeSUk2V6L8bu06VLjggSbbU4flaIpyQ_YG74TSS74KZRQsc4X5pxA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45223\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1135,"size_decoded":1872,"mime_type":"image/png","magic":"ASCII text, with very long lines (1518), with no line terminators","md5":"3a100809c15373ecd4f1176ed509f675","sha1":"da66928aba51572f14c15b8fdbc12b474ea93c1e","sha256":"12901d6630447338edc7c02359ce07f2db984ea3ab0472129d7804708c45e841","sha512":"81005ea5d1f22d278ce0579aaaa5e6e485ae50ab5944b8a4fd49d5f24ed6685a292b549696cb625f1bb636ce985fee94528524a82bfa8dd64a032f7fc7fb816f","ssdeep":"","tlshash":"c2311c61c46aff093ec9b59a83e528987d2a603c2847a10ea8443c597c8c4cfc55b755","first_seen":"2026-05-25T23:49:00.275294Z","last_seen":"2026-05-25T23:50:21.436267Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/kefu/kefu/list","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.745Z","timestamp":1779752984745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/kefu/kefu/list HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: be23d4a8e6d76b414d4496effd49d8f3\r\ncontent-length: 514\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1444,"size_decoded":820,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1444), with no line terminators","md5":"1643b66aa16cc9ae83ab6756e88bf4d8","sha1":"b404c7fced7871838f9cec34f327002ea3b18ce2","sha256":"42e5f3bf619f4277a07f64098ed0d5d9b210715c62ecd393210608a0d15abe6e","sha512":"aecf5f117288fb12a06a4a2f6ec515a2a0a6a786640bf8678b66171d9af55227470d502ab843fd9673992f1d409176f3276155fc209b2c92cedc5af9a1f6dcfc","ssdeep":"","tlshash":"e3319aebac68d07c8b43199530faac0ee5cb401b845bce51a6d4d8f0c4e49fa5111ddd","first_seen":"2026-05-25T23:49:00.324634Z","last_seen":"2026-05-25T23:50:21.437278Z","times_seen":2,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":577,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer1.72d1991.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.774Z","timestamp":1779752984774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer1.72d1991.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 69668\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"72d1991ffa321de624ed25471ae13f6e\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 b6dbda254a39d6fcade7be323534f7ea.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: e00bf6d4abd19303093fd31cc9105957\r\ncontent-length: 1220\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1220,"size_decoded":1696,"mime_type":"image/png","magic":"ASCII text, with very long lines (1630), with no line terminators","md5":"e418c93d42db8b47ae77fdc56c8694bb","sha1":"9d1b7708f14ca2bf30029b56645e747834a8ebf6","sha256":"4fb431a3bf2f3210f04220b14fa988b45707efe34b25e1bda519d27f11bcdcb3","sha512":"5dc0d5e2f18056768f5b54a73f7f1ff31493b7bf1da363b0c04f4df2bbae3089f9091a7cfde1d5b4a4bd84bebe75b7417df64e6475f39b1b59a1bc93181e9f1c","ssdeep":"","tlshash":"9931f8f0ae504c29d74b58edd21ca4221fcb551392392a7547c8757d80adaed98df710","first_seen":"2026-05-25T23:49:00.286284Z","last_seen":"2026-05-25T23:50:21.438192Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/spareUrl.0d79a35.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.666Z","timestamp":1779752985666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/spareUrl.0d79a35.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/static/css/51.272be97c7be80c913f41.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 82567\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"0d79a357d8671af818498b61572dcbbd\"\r\nlast-modified: Thu, 28 Aug 2025 07:29:06 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 b6dbda254a39d6fcade7be323534f7ea.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 382c103133f77d9b9aae806bb68078e5\r\ncontent-length: 27235\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27235,"size_decoded":27712,"mime_type":"image/png","magic":"ASCII text, with very long lines (36316), with no line terminators","md5":"46f14fd1e6b9891e5aa89a635b51974b","sha1":"154ae311dd8293587b3011dec673c2249f53edc0","sha256":"1942df298c66c4c41978659db01436ea976a31f9f61935a0f7a1512573e42f9b","sha512":"c5dc1cc4ac212db4881e00d2a47e95abbdedf8700b0a4dd5452a67ef3b1d5cde3d7a6512fdedc55e08d1c983eb8fa365d465595a347696748d58a6cb46ff7343","ssdeep":"768:lfoJczgY1IOEhZkp19xTf5DiY17djrv7/LJV3BtqXhPNOJeMH6Anq:lgSj1IOP19j3v7/TShlOsMHRq","tlshash":"dcf2f100d30747d6ccf0d8ba7a38d253af12a51599d961adb3f0f8f89513f9294ca469","first_seen":"2026-05-25T23:49:00.357944Z","last_seen":"2026-05-25T23:50:21.439138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/service-text-bg.b0cb553.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.667Z","timestamp":1779752985667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/service-text-bg.b0cb553.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/static/css/51.272be97c7be80c913f41.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 26881\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"b0cb55388364c485d039fb2fb217836f\"\r\nlast-modified: Thu, 28 Aug 2025 07:29:05 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 c7788ba2fe3162e6a0cdda9fdbdfd47a.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: f941f838f642820d7a55806f49c2328e\r\ncontent-length: 97128\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97128,"size_decoded":97605,"mime_type":"image/png","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a360e6f540ba60e704ea92eed7b14c35","sha1":"19ae25b64ea15f6d025cc38646363aee0eceec46","sha256":"e649edd638cf9f3120a8618ad4c883071e6f3f99e79ea7e5ee8b13ba902171bd","sha512":"28e8a187435512818afe2fe4af2533b44eff3cb7639f0dc9baab685927652ed2518d8bd126ec0c23996d724ccb248f348d3f12ca2ef07b35323dcb10e1950af5","ssdeep":"3072:fwW2P8Kkq01bJsO8jdI4Za7MRv2GfrKcoNR:f1KTl01bKOAI4Q7MROGfr2NR","tlshash":"36c3127179190d26fb92e73db89abac4b1255c7a0849c88419fb3eb9d70bfc00453a7d","first_seen":"2026-05-25T23:49:00.254832Z","last_seen":"2026-05-25T23:50:21.440159Z","times_seen":2,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/e86a6ff091852897.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.964Z","timestamp":1779752985964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/e86a6ff091852897.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/e86a6ff091852897.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45405\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240619/40d77fd74e6c71c1-1x205.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.972Z","timestamp":1779752985972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240619/40d77fd74e6c71c1-1x205.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240619/40d77fd74e6c71c1-1x205.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45414\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250121/39d8bb4f7e935e3f--3840x1200--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.245Z","timestamp":1779752986245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250121/39d8bb4f7e935e3f--3840x1200--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20250121/39d8bb4f7e935e3f--3840x1200--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45450\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/css/216.72a99972e26e608ca9a0.css","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.188Z","timestamp":1779752984188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/css/216.72a99972e26e608ca9a0.css HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 12811\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: W/\"571892847baf06e3ce3ec0aba5a80e81\"\r\nlast-modified: Tue, 17 Mar 2026 03:35:57 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 dc1548cf52adc92ab6fc1a9c02f4182c.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 89563ef5024d79cac95c7c27b5b0522c\r\ncontent-length: 1363\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6992,"size_decoded":1840,"mime_type":"text/css","magic":"ASCII text, with very long lines (6994), with no line terminators","md5":"2943b831a8f8c8e7f52bd70978cc9143","sha1":"20e59ef8e12d452945944286807e91c290dd8aad","sha256":"1ede3fbd112691ac8447f8a6370185c1fc9177b77c6123e8a76261ea2034bd83","sha512":"a9aa9edd8c3e434d04e8c839bfd3ccbe3b3dcca38b639c3db1809bb8297ccc4d9df90431f1babf728499a13227800ce151f3dfc1aad1073f27c06124df3937bf","ssdeep":"96:9+LyuW9PlFEPECmGvCFdCKxSc45mA9Cu/2O3R:9+uuWZlFEPZmGvgdDSc45f9Cu/2O3R","tlshash":"e7e1ade0fd1c2c28a83bdc757dafed022922b367e109e23679959721cd578817f2d249","first_seen":"2026-05-25T23:49:00.332886Z","last_seen":"2026-05-25T23:50:21.441069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230511/c262b94e48e87357.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.331Z","timestamp":1779752985331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230511/c262b94e48e87357.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20230511/c262b94e48e87357.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45315\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/b5bd024b1d63fc68.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.019Z","timestamp":1779752986019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/b5bd024b1d63fc68.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1966\r\nlast-modified: Mon, 26 Sep 2022 17:15:17 GMT\r\netag: \"c8bc6ca33a186f7860e589ab32d5cdb1\"\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 0113a71a4be95c1ea6c4a193aad565aa.cloudfront.net (CloudFront), 1.1 PS-NTG-01d4q118:2 (W), 1.1 PS-NTG-01beM227:18 (W), 1.1 PS-CZX-01bnS57:4 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SFO53-P7\r\nx-amz-cf-id: Kb28i84UnYnxjwMSWclhJ7lgpYnsY7KPkp8X1NEGFIUARJ-FCPJpqA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45426\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1966,"size_decoded":2615,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2626), with no line terminators","md5":"2bf217e24040b1fa0ce4e253c0c8eed6","sha1":"f3daacfbe901b8845057fd42ae17fe189955cb70","sha256":"8b469babc88e971252e7451254bf801bebc68887c04dd0d4a8186695638c8a2a","sha512":"b0359b971d031759940f48beefac896071d0d5210b45a1e740abb01aae310faf9bbf6d35740041c27661970e87286834959e26dfa38f2d1a73fa305fb2968ff4","ssdeep":"","tlshash":"20516ce48009b281cee740c43dc8d6c43844bdc73f528d96692c4b675ac8b275936cdf","first_seen":"2026-05-25T23:49:00.335305Z","last_seen":"2026-05-25T23:50:21.442678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230526/6be39d74dfdd5009.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.237Z","timestamp":1779752986237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230526/6be39d74dfdd5009.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20230526/6be39d74dfdd5009.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45441\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240706/d281e874b5aa0bba-3x2.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.270Z","timestamp":1779752986270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240706/d281e874b5aa0bba-3x2.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 252224\r\nlast-modified: Sat, 06 Jul 2024 10:05:45 GMT\r\netag: \"a95c0f1c60d8b31c8905548112095246\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 1361527e37c374a44b6726115c5bd4c0.cloudfront.net (CloudFront), 1.1 PS-JJN-01d6F200:17 (W), 1.1 PS-XUZ-01UaE43:19 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: -mB71FyrosWMt14CzUkmny9mBNAgkmrQD_EJ4XXMHZe0pbAn8bbUOA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45457\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":252224,"size_decoded":252887,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"36daa7c5742e926daea2fa7d3e10bbbc","sha1":"0460ecddd32e356c9c99ad0841dca5238bf8047e","sha256":"43881c1b1896217b274c4f7fe547cc8aa999345faead171e51232a2a5917de88","sha512":"096ecdabe1f965785997f3a035825b95f3ee0b09351d689a09fa8200ef01b2dd78611bff44ba2b2b1b15890fe16b2d73b769169397a59cc3b67abcc57d8fb50e","ssdeep":"6144:dfJq+57Qv5RcdURWpUOnuGRKhjMni/fCR60hBcajKlDRrgafuqSJdpj:dBqiGWCWC0u6i3zyKyArSzpj","tlshash":"456423764f2b6007cc18cb8dac77ae790f7624db9301c5ee65a848d1194db83a9e7873","first_seen":"2026-05-25T23:49:00.314104Z","last_seen":"2026-05-25T23:50:21.443901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/js/1.b3737435d6a1baa443c8.1777434674994.js","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.182Z","timestamp":1779752984182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/js/1.b3737435d6a1baa443c8.1777434674994.js HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 61120\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: W/\"09a8b0ed8ee1aa2f4949b2b5d2facbf0\"\r\nlast-modified: Wed, 29 Apr 2026 04:13:47 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 ab2999aef5af1e5592a220e1d1814994.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 6bb82084f9761cddc9220758a9fd88fd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":21238,"size_decoded":5542,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20570), with no line terminators","md5":"09a8b0ed8ee1aa2f4949b2b5d2facbf0","sha1":"9f8b242acd3de277cfc91bcc98d4066c597503bf","sha256":"4f0be4209abbd1eff13ba5efca710d14d447c01cd3ac4eff2c5e090ed3eb0b8f","sha512":"d1615b67d3ae1f62cd1802ce6155d1bc5aa02065f5b95eb5419b7c37a399d1382f1c0cb2080324a6844239d267fb80bd0952558f6714d34d8ae34f2f0e02e7e5","ssdeep":"384:UWT9kV6pUzAxtJN4RnvG3+klkFf7qOXpXCbtbQvhvZXabgvkCN:TT9kV6pUzAxtmnO3+klkFf7NXpXCbtbW","tlshash":"7c92c754a582f9b51da95220941b3039e27a1fe4700e816bff3cddd56ae1c7a321fa3c","first_seen":"2026-04-11T19:20:47.170985Z","last_seen":"2026-06-08T23:49:33.010643Z","times_seen":23,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/member/visit/count","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.195Z","timestamp":1779752984195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"POST /_data/member/visit/count HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nContent-Type: application/json;charset=utf-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 316\r\nOrigin: https://aaaa5115.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: 0dadf0169f8d9c922c3f0149330564a4\r\ncontent-length: 134\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117,"size_decoded":440,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"dcba57118666ada3c121321c0aaf152c","sha1":"799c1a27bb7f0487262d1288a400e4e77c0ec06b","sha256":"a49a4231d98f73fad29da5dfc1d1c320428bddfed60e8507fca3bfff2f98ff79","sha512":"b61f25f492526691b1534514980804538ac0334579c201fe647fbda4090a307f68ff9b78004004f69c23b7e55333d2345843f6ded5c3f92badf49d1b99ed07af","ssdeep":"","tlshash":"52b09bdf13c0c431d955a2b977740c16ac48f4ab26c455960591d6071cc5dbc85575ec","first_seen":"2026-05-25T23:50:21.445596Z","last_seen":"2026-05-25T23:50:21.445596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250602/713569201896d771--135x62--.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.358Z","timestamp":1779752985358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250602/713569201896d771--135x62--.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6109\r\nlast-modified: Mon, 02 Jun 2025 05:39:41 GMT\r\netag: \"88878ca1b4d79330ad382e5d8503e3af\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 8104408086379f0d5dc3491249134cfe.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:8 (W), 1.1 PS-NTG-01wPO228:19 (W), 1.1 PS-CZX-01vAA43:14 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: G2iTZBLJEQjjSRUTz_uG6cjvMjrChzCjphvNDIx_mXzXn-tvXpeV7g==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45328\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6109,"size_decoded":6794,"mime_type":"image/gif","magic":"ASCII text, with very long lines (8150), with no line terminators","md5":"0efdda8ad7d05b3e9b687b05480608d7","sha1":"54ae4f5f86bca3e7952f549798b51cd79dbf90a8","sha256":"8eb8db75e843f8c25b570acd562d4e9a96269bb31668a320e567012ddf8e65c4","sha512":"a3fb0137e3151202e0d9403b4c233bc6cee65c6bcd34434f0d95fbdd03317df33b5150782552e3f76d1cb817dae1662079b4be85a983d3dc6b04909cccf3a8b4","ssdeep":"192:MSTkPhagunhBnZEEQBk0UXBCLoPAPZhwxaUl:9xgcBeMWvXi","tlshash":"37f19f09e32b383b4446590b72f51878d49bcd6e9233479fc83242238aa7f8556af0f6","first_seen":"2026-05-25T23:49:00.341109Z","last_seen":"2026-05-25T23:50:21.446695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1044,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240201/a78dcb80e0789adf-1x273.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.379Z","timestamp":1779752985379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240201/a78dcb80e0789adf-1x273.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2416\r\nlast-modified: Thu, 01 Feb 2024 08:18:27 GMT\r\netag: \"17b865972cc8ab691ab59511b04fb16e\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 3f53c5d558c7725105f3837916f8e5c2.cloudfront.net (CloudFront), 1.1 PS-WUH-01DME59:11 (W), 1.1 PS-000-01cgl116:16 (W), 1.1 PS-CZX-01vAA43:9 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: Pq4HuN3nOOLqqECTo-Q70OAPI4rQvW2xtRu2favfjjhemQMQNRkI9g==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45335\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2416,"size_decoded":3102,"mime_type":"image/gif","magic":"ASCII text, with very long lines (3226), with no line terminators","md5":"482cd058f94a8de32b44f1809a9eeb13","sha1":"9acb5e8a9c4ec4cf6d2ffd8458d8158e23fa764d","sha256":"3f35ac6d6648b7d24076fbb179249706d4432e64fd1df24f890517aa6ae77aab","sha512":"2f6fdf138d50480c11c61792ce51a31f6e041bb6f387f01ad51259f8066a3c530dca564826c337978ef0aba7b2092f74eb8665ee083c5f3b8c9503cb9de6c148","ssdeep":"","tlshash":"e461187ec60e320dd1b0481560836c9f7d1e8cc34a264bda45761f1aae83f7116f9990","first_seen":"2026-05-25T23:49:00.282105Z","last_seen":"2026-05-25T23:50:21.447758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1067,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221217/f75eee220b924c63.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.394Z","timestamp":1779752985394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221217/f75eee220b924c63.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31590\r\nlast-modified: Sat, 17 Dec 2022 12:11:18 GMT\r\netag: \"7051be06206db0e1dc6d8669d8d42f35\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 dad2c265b31314a82611ea10bc334572.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:15 (W), 1.1 PS-NTG-01beM227:5 (W), 1.1 PS-CZX-01LQk101:6 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SFO53-P7\r\nx-amz-cf-id: 3XORugaT1oom-bLqGcRx3TpaSZKSCZdRFfyAyM3mYplMgGIh0BMF9Q==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45344\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":31590,"size_decoded":32277,"mime_type":"image/webp","magic":"ASCII text, with very long lines (42120), with no line terminators","md5":"512422feda38d29fdc76754b042c14ac","sha1":"a76ecf4eb4bda36edeece6f5d32de3442f40962d","sha256":"d3ae241e3ace47aa0382b015470a8369a2b2c3a49682e535de4172227c7dd351","sha512":"a99ef4d0b945248649da4f7e6522b0a0ac192ce86a7e35a22196e4899246654adf92a7232c78a07df902554ac8598f02abc1a7dd187665a5e275ac6b61d7620b","ssdeep":"768:eMTqHMF7wF92TiW2DTEeBQW5VnnJa8HDSpmlnPKs9gj+W:FWHMhq2deBQOHTPnw","tlshash":"bb13f14338cbde238748d40ae913ef5559e537b0246930b3f0b415bbaade856a9c4f2d","first_seen":"2026-05-25T23:49:00.294907Z","last_seen":"2026-05-25T23:50:21.448766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/5dcff5fcce0b23cd.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.721Z","timestamp":1779752985721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/5dcff5fcce0b23cd.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/5dcff5fcce0b23cd.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45367\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20251218/72accd56b6907774--200x75--.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.019Z","timestamp":1779752986019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20251218/72accd56b6907774--200x75--.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2094\r\nlast-modified: Thu, 18 Dec 2025 06:45:47 GMT\r\netag: \"6a051f4de38b0f92b37cc76523ab4df0\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 32fd840119a707a2e376c5161656cca6.cloudfront.net (CloudFront), 1.1 PS-JJN-01XUm198:18 (W), 1.1 zhoudxin93:0 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: 9Ql2NFsnjVlittuOvh3P8TveAuWOZVAtNz0d69-H0mLpY-nu7wTpgA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45425\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2094,"size_decoded":2750,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2794), with no line terminators","md5":"844ffc050330d1bfb4d3d1528958affd","sha1":"a6f1bbf2d831067424756401a74bfcc76b3bc8e3","sha256":"919c95b3db5acee8fe01bdb809e3050862b42a9edc16938c65f885ef61f3c37c","sha512":"7d23d22a39b66cdbcc48e03563ca04999f2118b928465eaefca9853d27a56ef339dd239be915a5c61c19b0c2dcafa49772d4a7c0e95e72b173ebf35242634c1e","ssdeep":"","tlshash":"d3513a10a110a97ae1bae140463e0e532e356db5d20083a6ee6aff2fd6941386e42163","first_seen":"2026-05-25T23:49:00.322413Z","last_seen":"2026-05-25T23:50:21.449664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sports-www.badendental.com/static/js/manifest.723f65732b2b4d19739d.1777434674994.js","fqdn":"sports-www.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:43.265Z","timestamp":1779752983265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /static/js/manifest.723f65732b2b4d19739d.1777434674994.js HTTP/1.1\r\nHost: sports-www.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:43 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 29 Apr 2026 04:13:54 GMT\r\netag: W/\"aa379ae0060d92c4fce445fa3a472d8c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: eAv8ez7iafrLRS0PywyeLElPvUEH.3Fl\r\nserver: PWS/8.3.1.0.8\r\ncontent-encoding: gzip\r\nvia: 1.1 69ce12cd28f192f5e142ba57e5fe0b80.cloudfront.net (CloudFront), 1.1 PS-000-01cgl116:11 (W), 1.1 PS-000-01xz346:18 (W), 0.0 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SIN2-P4\r\nx-amz-cf-id: lvKojONgfRitfOYkS9WzKIXeXav9mJUAVfOjYT_p92b6cQzkV8FmZw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nage: 25221\r\nx-ws-request-id: 6a14e017_PShlamstdAMS1vj92_47818-45163\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":30128,"size_decoded":17174,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (30128), with no line terminators","md5":"aa379ae0060d92c4fce445fa3a472d8c","sha1":"aa7f6260ae1e49d5e1f730c7bab2a4edd7c69548","sha256":"c88dcd9e41364a7ce6f6e8d1c1d9bb87d665496a1d7c5f96af461545d344a6b2","sha512":"cd777b46f5d0d6c47bc09c6588ac6fe859f7816b03ae869e735264169eccbe5c93f1ff42624dfcc73b13a98292f6e69b64f1b97f76934e3eb0baad8ac96db770","ssdeep":"768:3zN/rtvnRqadMSUtqOR+6XC0QFHNeL4CiNZPDIFwt:B/rqadM9si2FipmPMFwt","tlshash":"39d24c3e9f1ee8db2936c4505c5148ef255d38947d1240c1adeeaf2b1859f4cb273ba2","first_seen":"2026-05-04T00:52:31.768561Z","last_seen":"2026-05-25T23:50:21.450508Z","times_seen":10,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":11,"connect":18,"send":0,"wait":43,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221110/59b5d215d94b707b.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.821Z","timestamp":1779752984821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221110/59b5d215d94b707b.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4438\r\nlast-modified: Thu, 10 Nov 2022 11:38:09 GMT\r\netag: \"32f1968bbce87bbe45638bd120ddd8d0\"\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 5b376b6a8af86f25cb61289b102c9efe.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:5 (W), 1.1 PS-HIA-01tWB184:9 (W), 1.1 PS-CZX-01YLn73:8 (W), 0.0 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: toKNQf5ntelRVZx-Vo6JRQKjDL92sWArGo_SxuGYqR2RUScf0G7Dwg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nage: 37808\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45256\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4438,"size_decoded":5097,"mime_type":"image/webp","magic":"ASCII text, with very long lines (5922), with no line terminators","md5":"2f1d94383b84041d5e4d66b02be5e20c","sha1":"0e3de24d2800f23d4c8ae50adca32938ff25785f","sha256":"d4286e3466ccd2b9dd26c4f51bd6facc30a79787eef56661db8cca28784b889a","sha512":"42145129bbdb499e325c24d558f03afa040e4b93cb7bfa08509873c1d80716a5edc5d0a4716daad1eff21647efb5ac67e51e3aad136642d98762516d249910a3","ssdeep":"96:dJ/FS+EaskAXWS2S2OPXOVoPui+6D4t0A3ol++6VzYo8HM1+k3JcdzTa58:9MasksrL2Ov34t0++gzYoSMqzX","tlshash":"47c19edc8f77f8ac8603d5e8404479504b42dbaac06e634a76199bb414cba0708b88a1","first_seen":"2026-05-25T23:49:00.328738Z","last_seen":"2026-05-25T23:50:21.45181Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240509/a449af3bc0b998d3-1.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.358Z","timestamp":1779752985358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240509/a449af3bc0b998d3-1.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240509/a449af3bc0b998d3-1.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45327\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250122/fa2da6577966ae47--3840x1200--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.275Z","timestamp":1779752986275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250122/fa2da6577966ae47--3840x1200--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 105544\r\nlast-modified: Wed, 22 Jan 2025 05:35:50 GMT\r\netag: \"f04a893d91b765d391875cef804d50df\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 b735cef950dccc7c59398fa8df6c4f7e.cloudfront.net (CloudFront), 1.1 PSjsczsx2ng18:7 (W), 1.1 PS-NTG-01hLn226:0 (W), 1.1 PS-FOC-01rf4118:13 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SFO53-P7\r\nx-amz-cf-id: fr1zuJQwmrR4JveadmEr5QqtX8gWFkT57dqEb-c_J7eo5uYEzGeESw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45462\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":105544,"size_decoded":106232,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"39e899cc9f570bfa24bdbca719696257","sha1":"d51590d1a57f0ee0815cb5ad7d3590357c72cfb5","sha256":"40230a2aaf2375021002d6289aeb012025ac1341360da1d30e36eb56cdcc1e0f","sha512":"e4f139212e1389d8b45c01051861409039aa068810066d35f0377e348d185fdfaa0ac5e241cd363cf84846ad85ae3b2711e5b1b04951bcf70dc0d9db80155860","ssdeep":"3072:nFej+CI7mpFvhWPO5PqvyVvz59COEjxn2i6itsuBQgJF6:nXCwmPvhWoGyxvE92ettxE","tlshash":"d3d3027be7c061699d01f10cb2a11d926da3a9c39c5bb16f73859eb211342d2f523e1f","first_seen":"2026-05-25T23:49:00.282926Z","last_seen":"2026-05-25T23:50:21.453279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/config/config/get?foot=1","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:43.806Z","timestamp":1779752983806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/config/config/get?foot=1 HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: 8de3151e6d8a6b984b858b07524ebd04\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29326,"size_decoded":7953,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f973ef6a3d8cc0cc69c637938c90b9ea","sha1":"300ebd50c24172c24f86f6b69b493096b68a55ea","sha256":"71a5f512e3fd23575e175b95991979ff10c95eda738bd612aecc841c3d9d45a3","sha512":"89c0ec8b043c879a1059800080dda1ba787708bcd3551f228305cd346ddd21ce2785e6a2cf78f7b381fd3e7fc2373d648298fca9407a1ecfc6ca7aa31536667f","ssdeep":"384:XCGOXozHCCF+m/AdCU3OJoMDYcn7qBLyzKwwEjfW05MqDkCSdCGuK0DRboxUz8E7:XJL6NBSYcn7qBLyzmEjf8SK1z4","tlshash":"23d276b707dce89b4ba791d039cea04de5cd012f44dedf89f988cd9cc8d969a211685c","first_seen":"2026-05-25T23:50:21.454076Z","last_seen":"2026-05-25T23:50:21.454076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20231214/50448cbbdc6388e9-1.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.353Z","timestamp":1779752985353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20231214/50448cbbdc6388e9-1.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20231214/50448cbbdc6388e9-1.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45320\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221217/c8933c6198f9f93b.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.353Z","timestamp":1779752985353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221217/c8933c6198f9f93b.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20221217/c8933c6198f9f93b.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45321\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sports-www.badendental.com/static/css/reset.css","fqdn":"sports-www.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:43.263Z","timestamp":1779752983263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /static/css/reset.css HTTP/1.1\r\nHost: sports-www.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 07:28:51 GMT\r\netag: W/\"e4cc0eb09f3f01cc86ec06776c9d4cca\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: rpnKu1VMf4zpn7hUFsZpAyWqGLT.lxHV\r\nserver: PWS/8.3.1.0.8\r\ncontent-encoding: gzip\r\nvia: 1.1 b944cf0a603afeb8ef146d8879de1630.cloudfront.net (CloudFront), 1.1 PS-NTG-01hLn226:6 (W), 1.1 PS-CZX-0165159:4 (W), 0.0 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P4\r\nx-amz-cf-id: ujnZLLuhKO3ys0bcdi5fDE0qbhVzdJD9BhU9Qfk7F0jle3hUhEUbFA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nage: 37817\r\nx-ws-request-id: 6a14e017_PShlamstdAMS1vj92_47818-45162\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1808,"size_decoded":1535,"mime_type":"text/css","magic":"ASCII text, with very long lines (1900), with no line terminators","md5":"ba5257488ac866573f2a4af1060dca2f","sha1":"a91ae22f443e22dda9071718cb3b1e1b8681663b","sha256":"76060979411c1d2862983ef34a7e81bd03ba5eaa5f53e075fac68bc768dee1bb","sha512":"9b25b1fa8c9d4660f2106128239e8430631e4af0f68c8b91e6e4f097053e7de0a9a81d309befe76ae933e46e76465f9310f8dbc858bcae1c897ebd71485d379c","ssdeep":"","tlshash":"cb41121fb111017155a7ceb4f6eb8e66b3bd3202181083a9b6dada168f0e5acd4e139d","first_seen":"2026-05-25T23:49:00.32961Z","last_seen":"2026-05-25T23:50:21.455255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":13,"connect":19,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20251230/c0a45e3a1bf82814--300x300--.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.558Z","timestamp":1779752984558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20251230/c0a45e3a1bf82814--300x300--.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 214147\r\nlast-modified: Tue, 30 Dec 2025 12:41:55 GMT\r\netag: \"ee2bfabc63bca7fdddf38815b569ec6f\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 cebe7291f382f643e4ea2329a2d8016a.cloudfront.net (CloudFront), 1.1 PS-000-01dCl112:7 (W), 1.1 PS-NGB-01DVr174:1 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SIN2-P2\r\nx-amz-cf-id: VHYJ8_FnPZV7diYJSwdqp4Lb8Jzh0nJKxAcDcUD9BZn7wA7uHT9UDQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45224\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":214147,"size_decoded":214807,"mime_type":"image/gif","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"93d9e8948925fc4908f45350d0464a35","sha1":"c0cdb509b49e27446f7ee59cda6ea6487823ecd1","sha256":"48098ffb34ae445ee3bee12692222022bf642d974308174e62ad481e148f5017","sha512":"9c9ac1644fefdd5c23923e722c042f2c7f33816897807745481ed92fa198695669c5758fca4a4ac9a813b34d909a007223272aec70b6f3632c95465976e68205","ssdeep":"6144:8grbUS5LYIzegezE3DSDzX4292yaDtmfDgomYXeDE03WoNfBp4CEO7LgJx:8gXUkLYIeg+E3O3M+xmYuD9T54Cj7Lg3","tlshash":"9354237887aa8daa06e4ac8f942515950d73987ec078ebc9f38d98f73f416580473dec","first_seen":"2026-05-25T23:49:00.309432Z","last_seen":"2026-05-25T23:50:21.456108Z","times_seen":2,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":12,"connect":8,"send":0,"wait":568,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221217/f75eee220b924c63.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.355Z","timestamp":1779752985355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221217/f75eee220b924c63.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20221217/f75eee220b924c63.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45324\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20231129/2e1cd9895056c10a-1.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.390Z","timestamp":1779752985390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20231129/2e1cd9895056c10a-1.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26786\r\nlast-modified: Wed, 29 Nov 2023 03:39:40 GMT\r\netag: \"6cb264ac04bf72dfa4fc2eda350f689a\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 1361527e37c374a44b6726115c5bd4c0.cloudfront.net (CloudFront), 1.1 PS-JJN-01d6F200:2 (W), 1.1 PS-XUZ-01HTm40:9 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: wBDxRZ9ryw3blrPxKJWUo7VlsqlI2dDQjkPO5M2j2bGejoaI2yuItw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45339\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26786,"size_decoded":27446,"mime_type":"image/webp","magic":"ASCII text, with very long lines (35716), with no line terminators","md5":"416b607bda9e0cf4534e359110220402","sha1":"1bd505930b698466ad4340ca3e1906fc69a0505e","sha256":"84e4a6210947365c1168ee8533baa00a309dbd8e786efd5577c0e6e9ccb6c740","sha512":"0f3524aaaeaf8347608296cc36ca0377377ad46ff2269065751dca1ad6df2284e94aadcfd10aeb3ce3e4df083523d11c3bfe56f18e7f7fe7532f916fc25c76c4","ssdeep":"768:4N/8PSj/AruJgwI2scURM2e8O1Z60Z9rNHcrv+jVWZFF5Qwx5MMsO0tLhKNod:yy0JgwI2wG2NivZz8D+eJQwEvO0HKi","tlshash":"73f2e132af604aa4b0edb006712875b75e93051d75e3bcdbaa95fa1b447ca132c3af44","first_seen":"2026-05-25T23:49:00.250754Z","last_seen":"2026-05-25T23:50:21.456798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240706/d281e874b5aa0bba-3x2.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.238Z","timestamp":1779752986238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240706/d281e874b5aa0bba-3x2.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240706/d281e874b5aa0bba-3x2.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240811/acda850d2b59cf2f-3x2.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.239Z","timestamp":1779752986239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240811/acda850d2b59cf2f-3x2.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240811/acda850d2b59cf2f-3x2.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45444\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/saving.b88c4b5.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.768Z","timestamp":1779752984768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/saving.b88c4b5.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/static/css/11.fceef766b55be649740d.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 80548\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"b88c4b5c8f152ce5b731da1f31aed399\"\r\nlast-modified: Thu, 28 Aug 2025 07:29:05 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 f9b0f5c24b85aa3c6da29e2a9d7605d6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 528e068226ebabaf98a9c293626f96f1\r\ncontent-length: 1784\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1784,"size_decoded":2260,"mime_type":"image/png","magic":"ASCII text, with very long lines (2382), with no line terminators","md5":"3fb69a3c0d2153328569ac96f9debfa3","sha1":"93b923fa0762b04cf6dcf06733c42a8031510adf","sha256":"290faed7930642f2aa9ae8179cda776e74b6c5871f796d7639dcc1bdf08b6e73","sha512":"5d23e1c8af857e8d8a92d9a2b09a3704cc0991c54a4d08ac95fecef6043340d05b22af3cbbc8a29a27a850775214a7eb1791b42a1ab4c350f92eddd8af46054c","ssdeep":"","tlshash":"25411b3ea9d8368f1432c6b85a72257f2de49f5fd88142f5d4b1128b18297f624c25c5","first_seen":"2026-05-25T23:49:00.288724Z","last_seen":"2026-05-25T23:50:21.457622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer5.93e8c5e.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.778Z","timestamp":1779752984778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer5.93e8c5e.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 59142\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"93e8c5edd3243b46616b23b362a832e9\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 dc35a7fe4b705d11f9393b070ca6fa1a.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: c28d9c063f8094203676fbdae4d2cff3\r\ncontent-length: 708\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":708,"size_decoded":1183,"mime_type":"image/png","magic":"ASCII text, with very long lines (946), with no line terminators","md5":"5b834fcd1434b76bc37907a3ff2a5b0c","sha1":"08e605828ac8b8f90feac6a0d0449e4be73ef41e","sha256":"615a2829093ffadeca58b2b0ee726e8641c30fc0f7b90a6ce4d04a21dbcb073c","sha512":"f397df0fa3ba755317cd0e7f7ba986f278990700aed47171dd1e264721fce88157b8e2b0c80b619eab796d218fd76841b4b39b1ecb16f0054f7fd07763623437","ssdeep":"","tlshash":"5d11c8f609e13d1495580cd68b3051671ef7b873a323b430ff58421a04565a4b662b08","first_seen":"2026-05-25T23:49:00.308565Z","last_seen":"2026-05-25T23:50:21.458496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20260522/4f408d604e1bbf8b--1540x1064--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.797Z","timestamp":1779752984797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20260522/4f408d604e1bbf8b--1540x1064--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20260522/4f408d604e1bbf8b--1540x1064--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45252\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221218/4816a68d6a4965d0.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.354Z","timestamp":1779752985354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221218/4816a68d6a4965d0.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20221218/4816a68d6a4965d0.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45323\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240516/8fd834e96bfcc75c-1x709.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.364Z","timestamp":1779752985364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240516/8fd834e96bfcc75c-1x709.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7924\r\nlast-modified: Thu, 16 May 2024 15:59:08 GMT\r\netag: \"70999b50a1ad942b35bafcfdc5ecaa72\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 d378e69f0d86636650cb287a06732cf6.cloudfront.net (CloudFront), 1.1 PS-WUH-01DME59:15 (W), 1.1 PS-000-01cgl116:15 (W), 1.1 PS-000-01Wk752:14 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: aGmcz1RVcr8AyXyukzfHfZ_4KNu8bLcSKzN_i-nJo9QdtchdlbWR9A==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45333\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7924,"size_decoded":8611,"mime_type":"image/gif","magic":"ASCII text, with very long lines (10568), with no line terminators","md5":"0690ac4733294da85a9acb3edece3a34","sha1":"bd37f1c2ac5dcc8ac26090bacf11db9eeda8f19a","sha256":"368d8e595439e8cda9f6be47a5d9d633f35629618f916696e49395065484bcea","sha512":"ae9010c1f8cd9b29938882bd34dfc870fc2e82e6ee9415c584558ce44a055bde7748de50225352bc56a9b31420393f092f9fdaeb8826255096211e2bc605b3e8","ssdeep":"192:brUaDly/BqKtcgdSgIYc9U9pfOuDxJPNJCNxDSHL:3UaDlAqmcgd34ejGuDP/FL","tlshash":"4722b00d69332fae24ee9f50467e1e53ae3551bf4df3290c00a619e6644eb793116cf2","first_seen":"2026-05-25T23:49:00.29396Z","last_seen":"2026-05-25T23:50:21.459111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20260405/6fc0aef536d3063b--400x400--.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.663Z","timestamp":1779752985663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20260405/6fc0aef536d3063b--400x400--.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20260405/6fc0aef536d3063b--400x400--.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45360\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20260405/6fc0aef536d3063b--400x400--.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.725Z","timestamp":1779752985725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20260405/6fc0aef536d3063b--400x400--.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5724\r\nlast-modified: Sun, 05 Apr 2026 15:27:13 GMT\r\netag: \"16760af5cf70b7d9c4e8afc827344d33\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 a0ab8fad44e7d16e458ba0843ec3ded6.cloudfront.net (CloudFront), 1.1 PS-WUH-01DME59:14 (W), 1.1 PS-NTG-01aB9225:2 (W), 1.1 PS-CZX-01lqK102:13 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: aK768XT6-GLa_rIPo5LYwCVQCGvPEgFxBCv_DO-ZM2TcFvY2NnEIHg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45373\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5724,"size_decoded":6412,"mime_type":"image/webp","magic":"ASCII text, with very long lines (7634), with no line terminators","md5":"5f4771af01c849bce28220c92e83de96","sha1":"2653fe05c696003e3ac3910b0cabbd769cdcc7d0","sha256":"d7d349095ab36a806f87d207685f461599f3662512ead7c6adbb3938c25d650f","sha512":"f0581b56cf7edba65c96744a7c71d0bb794f8336ef556acaa0ef13d8a27d251eacbb57d331833b72096ae01bd939df709a1e15ce28ed687af4fc04eb988f078e","ssdeep":"192:RNnz4jUyLk7Ess9fy8LuGqcvj0LSeiDV5:Rrwk7Esspy8Lu5L+1DV5","tlshash":"23f19ee387e640dd193b5d8f2d12c97f7ce1df47d6956c920e1646afb810c860a05c23","first_seen":"2026-05-25T23:49:00.303863Z","last_seen":"2026-05-25T23:50:21.459727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20251218/72accd56b6907774--200x75--.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.968Z","timestamp":1779752985968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20251218/72accd56b6907774--200x75--.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20251218/72accd56b6907774--200x75--.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240605/38c66db4660ec510-0x792.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.721Z","timestamp":1779752985721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240605/38c66db4660ec510-0x792.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240605/38c66db4660ec510-0x792.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45368\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240605/0f30e8d6dff109d5-0x792.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.723Z","timestamp":1779752985723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240605/0f30e8d6dff109d5-0x792.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240605/0f30e8d6dff109d5-0x792.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45371\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250527/43c039c3a9631747--200x75--.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.020Z","timestamp":1779752986020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250527/43c039c3a9631747--200x75--.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2144\r\nlast-modified: Tue, 27 May 2025 03:53:30 GMT\r\netag: \"0ae1feb91691aa2cd6078fb3ff2a05a8\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 f3585936af13167b5634a6b59c39e21e.cloudfront.net (CloudFront), 1.1 PS-JJN-01Xbi199:0 (W), 1.1 PS-000-01SFH54:17 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: 9YSYA6o4l2vhoGYYFlYh0iNK_pDkbAs3yiz43h9dxhYE5ZNVOktaaA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45427\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2144,"size_decoded":2804,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2862), with no line terminators","md5":"e5cc82b06264fa79429f466b965e2f08","sha1":"6bf2c236a4db2bd585e17a10cb0362a6aa74d3ee","sha256":"c9e3d8b20b63eb2ee79c2335744b46ebcb11e5d697bc0262acdffb29d41d3bd1","sha512":"77aba4dc556e79a934bb39947c0b0e10937e4c93af395da9b20ba9e67fa6c1ab332e1a95f44850ed9fc3a92b18142b710b5388b2aa42d34d120155c5a95fb30f","ssdeep":"","tlshash":"e5514daa4bca93473771f25544ebc712390bc1d1c161d12d93831f1edb16ef829546f6","first_seen":"2026-05-25T23:49:00.297668Z","last_seen":"2026-05-25T23:50:21.460325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20251231/b5bae2f3d4dd8c89--3840x1200--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.257Z","timestamp":1779752986257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20251231/b5bae2f3d4dd8c89--3840x1200--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 213380\r\nlast-modified: Wed, 31 Dec 2025 08:58:05 GMT\r\netag: \"8668e21d1b3ce6fabded9c17049ea6a8\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 f6a003d0ac39dd4960506f9ca113dde8.cloudfront.net (CloudFront), 1.1 PS-000-01Rvy237:10 (W), 1.1 PS-NTG-01wPO228:19 (W), 1.1 PS-000-01TT241:7 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SIN2-P2\r\nx-amz-cf-id: gG2sikDb_j-Rt6X2PNkiRKjWV9rDA1-TZkJaRBKXtG3iZ13AsxDL6A==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45453\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":213380,"size_decoded":214069,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f5dfa9e2a42948c20bb0994f69b7bc76","sha1":"d2fd6d8aac8cdaf40d52bf8527f237ee77c6bc22","sha256":"50a50bd36b7388ef9168fdff3021ed3539e4020c74bc5348e2805e642fbf8b2c","sha512":"67bf7585037ff540b82ac8275ca193f6409f108eb1af2af93c2274d2eb4394c28c35ad4cc955b74c97ca6590ddc052908c16da94516d512d47ced17111148ed0","ssdeep":"6144:wd7vg0sW49x2AyfRXhxC3gmjhnWrVngCAh9t7:wd7vhszb70bEygp","tlshash":"375413f47e749c2a45c1ca3b90fe0f4a4fd09e57b0c682c1679c7487c67baca8961132","first_seen":"2026-05-25T23:49:00.298562Z","last_seen":"2026-05-25T23:50:21.46095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250121/89fa777cb78bd5c0--3840x1200--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.273Z","timestamp":1779752986273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250121/89fa777cb78bd5c0--3840x1200--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 125428\r\nlast-modified: Tue, 21 Jan 2025 05:32:40 GMT\r\netag: \"772f99c51f9d388249184fcdda2e998c\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 1daf821873c433b72c70242baa34bc22.cloudfront.net (CloudFront), 1.1 PS-JJN-01m5h211:4 (W), 1.1 PS-CZX-01OFj122:19 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: I8JxdYGHQXkFcHTQIRdUrh2T4rk5YMsKKL7xvxKsj-FHjIurx7Lz9Q==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45460\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":125428,"size_decoded":126091,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a6b040b54958432c0e073a39cdc9922e","sha1":"ca9745d55a40c06ea16e3d462c0c3bd255453a3f","sha256":"e64f592e5dfb851788d11015892236a5d352264ac4f097d0dad91ba6121ffac5","sha512":"c41636e86713db0f7374e060f7ae4e7db7bbaff93e0b20dc51018ab9686e311b80de3b4e5daec942b19f1c37894c09080f7e26fd2b4aa22e24d25efb5a08f719","ssdeep":"3072:VsWePNRHbTou4D1TGWjvfTS6aRuFjVHwbX2Lt+rSHkP5F0Ub0EY5hXqK4n1E8roG:VsfosWjvfnj+bGLt+OHkhF0WE5hXqKJ8","tlshash":"e2f312744918b38c41ef137b802d3b9acdf69dba21152baed1acd8d137605a537e9c4c","first_seen":"2026-05-25T23:49:00.31524Z","last_seen":"2026-05-25T23:50:21.461555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20251018/e9c21b8ffb9baef2--300x300--.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.561Z","timestamp":1779752984561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20251018/e9c21b8ffb9baef2--300x300--.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 181626\r\nlast-modified: Sat, 18 Oct 2025 08:10:10 GMT\r\netag: \"0b6d388787eca0273519eb1314b5f074\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 eb025597eaaccb791918dc400048d224.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:0 (W), 1.1 PS-000-01SuJ115:19 (W), 1.1 PS-CZX-01vAA43:17 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: dgO6VVn1fOzIJGxQkZhq74Gx5tpVnFHHd7vQzIUjn_sMhZYWoaha0A==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45227\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":181626,"size_decoded":182314,"mime_type":"image/gif","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e3ffd621e6770d3f37dd93a711f851d8","sha1":"19f963adb94f009c728ca31d2134639fd73647cb","sha256":"09f1a453eb1ef2dedbe631a3d32d30a8aa6b4b28a000e25e5a9c862b6c19a910","sha512":"04f8ea9d1dcf0bb5028aadbc73147b98d776d0bfc5d02ffef6b398f918913d3e9bb28dddf9cdb320e7ff85b262fd5e66d814f5386a0eaf01eab2010489e1896a","ssdeep":"6144:m/Tl0qKdL3UztCgq06ukpSj1IPuLzT4vxFTo/M:GnKp8tCgqoZ0UfynX","tlshash":"573412436b545c6ec4780d80a88e5af9bd7381e1dadcc698393863df0bbda2454abd34","first_seen":"2026-05-25T23:49:00.343676Z","last_seen":"2026-05-25T23:50:21.462217Z","times_seen":2,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":9,"connect":9,"send":0,"wait":528,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20231231/4df824719e2209fa-3.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.794Z","timestamp":1779752984794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20231231/4df824719e2209fa-3.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1992\r\nlast-modified: Sun, 31 Dec 2023 08:36:41 GMT\r\netag: \"1ac13f6f908d243841988ee31cbe03a7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 d113905f971c69702dc6146c63640be6.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:2 (W), 1.1 PS-HIA-01VH8172:10 (W), 1.1 PS-FOC-01tmR97:0 (W), 0.0 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: lP4_Gq-mbWnt5EamndEN-ZvQoIfrpLq59s0ljW7AUILvhDAMKPnW7Q==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nage: 37807\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45250\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1992,"size_decoded":2689,"mime_type":"image/gif","magic":"ASCII text, with very long lines (2658), with no line terminators","md5":"2b16c73a4c7aadf59b6e1561b60f3f7d","sha1":"153e758becbefddfc314a50b3809ba887fbbf062","sha256":"8ba318d781ff7536f6cae79e7a269f9c51422b342f7408a41ffe7f01ec7bc616","sha512":"7502e4ffce983c8fcc564b5d11df8df6d9961347e6cff4316a65e08dbdca6e9a60f5a93fe46001b08638b1baa2af7f10c7d6e281aba630e0812455a21c714c2f","ssdeep":"","tlshash":"da512c6b6ebb3aac07f4cd4d276c9c2015454a82046a1fde071621278441773a2caffb","first_seen":"2026-05-25T23:49:00.3466Z","last_seen":"2026-05-25T23:50:21.462827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230909/7e159415ac43e237-1.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.800Z","timestamp":1779752984800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230909/7e159415ac43e237-1.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1692\r\nlast-modified: Sat, 09 Sep 2023 05:36:07 GMT\r\netag: \"b972b444703420d19df78f17b84f4c1c\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 eb025597eaaccb791918dc400048d224.cloudfront.net (CloudFront), 1.1 PSjsczsx2kw13:12 (W), 1.1 PS-NTG-01FLw54:17 (W), 1.1 PS-CZX-01ZgV58:6 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: BPGi-oznRf3UUntCll39VLJiYMIsCTKwZqmYj4oCAlDT8F5rNaXKpw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45255\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1692,"size_decoded":2377,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2258), with no line terminators","md5":"e55f8d8267c02f6d558388bd47958866","sha1":"a1a4d2e4e4a799c78254fa20b98a1de5567577c4","sha256":"c46d1f7f66b201b59b9e34df1a3eebccd89912fd07184f66ed7549d20414acc1","sha512":"19eb8692a89ce579631423b2d3b991d7724400aec0594a404cd28d846d3ffda1c4337b2337626ed3170ee07a9e75e79857b9080773daa533e047a26a9822d9d1","ssdeep":"","tlshash":"d5412c3bf1e384c08657d00b56820c2d221fb53b07f05d7e85655373af2af68a5c25ea","first_seen":"2026-05-25T23:49:00.281252Z","last_seen":"2026-05-25T23:50:21.463475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230511/2be7d9290ab50933.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.331Z","timestamp":1779752985331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230511/2be7d9290ab50933.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20230511/2be7d9290ab50933.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45316\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240201/7b751927f4343743-0x889.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.378Z","timestamp":1779752985378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240201/7b751927f4343743-0x889.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1461\r\nlast-modified: Thu, 01 Feb 2024 08:15:43 GMT\r\netag: \"5c97374831b84e1a704949756cf6cd8d\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 d378e69f0d86636650cb287a06732cf6.cloudfront.net (CloudFront), 1.1 PS-WUH-01DME59:15 (W), 1.1 PS-HIA-01tWB184:4 (W), 1.1 PS-000-01oRY50:18 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: Hxzlj6Yx5-iE9Fppy3W2-ColvaJ0dPjJ0CyGZbI8a_WQ5tNQGYNLMw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45334\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1461,"size_decoded":2147,"mime_type":"image/gif","magic":"ASCII text, with very long lines (1950), with no line terminators","md5":"a6da0cbea43440021b66b30163b41527","sha1":"d996dd2c00edf02d2acef6b788304c7941197249","sha256":"d9eca49665219a1dbe3bc3e38fc5969807fd8a3efa57ca5c243372460e7bbe34","sha512":"a7619013db178911827c5f8ad50f512258ede7cadfa154930e6a9773d974d96faa62d11555c9b395acf35c652ccb0d7057706fadad8de6c964a75fd74b925285","ssdeep":"","tlshash":"ac41e87c971b33bf01b08db691691d5e3e188cd70f1507ac80af1b65d6037310359da5","first_seen":"2026-05-25T23:49:00.253064Z","last_seen":"2026-05-25T23:50:21.464114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/right.b118187.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.661Z","timestamp":1779752985661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/right.b118187.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 62510\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"b11818774965aba84b1a015b0690d8a2\"\r\nlast-modified: Thu, 28 Aug 2025 07:29:04 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 5e4382c6ab9f1c9abcd4f0ccd698f9f4.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 473c439eb38b2b9e649521f901ef4fd3\r\ncontent-length: 2042\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2042,"size_decoded":2518,"mime_type":"image/png","magic":"ASCII text, with very long lines (2726), with no line terminators","md5":"a4a2b817d51291e645a8c677ceaf1b74","sha1":"bb8ca5e97f6380422ac74e85e3cfe88387749318","sha256":"883c803baa79fe473cbd2c7e1a2c8c262a3b2e6078f97aead3056ba00779e1da","sha512":"17c31e1cf6ae4fb54e06c50aff9e02ce810e3873994eaf0d622c8ce78a6b4a2db597c9aec30d9cab93ece1ed371ed035a7b5b37bbd4bfe4fa1673ec59952555f","ssdeep":"","tlshash":"0c5118bf3769784f6229db14e20654267f5dae4b18195234443f2b5e223b31c08c56fe","first_seen":"2026-05-25T23:49:00.296667Z","last_seen":"2026-05-25T23:50:21.464745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/522c9de4645c0bd1.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.719Z","timestamp":1779752985719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/522c9de4645c0bd1.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/522c9de4645c0bd1.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45365\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20241016/d8be2f64f4d8c7e9--200x75--.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.971Z","timestamp":1779752985971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20241016/d8be2f64f4d8c7e9--200x75--.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20241016/d8be2f64f4d8c7e9--200x75--.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-25T23:49:42.289Z","timestamp":1779752982289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 92\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 25 May 2026 23:49:42 GMT\r\netag: W/\"6296bcfe0060b2d22491553b0fd73d3f\"\r\nlast-modified: Wed, 29 Apr 2026 04:13:45 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 8afda8fcd5257fdab4aea3595e149ef0.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: f71fd6263463bc4b93d55e1e6d961251\r\ncontent-length: 1004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2894,"size_decoded":1496,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2908), with no line terminators","md5":"20f223ee748c205fd79f268bc6ee7b87","sha1":"33d88c9686f0280e9dac745970588350af62a100","sha256":"01413b671be54c0f3974f13e5583ab12f6ff7534081ab6d8eb294f73563b0848","sha512":"35fc937428581ea2650c869874419dbae47be24ad45ce2c9f8ae1fa770db847260ff79ba19dddbe666d04a5f7079c2d8492cdcf38b7634ad99ef821553f669fe","ssdeep":"","tlshash":"a05133bf0545d2a23723cd4266ed2b140077257b4c129a95f25c2a4cd7c1b4fe68badb","first_seen":"2026-05-25T23:49:00.289653Z","last_seen":"2026-05-25T23:50:21.465368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1320,"timings":{"blocked":504,"dns":9,"connect":248,"send":0,"wait":307,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/favicon.ico","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.021Z","timestamp":1779752984021,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/deposit.b77b3c1.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.769Z","timestamp":1779752984769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/deposit.b77b3c1.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/static/css/11.fceef766b55be649740d.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 69668\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"b77b3c1c02a0669cc7b6ab1d183a949c\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:55 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 f5b31be72c11865ad8ac2540dfd45772.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 23ed1601561dc8294e0f9f4a2fe280cc\r\ncontent-length: 3655\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3655,"size_decoded":4131,"mime_type":"image/png","magic":"ASCII text, with very long lines (4878), with no line terminators","md5":"3f74948efb5ff4d4d066d1aeba2d161e","sha1":"ebca12692a37b9bda06afdfd6083b3f4476e166b","sha256":"593f7e1549b230eb2d950e6000e1ac6b5204fb5285cd5ae07121adca7c391209","sha512":"27ffd9d63b4c585794b25cc4648ca07826fad939ea55ec300f8875e989303cc8503a75b7f8da73f661a66596cc952d3c039a7afd0d81cb1e17eab868a91e0b8b","ssdeep":"96:YIMSEIIDvV9g8cA4l/qeKFtLuPYYTN8JhHnYo+rhcdgx0oizyr2:YIyDE8cAsqeKzI1TahHCNcdUizs2","tlshash":"2aa17d3a3ba96f0ff4a1967cec590e2f3c10cf8d19478e7aca35614e2c64374491a9e0","first_seen":"2026-05-25T23:49:00.274447Z","last_seen":"2026-05-25T23:50:21.466019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240517/80cd1387c4abc7c4-1x709.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.329Z","timestamp":1779752985329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240517/80cd1387c4abc7c4-1x709.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6278\r\nlast-modified: Thu, 16 May 2024 16:01:30 GMT\r\netag: \"4b77cbfb98e8ece0eb0d1427bae6123d\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 566e7277e24049ea0d417ac08d4a46f8.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:9 (W), 1.1 PS-HIA-01tWB184:3 (W), 1.1 PS-NGB-01DVr174:13 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: 2qpbGkmODqeTDYFdyS0nVzsCEt5JHs8hi4sHJqNgD8i5umfWymkG-w==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45313\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6278,"size_decoded":6964,"mime_type":"image/gif","magic":"ASCII text, with very long lines (8374), with no line terminators","md5":"5ae41c1dc1ce7cbf3a0f7c8333537a00","sha1":"9eac4e9f455d78c3da98eb72625a13b7b04a0920","sha256":"cd33cc2bde6f9a5acfad18b2ea5488cb21d545032543cadd33ae8b47f87a0ac4","sha512":"6986b9eab08fb9b491e89e7aa7b06791bc038f3f0cb583c1bfd77fac148c91a91240692929a5cedfd7297fbf6128c2ac60c39d7fadd01a511e75249d2776213b","ssdeep":"192:9jr8njSNDA0nM0wLzBlFZG/U+y68rs07LHfB3ktA:9jgnjCDA0nMLztIcNjLHfB3ktA","tlshash":"98029e1f7f1f331e94c80f5839ad6c596ba488b96546292f595a30fa9fc63070098af8","first_seen":"2026-05-25T23:49:00.311422Z","last_seen":"2026-05-25T23:50:21.466627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230511/2be7d9290ab50933.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.387Z","timestamp":1779752985387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230511/2be7d9290ab50933.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 464\r\nlast-modified: Thu, 11 May 2023 12:02:20 GMT\r\netag: \"b3554f68b232d94d77ed2a8a07b770cc\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 99057e6beab36f509efb35703e98fcf4.cloudfront.net (CloudFront), 1.1 PS-WUH-01DME59:0 (W), 1.1 PS-HIA-01tWB184:13 (W), 1.1 PS-CZX-01ZgV58:18 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: FEPKTQt7p8XPjK_RiB1GYiMyGBKmy7FgY88BvQSy6fW33Ru3oKcnLA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45338\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":464,"size_decoded":1150,"mime_type":"image/webp","magic":"ASCII text, with very long lines (622), with no line terminators","md5":"c49221d38d2ba77caddb2e51eabc4ed7","sha1":"bb497a80ff55d1f6fd49be8baae5c7f4fbd16850","sha256":"e1fb2f175101da2645b3b091b049b5c083b9de38debe4864d3b514bf0ab28443","sha512":"fd715262e668767d64e9689f8f2d92cdd7bfde16cc2a531355940cfeaeca0d2643ceebb64eea759493e4fcca11e40677d698a6b6d9fd724c8c54d6b192194d7c","ssdeep":"","tlshash":"21f00279545ae941a5715e0d8674a72048a5f43b4ee45802c8b206b2075db915271397","first_seen":"2026-05-25T23:49:00.302143Z","last_seen":"2026-05-25T23:50:21.467311Z","times_seen":2,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/left.a8a73f5.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.660Z","timestamp":1779752985660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/left.a8a73f5.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 64187\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"a8a73f5afb03d129cf6261458115dd7d\"\r\nlast-modified: Thu, 28 Aug 2025 07:29:00 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 20705cbe18fe1ff7d66690eea1d38876.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 39e900d2de97d439c39f0150281cf439\r\ncontent-length: 2060\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2060,"size_decoded":2536,"mime_type":"image/png","magic":"ASCII text, with very long lines (2750), with no line terminators","md5":"55374aac1f1f417be1dc1dfec4fa966c","sha1":"9ffd774a918a0e40b004f30ae46866e67e4fb8b0","sha256":"a070ab4aac61512c36605621ffd5e383f3e8a300181623133e1525ae842b0249","sha512":"cde2bb492127155b876aa38330ef475413fbae6b6deb874c8dfe881a191e94569e89717f0b525fbed9b6c4791f29ad2df6766131502988dc4199b10c8b901145","ssdeep":"","tlshash":"14514c3b37b27847228bc21cd60320ba760d1e4b3c1053a8587e2b16647ab0c2ccb4af","first_seen":"2026-05-25T23:49:00.287959Z","last_seen":"2026-05-25T23:50:21.468021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250527/43c039c3a9631747--200x75--.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.970Z","timestamp":1779752985970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250527/43c039c3a9631747--200x75--.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20250527/43c039c3a9631747--200x75--.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45411\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250121/89fa777cb78bd5c0--3840x1200--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.241Z","timestamp":1779752986241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250121/89fa777cb78bd5c0--3840x1200--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20250121/89fa777cb78bd5c0--3840x1200--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45446\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250116/303378522782bad2--3840x1200--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.272Z","timestamp":1779752986272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250116/303378522782bad2--3840x1200--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 163618\r\nlast-modified: Thu, 16 Jan 2025 09:21:30 GMT\r\netag: \"47a456e939d6c534cf81eb8857086348\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 67de1d9f5a4475da818c5fa4b7bf0220.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:2 (W), 1.1 PS-HIA-01rHo246:10 (W), 1.1 PS-000-01g5y48:10 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: MM_GXz9gzEVg3yjc5g-WcP4pLYaZaA3HD9PCU6ijeW_LY4eUEjPE6Q==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45459\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":163618,"size_decoded":164307,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"663b2314a0f1d5b3d6ba8ca7f7112a47","sha1":"e30d545d7fca8463cfaf7273102d18ef369e60fb","sha256":"5ab117a1aa73483f7a91abec6a24e19929babf31ab710bdd5319e9695f037e36","sha512":"746c54647e6a33bf968db62907852365c7dde03ede0d2aa14dea0d27fbe71695c92bc5ddc2bef19d688216e89261c9c18fd762adb101a6607d3404eddfb21f57","ssdeep":"6144:qvEY+gWfoCDwzL335J3gQJJnoFir4oXkBP4:qvHWf5w3ZlgQJJn6irzXB","tlshash":"6d24233ece765476e6b1ac4d920f3e32b9da59c300e551353e879a89dc6ec03928d43e","first_seen":"2026-05-25T23:49:00.345516Z","last_seen":"2026-05-25T23:50:21.468692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer8.fa9203a.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.779Z","timestamp":1779752984779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer8.fa9203a.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 70741\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"fa9203a1861b2723992d9d9c673ab0c5\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 58b73acb67c037ebf3e55d50e0a967fe.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 33905628e6ed9478679c6fe6ebcd91ea\r\ncontent-length: 1026\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1026,"size_decoded":1502,"mime_type":"image/png","magic":"ASCII text, with very long lines (1370), with no line terminators","md5":"b40c2f1b81ea484be42c9bce899fd5c9","sha1":"d3f305e58579de123516fa20ee62659e8a300566","sha256":"df35cc1a28a5a8f52219f44ddd39b7531c667083d049429fc39c53b094226400","sha512":"0b5939016ee21490af71862e21b6539f96359b6565ef6ac7bac0066a914caf75f2dc9bc3c402dbae6ba44013d94680162db866e0ceef8c6a03aa097a16305b87","ssdeep":"","tlshash":"70210bb531d72d0473a88e8e3dc032c50e973557a43db518f86555b3f395167a34d430","first_seen":"2026-05-25T23:49:00.295796Z","last_seen":"2026-05-25T23:50:21.469395Z","times_seen":2,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240310/9979c4fc0bbb638c-1.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.391Z","timestamp":1779752985391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240310/9979c4fc0bbb638c-1.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34722\r\nlast-modified: Sun, 10 Mar 2024 12:37:02 GMT\r\netag: \"f03f38e94e960b583c43afe4e561f726\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 c7236ff17633cabac94cf63861c8285e.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:4 (W), 1.1 PS-NTG-01hLn226:13 (W), 1.1 PS-000-01geo49:9 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: ZocO5-94xj5TmZ1_D9MWSh2jc_2x7319suCxfWaQLUJVre-KMSnWRw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45340\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34722,"size_decoded":35408,"mime_type":"image/webp","magic":"ASCII text, with very long lines (46296), with no line terminators","md5":"7d3ae747d72d51bdcc7900e485bdddc3","sha1":"8668a4822841e09226e69992f29ad9485c20ccb6","sha256":"d5edec4fdcaee456acb6fbb665a5467868e9b1530d9119c0afb2c9a5e2ba2c11","sha512":"9d73bef5389d25b79e68852a7e5cefbb489d9d1c7f741fbb9ecb4d90dc1a4fde2fa17ea74ef13d1e08ded592d5ca7ceb8e255a7187b922e56aca83eaef68efb1","ssdeep":"768:LWKLgw1Pz9ffzVphD7G2sh5FvjIfh5/v4DA8OD7XUvh1GkXNq2LsG7DRx2fk9If5:VLgw1PJ3hD7GdhTrIfbv4DADDb6xXNx+","tlshash":"9723f175091d385a95dda463075c29ad1b9ce90af4c388ecc5d0f903b4b36a7c2ee0bd","first_seen":"2026-05-25T23:49:00.302987Z","last_seen":"2026-05-25T23:50:21.470612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20260412/d77b9878adc1b6df--3840x1200--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.235Z","timestamp":1779752986235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20260412/d77b9878adc1b6df--3840x1200--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20260412/d77b9878adc1b6df--3840x1200--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sports-www.badendental.com/static/js/81.b58ee60d93d1da1ebb69.1777434674994.js","fqdn":"sports-www.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:43.268Z","timestamp":1779752983268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /static/js/81.b58ee60d93d1da1ebb69.1777434674994.js HTTP/1.1\r\nHost: sports-www.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:43 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 29 Apr 2026 04:13:54 GMT\r\netag: W/\"8ae141fbae56f084a9672ccd1a75f200\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: guQEqYhhl5MuoLfnhk1wy2WSrbPQtikP\r\nserver: PWS/8.3.1.0.8\r\ncontent-encoding: gzip\r\nvia: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront), 1.1 PS-NTG-01Dfw120:3 (W), 1.1 PS-NTG-01wPO228:19 (W), 1.1 PS-FOC-01kD0116:10 (W), 0.0 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: FRA60-P14\r\nx-amz-cf-id: k8E145w3NW8cNFsnq5Hby0Ar_u36ckrrRMgUz21C-Yw1N9HB-49n6g==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nage: 25220\r\nx-ws-request-id: 6a14e017_PShlamstdAMS1vj92_47818-45164\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1130776,"size_decoded":224696,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64985), with no line terminators","md5":"d426987da7519f2f9612e3762f736d32","sha1":"689493f96e3a73f07e2b2d2084982bbf61ee79dd","sha256":"7a092cf6e7983e4b9ffb60ea2878ef705381e62b4dfb3b0cbcc55acc0be8b20b","sha512":"fff80622a2868c6a7c11f5ef2d2155af76b1e9582eb1cd77558e0725d4ec31ab3de3013b8adaa10ba1971718a8554e500d234b40386dd1885feae0094e545752","ssdeep":"12288:Sh3qBO7apBLFcqiBjF5eDLktJ9lZ6JVF+oiEBt7aLCanco4mN1vLSb+:Sh3qBO7apBLFpkX9lZ6JvSEBU","tlshash":"2d35c71a3087f67a4d9e9011152a1528a0752fd85409c0abbb7cdee49be4d7b326ff3c","first_seen":"2026-05-25T23:50:21.471416Z","last_seen":"2026-05-25T23:50:21.471416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":9,"connect":18,"send":0,"wait":20,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/css/1.4cde3960bd4ed989774d.css","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.180Z","timestamp":1779752984180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/css/1.4cde3960bd4ed989774d.css HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 63811\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: W/\"bc2af4985060f124aa0eb6824758ec52\"\r\nlast-modified: Thu, 29 Jan 2026 06:18:46 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 50d3c168a11bd353aa5b60007be33c4a.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 2b32f0be4ad3b698316153b293c8d394\r\ncontent-length: 3174\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":12833,"size_decoded":3653,"mime_type":"text/css","magic":"ASCII text, with very long lines (12833), with no line terminators","md5":"bc2af4985060f124aa0eb6824758ec52","sha1":"2e3107e3cfa167a429e2439c58fe5458e79168c0","sha256":"5504477fe9826ef8e325527917e614166806e9ab27adcb451bebe8863b6c4459","sha512":"78d99d87043a4609fd8f961fa14a715c83ea2654cbc779c71a61fcdcc2d800579fbc2a05b349ff5b64f1e0b20ad70b1ceaf6b1ab9cef4a5550be80311fda62ab","ssdeep":"192:phjvI8/xyCVGkSKmjgC+BonmNMUCuJFYMKObmLtculdS3rewCYHV:nGnE/7e8","tlshash":"d0425380fc9e641fae77d610c584e6de685ab38359ee4335805fa635ccdf8c23a5b188","first_seen":"2026-01-30T18:02:02.56133Z","last_seen":"2026-06-10T12:29:03.125972Z","times_seen":86,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20260522/4f408d604e1bbf8b--1540x1064--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.822Z","timestamp":1779752984822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20260522/4f408d604e1bbf8b--1540x1064--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 116304\r\nlast-modified: Fri, 22 May 2026 02:12:39 GMT\r\netag: \"42a22a8245fec2b251d243ff7acfaf81\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 91ea4800b714e4bf02bff4b99c0dad5c.cloudfront.net (CloudFront), 1.1 PS-CZX-01bnS57:18 (W), 1.1 PS-FOC-013M3119:2 (W), 0.0 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: 6uyx7E3XkBxAlVbvjIRm6L0yk0ECnvJsrxpUclhHwRd285MPxzLvTg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nage: 49493\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45258\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":116304,"size_decoded":116978,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0174ec234a0206f6fd8919c2ed8d3f5d","sha1":"88764232e2f3cdeaa9a9a2cebb936ecef4fb94c3","sha256":"d399d43d6ad50a3ae6a596b1b5d022e5905c383d20db55140d3872ae0133e3a9","sha512":"bc1050dfc47c008368d7d4f4fa76cc1def635749ceb45ef29e7e81d101a656b9481e52af31d8d2f2390bfba35100e806b64bcb10ca9f00160824e89bbc102671","ssdeep":"3072:06LbF/LBa2RG/TiNUkjCydOLagg2qwn6hIXy33Bjaw6vEdAgi0e:0C02sT4oGlwnNC33BjanvEO10e","tlshash":"2ce312e546bd3fc7dbb8113cf8ea9b896ff917a1c301a0adb59c549da8c74f21960401","first_seen":"2026-05-25T23:49:00.349658Z","last_seen":"2026-05-25T23:50:21.47299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240605/76c2ead627a7ba05-0x792.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.722Z","timestamp":1779752985722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240605/76c2ead627a7ba05-0x792.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240605/76c2ead627a7ba05-0x792.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45370\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer7.aa3ab4a.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.779Z","timestamp":1779752984779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer7.aa3ab4a.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 81194\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"aa3ab4a14780d7d532cee8070aa86774\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 5e4382c6ab9f1c9abcd4f0ccd698f9f4.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 54f7bbc8618daac8095a20e7929d6004\r\ncontent-length: 1325\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1325,"size_decoded":1801,"mime_type":"image/png","magic":"ASCII text, with very long lines (1770), with no line terminators","md5":"df87e97c98cebe2ac7454f3cd75827b7","sha1":"3dbe4a0ce51dcb867964737840851eed52b2f49e","sha256":"cb5f3f8ffcc531145d6f912aab45974fb08fc410149221b0b6c68bd00ef281a4","sha512":"3e820282a3a1a4a504ad59e67d80ee176d749c74409a4da1a4aaf5635af6097a52a40bbc910cacfab182e6660fe83533325d67ee14ed71c354ca7b36071cf73d","ssdeep":"","tlshash":"2231e9f2098124aea9bbfc4ff66c00239f647643450579123bee0355d42a5625f8db2d","first_seen":"2026-05-25T23:49:00.340218Z","last_seen":"2026-05-25T23:50:21.473804Z","times_seen":2,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/app/app/website","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.655Z","timestamp":1779752985655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"POST /_data/app/app/website HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nContent-Type: application/json;charset=utf-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 276\r\nOrigin: https://aaaa5115.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: e2bb2873efd209734f587cbc5eaca8a0\r\ncontent-length: 850\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1057,"size_decoded":1156,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text, with very long lines (1069), with no line terminators","md5":"77d1864e6ebee144623a5f0eaf4d4647","sha1":"34470abab8eca82d1a3d3de07dbcde0f8d4ccfe4","sha256":"a245b6a55d1fd8f44d83451b545b0549eba2068f99b87323488e7d790996fa76","sha512":"36c21b031068b5f4e5762371a2e3afe48b034829973ad2f34c720ca37944556e63de5a1aa6df39ae1374d57f648626087f51f58e2285673c54ae702bad6642dd","ssdeep":"","tlshash":"ae11e934ba2ace603d4444fd11f13f8501d5162aa53310b7d86e2bcce3593e3504da96","first_seen":"2026-05-25T23:50:21.474511Z","last_seen":"2026-05-25T23:50:21.474511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/0bc44554888a29f4.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.962Z","timestamp":1779752985962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/0bc44554888a29f4.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/0bc44554888a29f4.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45402\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240310/9979c4fc0bbb638c-1.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.353Z","timestamp":1779752985353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240310/9979c4fc0bbb638c-1.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240310/9979c4fc0bbb638c-1.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45319\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221217/e759da14b68e88f2.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.355Z","timestamp":1779752985355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221217/e759da14b68e88f2.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20221217/e759da14b68e88f2.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45325\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/04802ed2c2fd797e.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.746Z","timestamp":1779752985746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/04802ed2c2fd797e.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11290\r\nlast-modified: Mon, 26 Sep 2022 17:52:52 GMT\r\netag: \"25ed651eeccc5745250f6df3716667a6\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 4692304470b2d7a09704a5e8dcf231dc.cloudfront.net (CloudFront), 1.1 PS-JJN-015mq212:5 (W), 1.1 PS-000-01xz346:0 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: ugsC1b-HbtQ7MynJO1C-9IH0_xy8NXgOzrbPAqSscE83R3woe_ZfXA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45376\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11290,"size_decoded":11950,"mime_type":"image/webp","magic":"ASCII text, with very long lines (15056), with no line terminators","md5":"7d98b58c7667c0fe7aa4a4e91a723258","sha1":"34852e9368b3afe6c1592d572dbea49ef9d463a9","sha256":"bc994896b16becfb58d61fbd4b565fc85615fde34bea8162b491eeaa980a5535","sha512":"e6102e972a13a1cfcb77049611bcaee790a5932b98c6608c8221b0162f48e2f97271291b418baeed9f80342a19d210c5fae8294ad258d128e1c016d1088ba78c","ssdeep":"384:LnsiXFWwfJbGOYbYCqNRpITLzx23FK+CODAhnc:LxXFWwfJbGOFpIvA5Ae","tlshash":"75626df0d64194db2b9594fc6cdf0441aff4817bc43b8226bca565ee8127adbfc88a11","first_seen":"2026-05-25T23:49:00.26167Z","last_seen":"2026-05-25T23:50:21.475461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/cdaf922c4fed8ffe.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.966Z","timestamp":1779752985966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/cdaf922c4fed8ffe.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/cdaf922c4fed8ffe.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45408\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/b5bd024b1d63fc68.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.969Z","timestamp":1779752985969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/b5bd024b1d63fc68.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/b5bd024b1d63fc68.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45410\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20251218/e5b916f85057cf21--3840x1200--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.237Z","timestamp":1779752986237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20251218/e5b916f85057cf21--3840x1200--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20251218/e5b916f85057cf21--3840x1200--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45442\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/activity/popup/list","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.657Z","timestamp":1779752985657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/activity/popup/list HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: 170d20be3db4bb715da48aea794c9009\r\ncontent-length: 3379\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8926,"size_decoded":3686,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (6571), with no line terminators","md5":"ea00b582bc22a4547da4d1b87c312bdc","sha1":"5a8e12f73554753eef4b3fbce9a6f23b4f892259","sha256":"43713b4536482ed3e7190b7cf18e27198caee9892eca87d87b4ffaff5a5f31f9","sha512":"e5d3605be6ca8228e5b26cadc5811235d376e3f881c757999a30be98cfc21db851049fc9bcb0d6ccfa9879aaed9e13fd69fc9ad9066338f719e6314af4db1374","ssdeep":"192:SykkPtA2L8yQLXmt3qe7pxb5OP6hMZqhJociqhK1x4Z:tqy/jpNocbZ","tlshash":"a712b89354a9d6e945a824db11e19f6e298102dfd4e26f74f3f3f8384ad0878273724b","first_seen":"2026-05-25T23:49:00.287056Z","last_seen":"2026-05-25T23:50:21.476194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/css/11.fceef766b55be649740d.css","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.184Z","timestamp":1779752984184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/css/11.fceef766b55be649740d.css HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 62377\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: W/\"77179ef6a4e93ef1ce9a53020501288e\"\r\nlast-modified: Mon, 17 Nov 2025 06:14:29 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 ea6b327b563cc7baa01bb107f3eeb0dc.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 203ac44f9d6eb63c392e26dcd828ef61\r\ncontent-length: 3586\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":22787,"size_decoded":4065,"mime_type":"text/css","magic":"ASCII text, with very long lines (22787), with no line terminators","md5":"77179ef6a4e93ef1ce9a53020501288e","sha1":"558d027258fe344788446d57e92ae9ba80628d4e","sha256":"628f9a82a7da796f3c26f2ccd3ab8de93b6d3fbf5d6892b11b1460740a2f9dc4","sha512":"52cf955eea10a1172f185eef0cd6a0ba114986aa728879414d8ff04ed8932891e37dcc3c8acce069bdbe4a652f2589f427bc039615a6bc7636de097c15f62a4a","ssdeep":"192:P2R0kNLMSvShEqdS5fihlSlHlMlKlvl2lSlolllAlQXYBd3FQpfl3+3z7+50:eWkNLMSvSG+8dA0","tlshash":"88a2bb11230e359a78b3d549e1d8aef8208a53839557e9acae733d6facc70d1f57b204","first_seen":"2025-11-20T09:38:01.853128Z","last_seen":"2026-06-08T23:49:32.931977Z","times_seen":97,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/js/367.0ee9c881e78af3160487.1777434674994.js","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.755Z","timestamp":1779752984755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/js/367.0ee9c881e78af3160487.1777434674994.js HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 82570\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: W/\"f2cecf683b01d24e7ef79c9963d1a2bd\"\r\nlast-modified: Wed, 29 Apr 2026 04:13:52 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 810952bb5a6856a2df6bb22a5f094b64.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 6ebc08c927fd2c1c0ae49cf8040a27fb\r\ncontent-length: 670\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1428,"size_decoded":1155,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1490), with no line terminators","md5":"0c520e54e011ef07d410d4a974045156","sha1":"a697b738128ecb0ed788992af8303eeff82e7c16","sha256":"a1d15ef5c709b625f766da97f9a9d1451f434b99ec13440bdddb2feae9697369","sha512":"dedf3e39756b82334a9904cdb3bc365407c8786ab3490f6eadef9abe01c23c45f9279129403eaf4cf02f4f5ba328f0cd598731297111964fc4ce02246b34ae86","ssdeep":"","tlshash":"183148bcab4053d463390625911e5cf710bbd0e42f8a549046fddb8d9abdbdb621dc0d","first_seen":"2026-05-25T23:49:00.330384Z","last_seen":"2026-05-25T23:50:21.477464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":318,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221110/59b5d215d94b707b.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.793Z","timestamp":1779752984793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221110/59b5d215d94b707b.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20221110/59b5d215d94b707b.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45249\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230511/ce0ec784c950df3c.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.359Z","timestamp":1779752985359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230511/ce0ec784c950df3c.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4947\r\nlast-modified: Thu, 11 May 2023 11:57:41 GMT\r\netag: \"fb6937eb58ca3afb2d007b51c379982c\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 8104408086379f0d5dc3491249134cfe.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:1 (W), 1.1 PS-000-01SuJ115:3 (W), 1.1 PS-000-01oRY50:10 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: ZBnUa9zpsyiHeJjEDWrXXVMwM8N_JlajC5UxlcIGttufsrvRqkVaWQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45329\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4947,"size_decoded":5632,"mime_type":"image/gif","magic":"ASCII text, with very long lines (6598), with no line terminators","md5":"b75010b4752502e1b02c0e416ecb50f2","sha1":"a702175ef09702d36cbd8db0ee4cccde6931268a","sha256":"29e499a70d02e7b5e899908db4dd2c753e568fe31ae738cc4c1493b2924f8bee","sha512":"275994cad2edc0ad3212914ea35ba9681a82d8ab471e46fb6e37c51991f4a21f8420abd7fa47e9fe39f35463960ab3a2677130fdd8744f1d75b2df63c87035b7","ssdeep":"96:05ezb9iWvlBkRPunhSgtmGjYkoj2Fysjk7k5TomowVyD9jJJGxM3s9aJL75dGiv:1RvlqZunhBmGskoSysjpp/yJY/a9757v","tlshash":"8ad17cd3ea13e6bd9f65cca82f87a8a20c8789515d191dc9d05473af01993f063e043b","first_seen":"2026-05-25T23:49:00.301266Z","last_seen":"2026-05-25T23:50:21.478132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221217/e759da14b68e88f2.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.395Z","timestamp":1779752985395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221217/e759da14b68e88f2.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34154\r\nlast-modified: Sat, 17 Dec 2022 08:26:03 GMT\r\netag: \"9b2ffa210afe5566bf73959b9ca22fc2\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 35f4c8a21c0e4e3e0169f8522e3b4fa4.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:16 (W), 1.1 PS-HIA-01rHo246:12 (W), 1.1 PS-000-01xz346:0 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: qm2rViAuh7ItFTIwXZncozJSjb522z2Dtr1DMxqV1DR3yMP8uCjMdA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45345\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34154,"size_decoded":34842,"mime_type":"image/webp","magic":"ASCII text, with very long lines (45540), with no line terminators","md5":"8ac5b05c8c86382c0ca5e05398d3b7d0","sha1":"69fe8bab7ab72ad8c0136db45ca6005b779662e5","sha256":"036b7be0a12dd130fb3dc62f245c2e6e8de705ecd5563cf05381c7619a2d20e0","sha512":"6cd9761cc0c337ad17ee1e49abc707a3423aca148000fcff044c96dd1862b9a0c6c7df31bb9570e47510999d3e173d581a1c1afaa64e64fd9b56f0e2ade0580f","ssdeep":"768:YGpnjesUGuh8iEXG2cfDcsogBMsfA50lt8eNNUsI6docnpx0oNxX+6hirbsYmyGH:YG+Go8/W2cfCg6HItzNU1HcpVXO6QsT","tlshash":"311302a31b3290358d99d19fce0546d91d8c88cbac987fcef6895e239c71d5a14bb22c","first_seen":"2026-05-25T23:49:00.35145Z","last_seen":"2026-05-25T23:50:21.478843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/0bc44554888a29f4.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.015Z","timestamp":1779752986015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/0bc44554888a29f4.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1836\r\nlast-modified: Mon, 26 Sep 2022 16:55:48 GMT\r\netag: \"361d2b8c7504949eb79dc1bb235302c3\"\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 ac502c9dd4c6e702a01d1a66342b3c84.cloudfront.net (CloudFront), 1.1 PS-TAO-01fQx210:16 (W), 1.1 PS-HIA-01dVn197:17 (W), 1.1 PS-000-01FNy53:13 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: GxwRIvWDZMd68Og-YCs922AJvr8C0043bFzn1MzZ8cxON0M9c8uDjA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45419\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1836,"size_decoded":2487,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2450), with no line terminators","md5":"b9239ba8c70571e3c6302636ea7e14f8","sha1":"ccbf071439c4d56ce0132a676a8daba1b1d3cadc","sha256":"73593c6a3a7efe14a692c3e4fb39992cf75cde68faf8bcb2b4c52a6f112ec5ad","sha512":"78c400660d1cc49db6f6b302c7b0952b0a26e2c0894edca1df17dbf09bce555d7a5e633ae22cd44fd8085417074efd4c7036a63451b06b9c62fd62ba12e84aac","ssdeep":"","tlshash":"4b513adab3f2f64024b670faa9d07e4c9c0ba01e19b438471069988f06d9bf8597f531","first_seen":"2026-05-25T23:49:00.358748Z","last_seen":"2026-05-25T23:50:21.479568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sports-www.badendental.com/static/css/81.7031d1c5b520d1339912.css","fqdn":"sports-www.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:43.265Z","timestamp":1779752983265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /static/css/81.7031d1c5b520d1339912.css HTTP/1.1\r\nHost: sports-www.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 06:01:15 GMT\r\netag: W/\"d57d91dbe55c972dfb151cb2d87a777e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: l1Zn6eMFd0lFDhHR9edAf8ZUKMFPsTYN\r\nserver: PWS/8.3.1.0.8\r\ncontent-encoding: gzip\r\nvia: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront), 1.1 PSjsczsx2kw13:10 (W), 1.1 PS-HIA-01VH8172:13 (W), 1.1 PS-NGB-01wHk176:12 (W), 0.0 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: FRA60-P14\r\nx-amz-cf-id: X0uFfh5TJEWTQyV_rT8hu6bgZivFhGlol1yWtgjjrJiE5bp7TZyyCA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nage: 37815\r\nx-ws-request-id: 6a14e017_PShlamstdAMS1vj92_47818-45146\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":974706,"size_decoded":146794,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d57d91dbe55c972dfb151cb2d87a777e","sha1":"3b28ceafc2864ef7d42660ac4d017cf263269096","sha256":"7b3faad4473ad730b8d395ee385db026e67fbb9375de62848b223fafb4a1bdd8","sha512":"20f3334e5bc49f8b5e107200c7d360701422e04676188c5b6be68191da738a90811955827c44f335c299362db6450c5ba0b80254eb47a3b8273f73fe8707ae3a","ssdeep":"24576:85Kmjo8XdbIx9RaAEWXANZYUrX/rOeC1hTTiVQc6ScpaMpowop0AB:8sm2UrXytop0AB","tlshash":"f425a270b62e301a3177c66d6044b98d2c28f273c25766fdaa92b56dcfcb5813b67309","first_seen":"2026-04-11T19:20:47.165717Z","last_seen":"2026-06-08T23:49:32.911187Z","times_seen":23,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":12,"connect":18,"send":0,"wait":19,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer6.57d630e.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.778Z","timestamp":1779752984778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer6.57d630e.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 64446\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"57d630ec420ab63302302de77bef1baf\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 46fff4ca3e25200232e6ccba67aad7ce.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 95023d5602236f75d4f643b9dccf4572\r\ncontent-length: 921\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":921,"size_decoded":1396,"mime_type":"image/png","magic":"ASCII text, with very long lines (1230), with no line terminators","md5":"67fa7c97843e5683084556a401134edc","sha1":"39a8882cd034647e59f44350be2a6f46932d5dc8","sha256":"f401a8c60216b80b502817522e5c5d5642dfc26eca2ec04215e850ff1d3f3a16","sha512":"d2629581cb8320a26c5f2db40e4dd3639764ddfb4b7d0eb662dac88b17bb6e5fdfc10f83503ae4409c1727e7e68619ebe9a33d4c814a882b1f296000e97a09a6","ssdeep":"","tlshash":"7621b775a03c1e46c585044b672cae134dfe62357201bc28e4e6238a42504f15f58f92","first_seen":"2026-05-25T23:49:00.269367Z","last_seen":"2026-05-25T23:50:21.480865Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230826/9c06e8e80df05296-1.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.357Z","timestamp":1779752985357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230826/9c06e8e80df05296-1.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20230826/9c06e8e80df05296-1.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45326\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230511/c262b94e48e87357.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.385Z","timestamp":1779752985385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230511/c262b94e48e87357.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1910\r\nlast-modified: Thu, 11 May 2023 12:07:39 GMT\r\netag: \"962bc1cb2c13d932aa60c15a9fa61277\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 6b6864bce40e8c6517571357636f0dbe.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:5 (W), 1.1 PS-NTG-01wPO228:16 (W), 1.1 PS-CZX-01vAA43:9 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SFO53-P7\r\nx-amz-cf-id: 4nw9FyUrtofz3HlbJ8nUtdYsidtEXnoxkvMUikqZ2v88aVaqUueKvQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45337\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1910,"size_decoded":2595,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2550), with no line terminators","md5":"95d53331bcb2400473635d3e66449d22","sha1":"bb8e56322c636ceec97ae30b59feb6c0de608ad9","sha256":"52a23100006f2bdded3927932a92733448755ef08f4e164cdd1091a80fb44fbc","sha512":"2afa073123a6377e5b0e2ff575da58247024b61b4b4a66c7d6cba2cd2024bce5cbc1b9d554496bce1fa2767fc33b493d12953e801c5d703ccee063ed2988559f","ssdeep":"","tlshash":"445139a0446280e9ed46e5c8e3707b33ecaa15a6e998cc0224f46a8a555557f4cbb4ca","first_seen":"2026-05-25T23:49:00.248232Z","last_seen":"2026-05-25T23:50:21.481526Z","times_seen":2,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221218/4816a68d6a4965d0.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.393Z","timestamp":1779752985393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221218/4816a68d6a4965d0.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32220\r\nlast-modified: Sun, 18 Dec 2022 13:23:18 GMT\r\netag: \"13948c4eaa73c5d23276f6ed76444bf5\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 1401c4844b3ea759244fef5091fc307a.cloudfront.net (CloudFront), 1.1 PSjsczsx2em10:2 (W), 1.1 PS-NTG-01aB9225:11 (W), 1.1 PS-FOC-01rf4118:19 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SFO53-P7\r\nx-amz-cf-id: EVKkBI178iVHsbSudnRV_ntswhORxuMMaDyCjWTYsAp7yR9oLKnyMA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45343\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32220,"size_decoded":32908,"mime_type":"image/webp","magic":"ASCII text, with very long lines (42960), with no line terminators","md5":"8cf36ed1754099530e24026184d88a37","sha1":"b94436eebe31d1df62e60d19c2801019852c38e9","sha256":"79f29c6878d81057c76dc6074204b957b43f97ce40ec5b40c39a1aa6a901a05b","sha512":"e0a53179b68cebe8f53451eed3be66f9c660c6a8901ba406a8b7294334b83f05a227d3a88edec5c29c1e0119d47d2621c632a51ec68c7a27d9f5c6b1d9dafb2b","ssdeep":"768:K8Z/CHQ+mj7dhFVO50b4fGrfTHt9QxwsTG4yOiBgyRrmljBh9+8GKQmY:KkHVjBr4fGrfZyhTTy3xm1B3+7x","tlshash":"4b13026f566141a226b7706b24366f832c834e8f00bde4ae37c57c983dad383475d95c","first_seen":"2026-05-25T23:49:00.24957Z","last_seen":"2026-05-25T23:50:21.48228Z","times_seen":2,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/522c9de4645c0bd1.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.742Z","timestamp":1779752985742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/522c9de4645c0bd1.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11336\r\nlast-modified: Mon, 26 Sep 2022 16:39:49 GMT\r\netag: \"0a199cd5569ad20bb9ba117b4e884028\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 d378e69f0d86636650cb287a06732cf6.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:13 (W), 1.1 PS-NTG-01FLw54:8 (W), 1.1 PS-NGB-01wHk176:8 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: HDpAFZdHny5R_cMnFPT7v4fMZfdIPddLH9ztV_0GTjY_c85DbMKdMg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45375\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11336,"size_decoded":12022,"mime_type":"image/webp","magic":"ASCII text, with very long lines (15116), with no line terminators","md5":"3b165acc261f272ca08dab20ce6af01b","sha1":"07062932d60d9514097894ee3ffc68484455d437","sha256":"f10018e1af878566382047739ac2fe13cb6d660f566c629b331f10c726c40f96","sha512":"0a43d9a734846d2d387c546389b642e71470b536f6d18abdeef2a95f8af367e84a32affbe9de02ebb36573f9724937cb19ce1bb5a385d01d551428c436f871af","ssdeep":"192:aHCdEAbnd2lfxMNc6WzavilsCM/+2Uycmf+wc7XlkM39FuQPw:aFA521Kc6WzavnTG2UycbZ5kQ9FuQPw","tlshash":"a2626df01c485e972e1db1ca6f9441569ea442d3ec322ba2bcb63e775011d87bd84f63","first_seen":"2026-05-25T23:49:00.304695Z","last_seen":"2026-05-25T23:50:21.483004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240605/76c2ead627a7ba05-0x792.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.749Z","timestamp":1779752985749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240605/76c2ead627a7ba05-0x792.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36100\r\nlast-modified: Wed, 05 Jun 2024 07:43:05 GMT\r\netag: \"964dd2b300a1bdbe3a0713d357516071\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 f1f84e9c4ec70d1867c073679a0f63ec.cloudfront.net (CloudFront), 1.1 PS-JJN-01d6F200:19 (W), 1.1 PS-XUZ-01OGM45:15 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: C4qmFtwo7rzWJZLn6941El8w3RJyTG2OkkDqVQeayM_gcCXiBcaA7A==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45379\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":36100,"size_decoded":36762,"mime_type":"image/webp","magic":"ASCII text, with very long lines (48136), with no line terminators","md5":"a4c9195c0907b3f1f303d04d3c0fc5c8","sha1":"1c725e0957058100ef2edb3f846a56dca72b8ee9","sha256":"bda3e1b62177e86eeb8d683125933effc629a526bb9a5537cec8bf162dc62287","sha512":"e3202c3d0ff07d1366ba2d1f0433cc85bace6625666c7f7b82f70566336346483380a621e0bbccb8e0bc3cc317cf43ab92f913275a72bfa6e466ceac53cd8c46","ssdeep":"768:vwm2GgNbKOZDMUeEe8pfuLSN3dHW2BaD5EIZtbVcuHKy3v1mfnswxiSCtbAzOx6z:4m2Gg8OZoxEe8p2mVdHW2BMf3fl/M0Xe","tlshash":"9b23f239c8c30db968f14f25bd185ba39fa53d1b9526f953385024e2c56aacd0b490bf","first_seen":"2026-05-25T23:49:00.262628Z","last_seen":"2026-05-25T23:50:21.483698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/65df676df0e272f5.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.017Z","timestamp":1779752986017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/65df676df0e272f5.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1918\r\nlast-modified: Mon, 26 Sep 2022 16:59:46 GMT\r\netag: \"35d62cef9df9436a824c356ea6307925\"\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 6b6864bce40e8c6517571357636f0dbe.cloudfront.net (CloudFront), 1.1 PS-NTG-01Hfz98:10 (W), 1.1 PS-NTG-01aB9225:15 (W), 1.1 PS-FOC-01kD0116:0 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SFO53-P7\r\nx-amz-cf-id: sdCLrZsb4XvD0ELDXK3CKBJUJ7lS5uBOAv7rAZI-Y42pjkwVHeklWQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45422\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1918,"size_decoded":2568,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2562), with no line terminators","md5":"b28bd700fc68615ff0794fb25c23314a","sha1":"a9bded1bc9571c0b455f743ed1b0348eb236f4c1","sha256":"dd9395dee9644143eeeadcc8a4220a65a9bcf317f85c85f7e459e0fc4836ca3f","sha512":"a46878a191cc0b358c76ca1ce41ad04e5d282fad1282888378b15eb78480444e412e7e996bd11b395b02315d32aef4f1616ce35985665a5f2ed357362fc1f51f","ssdeep":"","tlshash":"d35119dc1c92441ec7d5772466c1a48c1d16bc77bd2d6f22d0ef902b94c32a08c7c69d","first_seen":"2026-05-25T23:49:00.331189Z","last_seen":"2026-05-25T23:50:21.484446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer3.0dadf78.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.775Z","timestamp":1779752984775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer3.0dadf78.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 62510\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"0dadf78af9dfdfe5ff26f30c0bb4bd63\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 c0305bfcda69700a7460eef1a90e7684.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 90ffb4391c42984561dfef2295ec42e6\r\ncontent-length: 991\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":991,"size_decoded":1466,"mime_type":"image/png","magic":"ASCII text, with very long lines (1326), with no line terminators","md5":"49c435fd52dfb5edb88c1ce4a5419589","sha1":"5736e6155e977edc3a4602c8a4c491b6714e2438","sha256":"2c12452ea43f2cb6b6f17690df0c7f799758f231ec0f67a6acd39bbf43da47b5","sha512":"1963cbc76e94cbeaf13834d5f5cf51a72c5eadde266001259dc8a48d1f8c5bad1503f762cf95b4a9e0f7561552b25bbad493a97c2b33b1d0f99267f86f17fef0","ssdeep":"","tlshash":"8921b37212c48914328f07a4b06062c92df81e889e4a8c8bf78c69a854f15e3f849a62","first_seen":"2026-05-25T23:49:00.360292Z","last_seen":"2026-05-25T23:50:21.485254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20231129/2e1cd9895056c10a-1.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.352Z","timestamp":1779752985352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20231129/2e1cd9895056c10a-1.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20231129/2e1cd9895056c10a-1.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45318\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240605/38c66db4660ec510-0x792.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.747Z","timestamp":1779752985747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240605/38c66db4660ec510-0x792.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32848\r\nlast-modified: Wed, 05 Jun 2024 07:29:35 GMT\r\netag: \"25af951bed2cdc68ecc7f6a67c8c1e52\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 35f4c8a21c0e4e3e0169f8522e3b4fa4.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:2 (W), 1.1 PS-000-01cgl116:18 (W), 1.1 PS-000-01FNy53:3 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: 4NF0UwJZkbnsM7GNVeNDfQF6RdU-iDpZanmf0rePQUakMdR7AkI-mw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45378\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32848,"size_decoded":33535,"mime_type":"image/webp","magic":"ASCII text, with very long lines (43800), with no line terminators","md5":"88dcdcdfedc208c8ace63feed269b34c","sha1":"6dfdfb979ada015ebae92ef1434c594aece4f823","sha256":"79184f308bfa731beb2a4b24a8df4ab8722cfe1ff4d995eff0b45e0a9b7dfef5","sha512":"4c94fbde08c00a22bfe4636f91026996d8167e56c8d93d935e61ac31ef90506bbf9763519f9ead0bc4ffd6b9f94abe2759b9afea62477719bad71ffc834db02e","ssdeep":"768:D8H+SKdp8dBETdk5agpCYZ7TIfIVq1Mi10/jImMrrSz5HWlK9fau1VH5P2kd83:DWn5ETq5amZ7MQVpi10RMCV2syiVHp2z","tlshash":"a713f2fa9f50b949b7e11e4aa6261b289c53ff0f0903ba5f60f374ddc363818209e144","first_seen":"2026-05-25T23:49:00.354592Z","last_seen":"2026-05-25T23:50:21.486007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/cdaf922c4fed8ffe.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.018Z","timestamp":1779752986018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/cdaf922c4fed8ffe.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1694\r\nlast-modified: Mon, 26 Sep 2022 17:09:21 GMT\r\netag: \"43182af78664c32514006e3fab5260f9\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 a0e6840b8e183d8f159cb194a62c98f8.cloudfront.net (CloudFront), 1.1 PS-TAO-01f66214:17 (W), 1.1 PS-HIA-01dVn197:18 (W), 1.1 PS-CZX-01YZs45:13 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: 2syvIZjzN9rr3f3F_oDxm7oMV1vw-OexotVCPL9W_3NKp6HVs7XvwQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45424\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1694,"size_decoded":2383,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2262), with no line terminators","md5":"35ebc8ef8ade7e24aa3dc08c560ad3b2","sha1":"d01f1d2862eb546c5f784dc2cb45970d36d000f3","sha256":"5289c9f77a180d38d8126b23d0210a5e4c7252ec3fc807a11ed33380d211b983","sha512":"74729c3a9ef52fe03657c4f5753dc33778eb32ec140e0fe68a09624c673bc5c2765eddc0d2c3fd31b58f7664ab74efdabe2ff89eef8812288539cbd9cff03fae","ssdeep":"","tlshash":"48414cf1220465675e7e4a8c4ecc4ca37f6048c6e4af8c467552d59990c50b3af6e3fd","first_seen":"2026-05-25T23:49:00.327162Z","last_seen":"2026-05-25T23:50:21.486739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250116/2d7e584818d8200f--3840x1200--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.242Z","timestamp":1779752986242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250116/2d7e584818d8200f--3840x1200--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20250116/2d7e584818d8200f--3840x1200--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45447\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250122/fa2da6577966ae47--3840x1200--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.243Z","timestamp":1779752986243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250122/fa2da6577966ae47--3840x1200--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20250122/fa2da6577966ae47--3840x1200--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45448\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250820/237acb03491f86c5--3840x1200--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.244Z","timestamp":1779752986244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250820/237acb03491f86c5--3840x1200--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20250820/237acb03491f86c5--3840x1200--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45449\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/custom.ca4dfac.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.770Z","timestamp":1779752984770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/custom.ca4dfac.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/static/css/11.fceef766b55be649740d.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 82569\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"ca4dfac62765632f1db42828f8a9c8e4\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:55 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 c0305bfcda69700a7460eef1a90e7684.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 0142f1dc0fa94e5d841b9c255bf1001e\r\ncontent-length: 3113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3113,"size_decoded":3589,"mime_type":"image/png","magic":"ASCII text, with very long lines (4154), with no line terminators","md5":"51ae0b40d98dbffcf188282528134cdf","sha1":"24a1a504a356f69c558f2958f1cc34b22c768de1","sha256":"b02071b3cd9b1de6f47406b726c62ab1beaa60b302da6fb0e097a7d8bc0c324a","sha512":"b03af1f46872f3111b6886ebbdc83352b962aa553c5db786bcf6af1a1574a629ef720a843bc8a91935656adeef337176d9f09e04057797bcc81cce3973d447c6","ssdeep":"96:YIMSEIIDvV9xsyBqjokm1zJGyd/Io+LrbDk9xUGhf494d4Ttvur:YIyDtsyBqcl9GMUbWUGmN1Y","tlshash":"d1814d177ebe151e75b000309e08264b7abcd87f295e29631a27722b983a3940306da7","first_seen":"2026-05-25T23:49:00.342114Z","last_seen":"2026-05-25T23:50:21.487417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221006/17d119e2951ac4e5.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.773Z","timestamp":1779752984773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221006/17d119e2951ac4e5.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20221006/17d119e2951ac4e5.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45245\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer10.98d95e4.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.780Z","timestamp":1779752984780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer10.98d95e4.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 73949\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"98d95e49752d41144dbedf36437c04a2\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 6439adb92b18490836e57157dfa863ea.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 020d8925efa33b788f94995fdf62e3fa\r\ncontent-length: 862\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":862,"size_decoded":1337,"mime_type":"image/png","magic":"ASCII text, with very long lines (1154), with no line terminators","md5":"8fee9b40d6109f92044e01174e2b50d0","sha1":"86905835689af1b36e9af955da0779a053dbb011","sha256":"d917341182ad6ab8eb6ac96c5afef63910fff759de79de2f47a8c6138e9367d5","sha512":"23373b9e49e55595237b8b7699ee8328d4d1cb981c8a7cef3c22ce758b93dbb2194cfbcf8e5da2e40547284d38f906c1146459cacfa8d030ccfe012937089df4","ssdeep":"","tlshash":"3621a77b7782429710c1ac302d439d668dab06175929dc926f10232e29cb9f68e4ff50","first_seen":"2026-05-25T23:49:00.278864Z","last_seen":"2026-05-25T23:50:21.488164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221006/17d119e2951ac4e5.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.799Z","timestamp":1779752984799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221006/17d119e2951ac4e5.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 376\r\nlast-modified: Thu, 06 Oct 2022 03:11:23 GMT\r\netag: \"399eebdc4b1c84b1971c7ece8255123e\"\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 3f53c5d558c7725105f3837916f8e5c2.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:5 (W), 1.1 PS-HIA-01oG8155:7 (W), 1.1 PS-NGB-01wHk176:8 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: VJ5v3S-_0AVoC-imKYCClJeu6JwZS8goHTYScMu5ZfxacaABSpo6fg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45254\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":1022,"mime_type":"image/webp","magic":"ASCII text, with very long lines (506), with no line terminators","md5":"c40c0360c747feba907ed4d7f3bcb52f","sha1":"314d4b7cf1fe3c0a09397666befaaa5366df4bc3","sha256":"d7f3cbfdacdaf334183da09917ac3cb87e5bc0ab61f48983e03b8ab5b85527d3","sha512":"49b9a7f1f008318e9b46f9d701916e32738e3628337dbfdd2bf694521c8546bf67639892ca8d76b7b3d5c78ecf14b44e47d02214399ddc64090b36132bf65fa4","ssdeep":"","tlshash":"0af0057d6610881bd675292c18d088349dbd346e833741c3fb6f751613c83c160a0736","first_seen":"2026-05-25T23:49:00.266189Z","last_seen":"2026-05-25T23:50:21.48891Z","times_seen":2,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230512/f55bf18bac18e51a.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.360Z","timestamp":1779752985360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230512/f55bf18bac18e51a.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 9280\r\nlast-modified: Fri, 12 May 2023 02:17:05 GMT\r\netag: \"6d6e0c6cd7feedd0739d22f14ad0eeef\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 fb1699c4cb8ff04b39762e99ca06e3d2.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:7 (W), 1.1 PS-NTG-01wPO228:19 (W), 1.1 PS-FOC-01imY117:12 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SFO53-P7\r\nx-amz-cf-id: wke_EL2Uy2v6XwNM1SKg6xcCgUMK9TkB0MMKlBy7iV_Cm0HAuk6MEg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45330\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9280,"size_decoded":9966,"mime_type":"image/gif","magic":"ASCII text, with very long lines (12376), with no line terminators","md5":"f1f79285113cec149793677f389ca502","sha1":"c9fb37a6147c58a6a343e93f8f8d02fbc9c5b123","sha256":"4e572726da9f7755ab2f8968d1752075be063f323f98bbb471ca67d28a831ebc","sha512":"8f8fc71c6915fe134e1c0ac0af469c925d094edb6270536b48dbe4cea233b0be5f8c01057339552448fbd2115a94035b56a890bb73b808f61c6fb44c3f58313d","ssdeep":"192:Drql+a5y8ZunhBmhKqwlTzo5gA4QysYNA702urwUS1aSFQBW1bzXjrGOune243bu:DrQcBmhWlI5g3sYNx251HCw1bz2v4y","tlshash":"3842cf68e246b7c6c0fe9cc0374cf352a435812306254ab9ca382187a7e537095fc4bf","first_seen":"2026-05-25T23:49:00.256874Z","last_seen":"2026-05-25T23:50:21.489672Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sports-www.badendental.com/static/siteimg/notice.png","fqdn":"sports-www.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.665Z","timestamp":1779752985665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /static/siteimg/notice.png HTTP/1.1\r\nHost: sports-www.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sports-www.badendental.com/static/css/81.7031d1c5b520d1339912.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 2017\r\nlast-modified: Thu, 28 Aug 2025 07:29:16 GMT\r\netag: \"1b59eebcd862c33a56845b3d489c12f3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JGl0CA_VudRb8lEm7LoHCdJ4Ny6klBCZ\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 932f5a4537d71a32d1c0d983ed7df1cc.cloudfront.net (CloudFront), 1.1 PS-NTG-01aB9225:15 (W), 1.1 PS-CZX-01vAA43:5 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P4\r\nx-amz-cf-id: Mh-BOx--iIdSEfsIikZUNCsadTEyjkbjLJNZi0ugDnGdsSzYtnbUPQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45362\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2017,"size_decoded":2728,"mime_type":"image/png","magic":"ASCII text, with very long lines (2694), with no line terminators","md5":"8eea0f2c135b704fae3ba2bd27a27136","sha1":"8d6b6bbe39fc425f6a1a2ed100a914a0224f5596","sha256":"3ff47c48f0104a77312a680623110e6991023a21580c93c3817aa3e3f823dc2f","sha512":"8307ab5a05a8403e57e5f2dfd5b3cec1f6915df621c52efbfc01c376d5f3667fa4ee1aaf888e4ff9e2ea547cdc452c356800c119a9f05ba64ad8dee17d86e056","ssdeep":"","tlshash":"a55159fb2b3bbd090416f024e7a530033c3a494b0c291f1b68e47b9aa05ca709965dde","first_seen":"2026-05-25T23:49:00.276092Z","last_seen":"2026-05-25T23:50:21.490451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240527/f93d3e044f71f6eb-1x116.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.725Z","timestamp":1779752985725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240527/f93d3e044f71f6eb-1x116.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 195148\r\nlast-modified: Mon, 27 May 2024 13:56:28 GMT\r\netag: \"7d9ee37839d2b4cd25feba1085bb73dc\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 67de1d9f5a4475da818c5fa4b7bf0220.cloudfront.net (CloudFront), 1.1 PS-WUH-01DME59:3 (W), 1.1 PS-000-01dCl112:19 (W), 1.1 PS-CZX-01LQk101:12 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: LWNUmELMNwkoqWPcDVZT2x-OvqhH9A_YyLd3XX_yQwUz8LvwbXCGlQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45374\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":195148,"size_decoded":195838,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9b96e08b3578b5f33a5f4307434d19cf","sha1":"db2dfeb1b1ae939fe20509785520e958a7607767","sha256":"006c5c188e4595418b162cb3808be118dd0ceffdbb00dd12debf374ecd241d01","sha512":"e0681ebe9176524abba6d12e751343c7590bf6d3e6ab3d68871f6c53c6b30a8bd7cadf2c22e99076ef70fe39adbd4d0aa0b4a247e88da193ff2439523f73613f","ssdeep":"6144:Q/nMMTxsfqHtNeIZHM1Qy5Saqza+DHwW1B2G:Q9CESIZs1qasnHwW1b","tlshash":"ea4423b8590a7974236d04f906034a2f3f263d163856a98783784f215626fc779ebbe8","first_seen":"2026-05-25T23:49:00.318118Z","last_seen":"2026-05-25T23:50:21.491154Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sports-www.badendental.com/static/js/0.06180ec16b1699383a70.1777434674994.js","fqdn":"sports-www.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:43.266Z","timestamp":1779752983266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /static/js/0.06180ec16b1699383a70.1777434674994.js HTTP/1.1\r\nHost: sports-www.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:43 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 29 Apr 2026 04:13:47 GMT\r\netag: W/\"bb29b73ff587b6af9c9a69ef8aec54d5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: mcepcy4ndhaMjZVvJwFXSfJs4ND1vXMh\r\nserver: PWS/8.3.1.0.8\r\ncontent-encoding: gzip\r\nvia: 1.1 1e6c252eb75ca2cd762cd042a9e5c038.cloudfront.net (CloudFront), 1.1 PS-JJN-015mq212:9 (W), 1.1 PS-000-01OaW51:2 (W), 0.0 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SIN2-P4\r\nx-amz-cf-id: AhiR5Uimvaxsfgit5ijV8hIpqDTPFTZFh7i0N3TXXfOe7Jg1q2bVLg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nage: 25221\r\nx-ws-request-id: 6a14e017_PShlamstdAMS1vj92_47818-45165\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1291677,"size_decoded":373307,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65438)","md5":"9ff38101b05d4d3b1d268da51b0eba9f","sha1":"1e7d19bcab26486deee3a444ed78ed06e0d84bc8","sha256":"51e8ee93960168018e2b7cf8de823ef9b081bc81f2d5ea1780fd4c6e4d68105a","sha512":"c9eb4d7a9049e1e8b5cdae50fdb17ca017d667db2f0f33bfa167558f11f5708485ab7c8a4b2e92dc68ff9e61ae23a8d9f716579f87add9513fd9f1b327403821","ssdeep":"12288:MkFfGnOrvnmo+kIs/7dympvumw02QC2ky3kYo:3fGnOrvnmo+psRympvuo5C2kyUYo","tlshash":"5225f78db2c6b07107eb60b4402f160bb237695d740a90d8f6b9e8e5ad7894d613bf7c","first_seen":"2026-05-04T00:52:31.802035Z","last_seen":"2026-05-25T23:50:21.491917Z","times_seen":10,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":10,"connect":18,"send":0,"wait":26,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/3b01ba81d907c22b.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.021Z","timestamp":1779752986021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/3b01ba81d907c22b.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1934\r\nlast-modified: Mon, 26 Sep 2022 16:49:55 GMT\r\netag: \"d2108508de08ff379204d57a7f2bcad9\"\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 81fac1c7319deef9db939ade015e10d8.cloudfront.net (CloudFront), 1.1 PS-TAO-0179t213:2 (W), 1.1 PS-000-01HMp114:16 (W), 1.1 PS-XUZ-01UaE43:14 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: msfcb637w87SkXI9CAwjTfGdLcjL5WccK2RyHFVO4utHZE77JU1WVA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45429\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1934,"size_decoded":2584,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2582), with no line terminators","md5":"0270b61b10c5e6965962d8e529b94c45","sha1":"d830673e813b618d7c011c551d813a9ca35bea0e","sha256":"2569dd03ffddba85deb4955d651eb448e50a65fb45a65c0d48e9fd1e668372ac","sha512":"e2db4466e41d42767c12abae631afb601573a8ee1bf56215aa3a44525b7a677c32f102ee99c6b4a1b5ef92012f6697c7004178f29b0acd85c69661f64d2cca95","ssdeep":"","tlshash":"2c514c6667b87a4c8d8f3a7afba4cf24dc2c4c6a42f0976e41568143fa80f70a432152","first_seen":"2026-05-25T23:49:00.347392Z","last_seen":"2026-05-25T23:50:21.492473Z","times_seen":2,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/adv/index/list?adv_tag=xianjin_tiyu_pc_index_piclink_rightlist","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.750Z","timestamp":1779752984750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/adv/index/list?adv_tag=xianjin_tiyu_pc_index_piclink_rightlist HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: 8250a7746502ade68ae9bd15001464c9\r\ncontent-length: 800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2164,"size_decoded":1106,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2300), with no line terminators","md5":"41a31084695dddf6e0e6bf546c05bf60","sha1":"c85a78a19c11d2b2eaa38b8e0e9d5d87cc358dcf","sha256":"ffa38019d3bc353555f5786e9f6cb391dae9261bbb9eb031b5c0d688b2df97ee","sha512":"b46ec6a8d2c82d5d59195813c9508917476f6103c7c03fc755e60216f3e7e71e7bc86e87ed7828bd463b3e97f4fbb252915cbfdce11e8f4cfc88a6d136262979","ssdeep":"","tlshash":"0441bfeb4815c6d09fd22a4eadf69e6bf1c940124e8f9d91828cc354c4fc1b9570be8a","first_seen":"2026-05-25T23:49:00.268598Z","last_seen":"2026-05-25T23:50:21.493352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":409,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer11.03f12b8.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.780Z","timestamp":1779752984780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer11.03f12b8.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 82569\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"03f12b8323f512e1f90b86baf18776d4\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 d73d3109899f3ca0763c5b06d669f5c2.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 853d303e0a4e26f8e9dc820e8a450283\r\ncontent-length: 1025\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1025,"size_decoded":1501,"mime_type":"image/png","magic":"ASCII text, with very long lines (1370), with no line terminators","md5":"0dc1a1cc7967dff8b41dcdb92c55e535","sha1":"596f3110670853d15b0d82d60e9ad21ed0ddd378","sha256":"b1221bbef6f59e5a15a89885622b2c9e757d435fb1be4ceab37c47b860da4f77","sha512":"f4b5ac49bd35228cbb2b15ee1a24124467263e782bf32eb960bd79820c92559599e71be37afc58a1058fb6405b72bf973763c17b404088b9d53949a28383e386","ssdeep":"","tlshash":"7d210b372cf219594fe98dcde40422e3fde93906680b6c9fad802e4b03c5bfd8906854","first_seen":"2026-05-25T23:49:00.259304Z","last_seen":"2026-05-25T23:50:21.494171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20231214/50448cbbdc6388e9-1.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.392Z","timestamp":1779752985392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20231214/50448cbbdc6388e9-1.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24418\r\nlast-modified: Thu, 14 Dec 2023 03:29:05 GMT\r\netag: \"a6736177182471de8a3f28ce52f435e4\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 a9d37456b91f962deeb364728ebd872a.cloudfront.net (CloudFront), 1.1 PS-WUH-01DME59:2 (W), 1.1 PS-000-01HMp114:15 (W), 1.1 PS-000-01Wk752:5 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: e1OcQKvp38dCHu6lWvIdFlFYK-RapsG3GkLVbdwSNpjzh1tW5i3GvA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45341\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24418,"size_decoded":25105,"mime_type":"image/webp","magic":"ASCII text, with very long lines (32560), with no line terminators","md5":"b620e272cd159fb7123848a7f79748a4","sha1":"fbc406e27b62367918a373db8742bf580e22eb98","sha256":"2530a3f80440b28c0256a3332addd1a24ca5f3dda4deee1c3d1e70626e2155e7","sha512":"13bedd9a7bb5a22eb097d44bc8e203dca5f8209fafb43da11e703423d647a615c028caa78830b5e190e07b79df2f64d91706806a7299754262ff48abfc312227","ssdeep":"768:103+d774gbBxo1pocQ69rl/xeESuIIHR/QWW:yOB7JTzerlZzSuIAQp","tlshash":"82e2f261178e230f0571b02767bf948d6329f753b118e9fbcad7aa0086dda47c8705d6","first_seen":"2026-05-25T23:49:00.325445Z","last_seen":"2026-05-25T23:50:21.495059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230511/0ca13307245728cc.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.399Z","timestamp":1779752985399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230511/0ca13307245728cc.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2206\r\nlast-modified: Thu, 11 May 2023 12:00:36 GMT\r\netag: \"a2da2176cdba1bbce5660c4b821e967e\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 566e7277e24049ea0d417ac08d4a46f8.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:12 (W), 1.1 PS-HIA-01dVn197:6 (W), 1.1 PS-FOC-01t45115:7 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: 6F_Vj7T3sGHFfe2QzfA4oPja97wnkIP0r_T_konQUHKMrQp96E4u7g==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45348\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2206,"size_decoded":2893,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2946), with no line terminators","md5":"425337ebbf3971fa804cfa518fdf0eb4","sha1":"728a12e54e5ea089231c60f33e5347fe79054de0","sha256":"b75f8dc52ced1bbe4131fd4e84198e88b83cb551774bd0669c52b37dfd744c5b","sha512":"30ffea87c7391503c23861b429009c2bdf281b6368bced80896b29332f4bc0d45ac77e361d79ff055ffac1d3018bc63e5bdee860207f58193e2681c6b168f75d","ssdeep":"","tlshash":"58512a60c17c60a8ef7325524436e2ce0c2d189eb62f53a420ffa4b966a51226d636b3","first_seen":"2026-05-25T23:49:00.353809Z","last_seen":"2026-05-25T23:50:21.496154Z","times_seen":2,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":719,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/sport/sportpage/get-home-hot","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.654Z","timestamp":1779752985654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/sport/sportpage/get-home-hot HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: 28733bb478d3ea359449b89bf1025ef7\r\ncontent-length: 3648\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28231,"size_decoded":3955,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fdd54a9823f13d91002f85dd1e9df10b","sha1":"cef2d26cadba42f0d66c4430551e15b60955e8e8","sha256":"3aa46be2bd807560a03796d7feca9dbcda793bf7cb230d5327472d45f636ebd1","sha512":"0ab01f891354081dfc9af198dcf564b1b33e94864501f09c76c0e6ca758ca14488127e7e147510249576ef4cd6f1cbeeddcf92c17aa726b0af73ac3627fec81d","ssdeep":"384:1exTAxTpxT73xTHOxT40xTl+xTCxTKxTPxT8xTIxTvxTvxTcxT9xTvxTMxTcxTvc:1nkxVUAE","tlshash":"c4c259ab07ec58eccbf268c5618e72dde18d6017c0ca8f84bb0cded4c5dd65b9126988","first_seen":"2026-05-25T23:49:00.338552Z","last_seen":"2026-05-25T23:50:21.49705Z","times_seen":2,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/592b1ed86fb6d95b.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.966Z","timestamp":1779752985966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/592b1ed86fb6d95b.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/592b1ed86fb6d95b.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45407\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20260412/d77b9878adc1b6df--3840x1200--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.261Z","timestamp":1779752986261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20260412/d77b9878adc1b6df--3840x1200--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 219512\r\nlast-modified: Sun, 12 Apr 2026 15:29:44 GMT\r\netag: \"3b88173ff34f2e5a13c0f59f615251fb\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 fbb0eee872ada24336cf35814e95a30c.cloudfront.net (CloudFront), 1.1 PS-NTG-01aB9225:0 (W), 1.1 PS-CZX-013g942:16 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SIN2-P2\r\nx-amz-cf-id: Mc6OH5Zf3nEnEUKW3plWOvB2eZtBJmkbdntrd1kV7226HYydxw9r2A==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45454\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":219512,"size_decoded":220173,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dd254f56c48b3942b7d338f8c49f6a5c","sha1":"e2d119995eebeb327771bc18341ca774a76e48cb","sha256":"b611fd3c1cda788b2d2d99a167b05486b496de2014599daf774b6187bf9d8499","sha512":"83f8628632d69156076fecf45e42b6a23a2751e540a9863ad07537c8a43fee5bb8e7b9ae7feb2c66c1d34a2ffb2b8b853c77e7af127f46a722c3c3676ceb1ff0","ssdeep":"6144:8j/CLtGcTL1setuw5fP+NIpye3yLpP9o88cXRaEjrXZZN3u:8j/fcFsetPJhye+pVdJ1ZN3u","tlshash":"fe5423039bf52a0ecbd24f39b23f35417ab3a8c1855d91f8a7e0a24195fd478e5a3760","first_seen":"2026-05-25T23:49:00.276999Z","last_seen":"2026-05-25T23:50:21.497972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240828/299b1f7e7073cae6-1.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.562Z","timestamp":1779752984562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240828/299b1f7e7073cae6-1.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 81688\r\nlast-modified: Wed, 28 Aug 2024 04:49:13 GMT\r\netag: \"8affe3f5bec57b0d5290b50954d8d076\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 ecad0a1250f687334aff3738c11acad0.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:2 (W), 1.1 PS-000-01dCl112:11 (W), 1.1 ianxin96:17 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: JICqufS9nvnmhidjcm9GdoG7N4nyDTKE6P55npHpJZyz-7QBjipscg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45228\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":81688,"size_decoded":82369,"mime_type":"image/gif","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"057300014ad9bc1ede18a7de10c6a82a","sha1":"62072597ce7bb074e75470ae43d8480e1c1ffa43","sha256":"01524953eb995fea43ac87b87955de1ad74de5d006460a0781094fd593b7006c","sha512":"f3845458b99c4c3af7f165944959d5907c9787ebe3334b1c383cfb5eac422044a4a8924a676027b508468b1ed92f9c42f698a86131d47e60ea140c0454d68adf","ssdeep":"3072:a+KpLy3qXrCR35j+mTHjuhHRkm+b5hWb4vaiM/c7HJRRb7:a9lG0rCN5j+GjuhHUlva3+Jbb7","tlshash":"d0b312591b2fbb39008407217a6605baea5a3a0306acfddfe11750587d8f7857ceb1b0","first_seen":"2026-05-25T23:49:00.310494Z","last_seen":"2026-05-25T23:50:21.499156Z","times_seen":2,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":8,"connect":8,"send":0,"wait":481,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220103/a8fefc2e84fd32aa.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.798Z","timestamp":1779752984798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220103/a8fefc2e84fd32aa.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14784\r\nlast-modified: Mon, 14 Nov 2022 04:43:59 GMT\r\netag: \"626185783342c635d5a51cb191db57f8\"\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 28da7b50b2dbdddfb257605df1527026.cloudfront.net (CloudFront), 1.1 PSjsczsx2ng18:8 (W), 1.1 PS-NTG-01FLw54:15 (W), 1.1 PS-CZX-0165159:11 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SFO53-P7\r\nx-amz-cf-id: DAnwpqqyqM0lBNLSCAxQdb-E1FHQculDoZCMbZsat5dSFnosnCSvIQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45253\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14784,"size_decoded":15432,"mime_type":"image/webp","magic":"ASCII text, with very long lines (19712), with no line terminators","md5":"6246703758fe5f492f0be754a330f733","sha1":"41c7fd02632526f5114e7de1367f6c8d2f9ead8c","sha256":"fa0de3140e5e4bdaa9fbf9845ff587fbf2499c9f48642912667b033d4affeda9","sha512":"f7ed09f1b6080f96819c83c6c231846256ed95894790ca9d378eec05e60db0dc85233234f417e13912598e412bae503c4be667812c7e37134b3eda6fb3fa205f","ssdeep":"384:NccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccC:Ncccccccccccccccccccccccccccccci","tlshash":"50922efd96519a8ffc9503a8839072c1fe798a2b49df18e1850f147c4bc2dca487d9ad","first_seen":"2026-05-25T23:49:00.320078Z","last_seen":"2026-05-25T23:50:21.500227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/65df676df0e272f5.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.965Z","timestamp":1779752985965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/65df676df0e272f5.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/65df676df0e272f5.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45406\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20260412/96ca5b33fe7d957a--3840x1200--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.230Z","timestamp":1779752986230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20260412/96ca5b33fe7d957a--3840x1200--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20260412/96ca5b33fe7d957a--3840x1200--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45437\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/js/216.84f9759846cd9c080722.1777434674994.js","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.188Z","timestamp":1779752984188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/js/216.84f9759846cd9c080722.1777434674994.js HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 66037\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: W/\"62a6cf35b10eb36bed913d7710551709\"\r\nlast-modified: Wed, 29 Apr 2026 04:13:49 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 66a20d8066592c4cdaaee57d1df25628.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 447e3989b48e6e385969274f6fa566b7\r\ncontent-length: 3538\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10710,"size_decoded":4024,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10278), with no line terminators","md5":"62a6cf35b10eb36bed913d7710551709","sha1":"8e245e49a2e1c5ff5c06dae143217f4eb793ec10","sha256":"65aac8ab1d04ebd97d3dddf5642e36bae4337a21244fe88311f2223720451d22","sha512":"1bc9e4e8766c7c21b15b8e277b87f5750df7f7a9d39f00d92a03892c2e43cc4aa5c282b7f230f8e8e75e8fe7d8cb0e0be7b8bba951768568efd97ab7f159e8af","ssdeep":"192:+af3hvfr+GEHj1/7K/hmpbPGuxkFqAZWSNPX4nDIJyO:nSGondxGZA0cId","tlshash":"cd22a516f68ba977156d5160a22f053dd1356bc8a208d467f7bc8cc8a4e5e3e232f93c","first_seen":"2026-05-25T23:49:00.285249Z","last_seen":"2026-05-25T23:50:21.501263Z","times_seen":2,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":528,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/css/367.2b9cf73d6ddf0a01e7db.css","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.754Z","timestamp":1779752984754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/css/367.2b9cf73d6ddf0a01e7db.css HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 64188\r\ncontent-type: text/css\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"e203197035f3123182b2de0c3f7d4d1b\"\r\nlast-modified: Thu, 09 Apr 2026 06:01:13 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 705c525d3a8466fb6be7399f8c168d72.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: b874c054e0cf0299be17a66b74c212b3\r\ncontent-length: 977\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":977,"size_decoded":1451,"mime_type":"text/css","magic":"ASCII text, with very long lines (979), with no line terminators","md5":"f177dd13d1536b6c41325c6160eabb63","sha1":"a1d215f2559c04b17161c037c9e511478bfb7062","sha256":"263ec5d4cf6c0be4a466db1fe7ef285e92d5161b6de8310f54bebdfd6180b6b8","sha512":"abaf14489820d098551c19050336d079ff3b58ee7c0c4ae3e6b391c168b78c3b14387e0b35e810a66f3377d2362e20ba4383c192afc6e0c2d6cfd90da030d6e5","ssdeep":"","tlshash":"5d11488279dc602e0337c5cc9123ae5319c4f79b9598e6ec12135f808d72a633b0a3ca","first_seen":"2026-05-25T23:49:00.273731Z","last_seen":"2026-05-25T23:50:21.502281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":567,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer12.246cec8.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.787Z","timestamp":1779752984787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer12.246cec8.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 80391\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"246cec8a6ea81021b369dc369235c24b\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 98262dcbda45b22e743cded06c3bac06.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 5687dd4a92eb0a9522e6fef0c2dec26c\r\ncontent-length: 2862\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2862,"size_decoded":3338,"mime_type":"image/png","magic":"ASCII text, with very long lines (3818), with no line terminators","md5":"8e61e0fcf570f2ea5359664437867620","sha1":"6cbbfd80e50b7d45c865426bd8596f1dcdc923af","sha256":"bc3ad0a3b786eabc6e15f914f1fa2cce069b5022b269c149f416e2b2b5fbdc3d","sha512":"91a337b2a2489f27560f7bb931eee342e03dfc472fd7016900009dae2178d7da098829e7cd21854e4305c9ea6c60edb489f1dbe08d38ed50ccbbff965d2eaf13","ssdeep":"","tlshash":"69716df82b7df08c077ac74436b31a070cbe449b54b56a702ee5329218f9743a7cea21","first_seen":"2026-05-25T23:49:00.352204Z","last_seen":"2026-05-25T23:50:21.503233Z","times_seen":2,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/css/51.272be97c7be80c913f41.css","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.338Z","timestamp":1779752985338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/css/51.272be97c7be80c913f41.css HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 73381\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: W/\"dacddb016a46e10be960a5d7b36d103b\"\r\nlast-modified: Thu, 29 Jan 2026 06:18:50 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 705c525d3a8466fb6be7399f8c168d72.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 7ac65c0351b14575b2d77f676c0c979b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":49735,"size_decoded":5630,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (49733), with no line terminators","md5":"dacddb016a46e10be960a5d7b36d103b","sha1":"c68b58631a13a18f287ad98801552ce3b7244a32","sha256":"6196601a44cefed5a2f2f33d807b3b3e63035c84688c4fe506cb1ef4e9ef2572","sha512":"803d7583429c5c792e758fb9bcd0a40f0c8781032c013ea86a34543e7624c51bc0130381d37bd68fc005ada65c7fb9d1ed708cedf66d69d0ee9a38509ae74046","ssdeep":"768:xf4uE0Xj6voORV948MHdiCTDC8lFD+ZDIoVE:iuI4j","tlshash":"b2231e2732cb8a4f09b7f40a655f7b40943ba2a3d633f03ade6975d6dcc635121b8909","first_seen":"2026-03-02T00:12:08.98045Z","last_seen":"2026-05-25T23:50:21.504072Z","times_seen":25,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221217/c8933c6198f9f93b.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.392Z","timestamp":1779752985392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221217/c8933c6198f9f93b.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60136\r\nlast-modified: Sat, 17 Dec 2022 12:11:47 GMT\r\netag: \"e8d8370f38a9a06d6505b1343ff0fa3b\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 484fe398698a774124395f7049a70ce8.cloudfront.net (CloudFront), 1.1 PS-WUH-01DME59:12 (W), 1.1 PS-000-01MvV113:19 (W), 1.1 PS-CZX-0165159:11 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: xlb0rEsyP67u0uGAexLKohy1M5BfnV3CbpJC8bZ9pfP31XWSUcVW7w==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45342\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":60136,"size_decoded":60825,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"99e08c30b59affd3ac50dd8c8c518fec","sha1":"7f99d29117b1c169f59609d04995c56c7d135d66","sha256":"a79b56a58bb03a768de4c37e5f5242901675e69836f55db18ba4f26d1b692743","sha512":"9e77e85cabba14cd7b071f1b18e537d7c62fab12adf279b70f43b6d3126304f4f2a7c8615a80d4313c2210ca451ec683b8a423b08e131c64ffd6e16a7cac84ab","ssdeep":"1536:jigvYUYd/jAydXehfJ/zdUElsUqLkZmdQcdNL8NyDpH:OgvYNJlCf5zddlsr4oNLgSB","tlshash":"0f731274eeeaddc15b02372132b7640299223365d23a3999ad774c71f40f9eb45f24d2","first_seen":"2026-05-25T23:49:00.316963Z","last_seen":"2026-05-25T23:50:21.504728Z","times_seen":2,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/04802ed2c2fd797e.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.720Z","timestamp":1779752985720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/04802ed2c2fd797e.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/04802ed2c2fd797e.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45366\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/5dcff5fcce0b23cd.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.747Z","timestamp":1779752985747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/5dcff5fcce0b23cd.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9916\r\nlast-modified: Sun, 02 Jul 2023 07:23:39 GMT\r\netag: \"14646f29b59f0528b417436ab589b882\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 1ff8037ac9f48617b00cd24bb229942a.cloudfront.net (CloudFront), 1.1 PS-JJN-015mq212:9 (W), 1.1 PS-CZX-01ZgV58:2 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: Uz4M7RLnKI0XM5xQiIW3PL-K8HOBDEXmgHQQU-xJ8mxVVjcsE5FRhw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45377\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9916,"size_decoded":10575,"mime_type":"image/webp","magic":"ASCII text, with very long lines (13224), with no line terminators","md5":"c054afd88ec7c8f3ff32f0f89b87c740","sha1":"7c15dfef07b654eef0c503bfdc859707fc763fe2","sha256":"f29d85be3d4586a07d1b3d2fc908972657fa741162b3ae08508af01da4ddc687","sha512":"c2782a29d128ed77106ebedeaef551f45d7cb34aa2b28d1fd39d1c92fe13f2a8e10816f9ba2b819146d4536ee5771523c3f5f6736ef9ffcbd1ab93aeb0ebeb32","ssdeep":"384:vavaW5vww673Bav/23JZU9tG77777WWKpVJoXJQ:ivRvwwib3TU9A77777wJeJQ","tlshash":"bf52f832ace4a4f953b20ed88a6f1387eeae59474c54f913f48ed6c3d0838dd5e21856","first_seen":"2026-05-25T23:49:00.334502Z","last_seen":"2026-05-25T23:50:21.505615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/b43e04421acd0ec1.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.064Z","timestamp":1779752986064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/b43e04421acd0ec1.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2020\r\nlast-modified: Mon, 26 Sep 2022 16:49:39 GMT\r\netag: \"d396e010cb602f4cfca4a31271c4377a\"\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 193f392c116e27a3f195dc4d0ef3ff2e.cloudfront.net (CloudFront), 1.1 PS-JJN-01Xbi199:12 (W), 1.1 PS-000-01geo49:19 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: CS8-M7WlP7uXRMagnh52PT_mEpBaX_R7H8BoQ9_ppE_BqlrWsQac_Q==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45433\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2020,"size_decoded":2643,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2698), with no line terminators","md5":"dccfde4bc421dfea4d8f391b937f6e41","sha1":"f4f74b7916258a02817523d18071312badb9a4d1","sha256":"7ce7cadc4a5f4a77eed196b5a4be73556da5525b735c02b8dff0cadc84b62c8b","sha512":"215773b1afde02569f6c4dda25a212f2c5d8b5695966787a4fe653b6bf486b1401b6bd01b2ad8186ddb1ba47530134426fe0fbf11a5a696df50ccb48dd835d97","ssdeep":"","tlshash":"15515c5faf5aa414c299b294538178087c1c2e77e024fdf664fda3950ee438098b280a","first_seen":"2026-05-25T23:49:00.26345Z","last_seen":"2026-05-25T23:50:21.506448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer2.061149f.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.774Z","timestamp":1779752984774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer2.061149f.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 40997\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"061149f6bf405e5e77c3828b604e6e0d\"\r\nlast-modified: Thu, 18 Dec 2025 05:49:50 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 b6dbda254a39d6fcade7be323534f7ea.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: b4c6429a976700b6228adbb7af902ed7\r\ncontent-length: 2026\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2026,"size_decoded":2502,"mime_type":"image/png","magic":"ASCII text, with very long lines (2706), with no line terminators","md5":"5dd992d7291404724af104108364c277","sha1":"cb41b9cbe238def08e5e4d12f8be32c9582a3c56","sha256":"db76995ed701a4a2421561baaf4087db227e09e817e6077dafd8472974ba541e","sha512":"4128467072fe803d0c890a621a591d2dceafc8db9041b59d5bc7aa6423f0d8fd219e182560ad60a9a6a5ea56cc59c20a3f955bf82d52482ee181305b4194cf32","ssdeep":"","tlshash":"5c5139b17a416e0b8b7e13e56b8c6c1a2ce5e831717290096ccc8d7322a469eac77912","first_seen":"2026-05-25T23:49:00.307728Z","last_seen":"2026-05-25T23:50:21.507308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer13.fa8270b.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.787Z","timestamp":1779752984787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer13.fa8270b.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 64995\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"fa8270b457bb6c51deda98f60ec2a56f\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 4ddda5096256ac78e1bebf37f6ac5ba2.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 45e3aeb7903eca94df5e7a7017584604\r\ncontent-length: 1657\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1657,"size_decoded":2133,"mime_type":"image/png","magic":"ASCII text, with very long lines (2214), with no line terminators","md5":"ea5783c74ca81c21aaa375ddaebac760","sha1":"024d9fb94687443a36c7e4f4eb1b16bd5c62f90b","sha256":"a8cb2055a3c0cf4428230bb682cb8fac4d4571a1c28dc823efafbdd704040935","sha512":"c8feaebc659312529472ac2e42f9dea0df8572eb6afbfe01fcc6d7016eeb73eb2bac81f607a49a353fba6b094f55357f36338b37ff5c1c8945036709be4da1c8","ssdeep":"","tlshash":"59415cf23595a91428d44f6add068503dcfdd82f1aa19807c44027c871787d4f4cfe40","first_seen":"2026-05-25T23:49:00.342881Z","last_seen":"2026-05-25T23:50:21.508186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240819/bddfdc4f59f8e231-3x2.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.232Z","timestamp":1779752986232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240819/bddfdc4f59f8e231-3x2.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240819/bddfdc4f59f8e231-3x2.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20251231/b5bae2f3d4dd8c89--3840x1200--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.233Z","timestamp":1779752986233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20251231/b5bae2f3d4dd8c89--3840x1200--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20251231/b5bae2f3d4dd8c89--3840x1200--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45439\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250116/303378522782bad2--3840x1200--.jpg","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.240Z","timestamp":1779752986240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250116/303378522782bad2--3840x1200--.jpg HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20250116/303378522782bad2--3840x1200--.jpg@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45445\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240811/acda850d2b59cf2f-3x2.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.271Z","timestamp":1779752986271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240811/acda850d2b59cf2f-3x2.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 282562\r\nlast-modified: Sun, 11 Aug 2024 07:57:53 GMT\r\netag: \"76701363af4bc0d99fe8460aac589ea2\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 0d2cbc5164aca09b6289de43cd32b2ac.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:3 (W), 1.1 PS-NTG-01beM227:11 (W), 1.1 zhoudxin93:18 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: EiCFiXf1Qbbid3VAYxUGUit24r_Ju303zT4elH7ulEyP7Xb_1J4Pxw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45458\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":282562,"size_decoded":283246,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0f0a1b87ec7dc5cbf2ddb8418313cd85","sha1":"9f92b336cc838979f1f5db460171965c5d7e0f42","sha256":"733d26b3c254740e3a90e9fb943eff14d3dd28a4d1de85ec9c02fc2384cab511","sha512":"51aa57e9304f3df57f28232f18be5946f5f10c88e35d6da493963e9c3b7b8535002c249bb520178ee950273e7527129c7551c0ff91ff348225647db1a5c3f8dd","ssdeep":"6144:z283hHjYuRKcuR86bvH3Qyibwq2LIHjriKLSep3Nzc16zgX1fOOkEC30cVZCe6w:VxHjzsrbvHAyEwqPHHiQSkNQ/XVOOkTj","tlshash":"ec8423a4d64f3b3b5d20012c10759e9966fec5e9c6c863273e4eaeef94d8b31041f652","first_seen":"2026-05-25T23:49:00.264303Z","last_seen":"2026-05-25T23:50:21.508977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":395,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20221111/b57f4f36fb2415ec.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:47.108Z","timestamp":1779752987108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20221111/b57f4f36fb2415ec.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1022\r\nlast-modified: Fri, 11 Nov 2022 04:07:01 GMT\r\netag: \"7120409c9570ed0191ed0001a9aa2a7e\"\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 32fd840119a707a2e376c5161656cca6.cloudfront.net (CloudFront), 1.1 PS-JJN-01m5h211:10 (W), 1.1 PS-000-01Wk752:12 (W), 0.0 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: k_35vaWdK9JTO-xfBPITx7g0Nv55JilgfhaZfdz3n6sCm2sPtNFD8A==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nage: 49496\r\nx-ws-request-id: 6a14e01b_PShlamstdAMS1vj92_47818-45522\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1022,"size_decoded":1657,"mime_type":"image/webp","magic":"ASCII text, with very long lines (1366), with no line terminators","md5":"0ee5752c39c22b56c0f5c6e914cd333b","sha1":"2fad72b34984d213c6849f031740c85ab1652b89","sha256":"653aa73a4c01b7aa56078ad44165f4995e8402bc07201b30afca773571cbe320","sha512":"09348cadf229d85f5bae32c4f34b2b1fdc1038f4fdd3c252978cacbd3f375a60a3ee1b270944d0fa7f7bb3418c54a48ae4abc8211efeafbc79cc438f942f1396","ssdeep":"","tlshash":"d32108721425d8629b769cb28a42cd030c493803eb9e0b54f0665fc23cb2c367d36b25","first_seen":"2026-05-25T23:49:00.316109Z","last_seen":"2026-05-25T23:50:21.509842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/js/11.6407baba58fc6af0142b.1777434674994.js","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.187Z","timestamp":1779752984187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/js/11.6407baba58fc6af0142b.1777434674994.js HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 73431\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: W/\"c687ba5b8a79fe780a53ec5d822087aa\"\r\nlast-modified: Wed, 29 Apr 2026 04:13:47 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 f5b31be72c11865ad8ac2540dfd45772.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 71da191bf5a5fef3ce8cee76ae2ff63f\r\ncontent-length: 2415\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9272,"size_decoded":2901,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9778), with no line terminators","md5":"06be2f2e17977fee3abc14327e97e809","sha1":"a9fdec17213743b165e8ded5401e9817b44907ec","sha256":"7f9f4d37ae2ff7275d2c78976a743504610d42e0808fefaeb7d4adc2648ae8dd","sha512":"d3c4bebc0982285b84bf659823ed65e9fb9701d858cb4ed928b6727398f79cfc204e0d467b65d7946b7821eb3829d4e1a28e9b5ec74170afb6800cae1aecafc1","ssdeep":"192:QqNMlSmXlm6mAAeb0TbtPdXBep1ZArWERpq9:VMlSalPbAeIftGurE","tlshash":"8622ce196080e066ad42d01673bf2d78e86725a6d01617a2fb7ccafcf78093c6b5d1bd","first_seen":"2026-05-25T23:49:00.337768Z","last_seen":"2026-05-25T23:50:21.510579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/86606145693166fb.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.963Z","timestamp":1779752985963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/86606145693166fb.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/86606145693166fb.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45404\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/592b1ed86fb6d95b.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.018Z","timestamp":1779752986018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/592b1ed86fb6d95b.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2036\r\nlast-modified: Mon, 26 Sep 2022 17:01:05 GMT\r\netag: \"e75b6a1013bd893910752becc88e8ae2\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 d27c289c0f61faf180ffaa0edb16f2a2.cloudfront.net (CloudFront), 1.1 PS-JJN-01m5h211:8 (W), 1.1 PS-JJN-01XUm198:11 (W), 1.1 PS-CZX-01lqK102:6 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: -8QJFTZlVvw60MvkXz_bbPS3uiXAnon73PLrFf1y6MfiHUYxEyR4AA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45423\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2036,"size_decoded":2724,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2718), with no line terminators","md5":"4c8ee9018c86fbc24b83b9b07076cda2","sha1":"bc27e8c4bfc5c94690eb03bb5443711f4d03ccf5","sha256":"c6e2a228ffee2cdf528ed36fa7f91985f9b7876f5ebeb3547112a0414abf629e","sha512":"c21bfc4aeffab6d567c316f5b06174207e08f492c510ac174498d6239e43e1183c6ad3568ad3d453520c0540ce21f894bf9b93b995689630862d8da829060c31","ssdeep":"","tlshash":"d4514caeea00e406d0e9f537d14147c69c04913f8c5b9a31bbedd5060982153ed7d9e7","first_seen":"2026-05-25T23:49:00.257734Z","last_seen":"2026-05-25T23:50:21.511354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240819/bddfdc4f59f8e231-3x2.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.255Z","timestamp":1779752986255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240819/bddfdc4f59f8e231-3x2.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 274360\r\nlast-modified: Mon, 19 Aug 2024 09:46:49 GMT\r\netag: \"486c3cc2fc33981f911082be7017adf3\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 30f04792fb3dfd90aef06a0b03318372.cloudfront.net (CloudFront), 1.1 PS-WUH-01DME59:16 (W), 1.1 PS-HIA-01rHo246:0 (W), 1.1 PS-CZX-01LQk101:6 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: 39ubiL1KgGCQ86ffffZlz7MTv3Lt-IaMJA9moaZ8tQFF7Ybl6ZXStA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45452\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":274360,"size_decoded":275049,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"197d040027a46249ddd8fbdc01e642a4","sha1":"274ceadca9d9cb90da8f80a58b3941628329166b","sha256":"0fa101ce29c427a89f8a33565f4958aca7bb10e335e6657b97b10e541bb9492c","sha512":"9fb7d40c0f180970255f6079e9a85205d8852429842cdb1318d54823ad567e475966bc6b366f46c8eb18235c54c796c87aecc8576b32724ce5e9830ab000857c","ssdeep":"6144:cW4PtNV7Fvklk6Awzie2YyaSlF7SZYUGutxGG3dgKozozWpXgB3aZ+vI:crPt37Olk6nzie0l/ut/ipzLpK/Q","tlshash":"4c7412a2cf4d6c71e730d004d1afb896bea18d778569c46267d1a28f214dd06fb8b4a3","first_seen":"2026-05-25T23:49:00.359569Z","last_seen":"2026-05-25T23:50:21.512116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230526/6be39d74dfdd5009.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.269Z","timestamp":1779752986269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230526/6be39d74dfdd5009.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 247700\r\nlast-modified: Fri, 26 May 2023 14:22:27 GMT\r\netag: \"ee5a1e2bb3e3b282f397d71eef887699\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 484fe398698a774124395f7049a70ce8.cloudfront.net (CloudFront), 1.1 PS-JJN-01Xbi199:5 (W), 1.1 PS-FOC-01t45115:7 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: d3Q8Iu1VqpqQnJDWfTull_SjDVAJaJ7BAkszf2h8DIGJOVYJ6Y4MBg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45455\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":247700,"size_decoded":248362,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9ffc9fa227b68eb42b0dddd2272cc971","sha1":"6c54d38f176efc6f0cbed3b06b7f9a111aa48b31","sha256":"c86cc11cc793eaf626944b405caaf62a41b9e68caa1fb1f791cd9ad4c279662c","sha512":"c80981b38a7dc6c80418ffbab62edaa3b0d9bf4d4885b1532e33eb2651ad2129013039446ff2ee7ed04684748c4911a66b18cf9a9c4831523286e0251716d437","ssdeep":"6144:PA6pM0KVTSi4rE6tNrsxbBQuyUHbG5+MhD7+74frIcOovH7EZb:4C5KVKr7yNQsHbGzhDi4fk8Q","tlshash":"6d6423305e4b0ebec9e0133478586d5e0ee282273475845fa6ed3a77f2a8358a855de3","first_seen":"2026-05-25T23:49:00.323266Z","last_seen":"2026-05-25T23:50:21.512867Z","times_seen":2,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250121/39d8bb4f7e935e3f--3840x1200--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.281Z","timestamp":1779752986281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250121/39d8bb4f7e935e3f--3840x1200--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 211948\r\nlast-modified: Tue, 21 Jan 2025 08:35:27 GMT\r\netag: \"ca2807fae35445d8031c83f44c334313\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 35f4c8a21c0e4e3e0169f8522e3b4fa4.cloudfront.net (CloudFront), 1.1 PS-NTG-01hLn226:14 (W), 1.1 PS-CZX-0165159:11 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: GuVOc0NPShYjPrAYC8WifbRrlSDHMWedhr1KxnF7ii7PCzlq0NW1bA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45465\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":211948,"size_decoded":212611,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"869f5c38a8efdbd53f00cc8a17e30d21","sha1":"a651d04315624487109f2128d57dfd629fbc67c7","sha256":"cdad48de7dc1834ac22fbc1f841a8cbecfb935c6627ff435561659a565dd6f45","sha512":"8de63aac86e875f2b2430ff6718419449cd292fa78db7da34d257613ab8a00070c6931e2015e3555c3cdd191e77b204e24bc57e72505784fced66ed9f265f4b1","ssdeep":"6144:URWrk4x6L8CT/afeM8zNZOKnUP5JpjmGzDjW20gg4txdx6OJEiDgLEeM:xr56Ag/k8zNgKnCZWrgzKOJT0LE1","tlshash":"59542331559dbcbf0b1c8ca6a0297e274fb00ecb14845ed70bd472ed396ae890d1ea65","first_seen":"2026-05-25T23:49:00.361892Z","last_seen":"2026-05-25T23:50:21.513559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240518/dd8ac43b14f3016d-1.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.560Z","timestamp":1779752984560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240518/dd8ac43b14f3016d-1.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 195882\r\nlast-modified: Sat, 18 May 2024 13:08:40 GMT\r\netag: \"e461845e4e9dc4800603692dd58be70d\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 99057e6beab36f509efb35703e98fcf4.cloudfront.net (CloudFront), 1.1 PSjsczsx2kw13:9 (W), 1.1 PS-NTG-01FLw54:11 (W), 1.1 PS-CZX-01OFj122:19 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: eUwzDJW_qZ3HVfxbVm39lChPvlRNznhtv1XUKlAW3z4LM6EvU8BQaw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45226\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":195882,"size_decoded":196569,"mime_type":"image/gif","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"be0f71def55b43fc29337d3559cff926","sha1":"533239b4f70e3e2184c03340c8379276aec423c7","sha256":"b6f26b97fe28190dc7738bd916c49cb5c6a43964a1ae0426f66e6b9876595f11","sha512":"b8940a62bf96e2e456ef0d8e05891184b16de39d604b1625a1bb1c1e2701b2115dd3f217cc6e4a06ed5ff0be601fcb25e73d6474e909cdd2dccfafa91b8e630d","ssdeep":"6144:YavGj5ABHTw1UJAD5UsmiSxTTeBp98tDjOUV4lf:8jqhTw2JAd25xoexjMf","tlshash":"7d4423b70428ee0ae4b83a89723b4e731d5541ebc1d4e1fb906f9213d024e49665fe7e","first_seen":"2026-05-25T23:49:00.280293Z","last_seen":"2026-05-25T23:50:21.514374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":10,"connect":9,"send":0,"wait":480,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/adv/index/list?adv_tag=xianjin_tiyu_pc_index_piclink_leftlist","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.749Z","timestamp":1779752984749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/adv/index/list?adv_tag=xianjin_tiyu_pc_index_piclink_leftlist HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: 8cdc3a934935986fcd642ef4cf54d59f\r\ncontent-length: 740\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2080,"size_decoded":1046,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2230), with no line terminators","md5":"7f533e3f24559472b9668c417ecdafc7","sha1":"bc2c33872262193a68f4a2efee9494f02d54fdaf","sha256":"0494eb4aebf73925326be49abac571a14a9c7a5fee3c1f422efe128effb542ed","sha512":"f21f9e030193c2af1796eb052c5a15da550f6d19998b95f1ca8805822e23c6ea4664f8ca81d79dd9a692bbe12072f1a77e73ce67cb71895d5cb268197bbeace0","ssdeep":"","tlshash":"bf41ffcb4816d6d0ced61b0e2db39e5bf2c940564ecf9d96868cc344c1fc0b95b1ba8a","first_seen":"2026-05-25T23:49:00.357173Z","last_seen":"2026-05-25T23:50:21.514993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240605/6ea75853adb8e1f4-0x792.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.723Z","timestamp":1779752985723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240605/6ea75853adb8e1f4-0x792.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20240605/6ea75853adb8e1f4-0x792.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240605/0f30e8d6dff109d5-0x792.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.750Z","timestamp":1779752985750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240605/0f30e8d6dff109d5-0x792.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38216\r\nlast-modified: Wed, 05 Jun 2024 12:44:08 GMT\r\netag: \"c499f463277210a5a55c506bdd1cdda6\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 5b376b6a8af86f25cb61289b102c9efe.cloudfront.net (CloudFront), 1.1 PSjsczsx2kw13:1 (W), 1.1 PS-NTG-01wPO228:18 (W), 1.1 PS-NGB-01QPH177:18 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: FpX6u5nCo2poXtpp9HsglWlDb7tyBdNjOvt2rEFX2o9Igt3mEH_vPQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45380\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":38216,"size_decoded":38904,"mime_type":"image/webp","magic":"ASCII text, with very long lines (50956), with no line terminators","md5":"ad9e6020ff712c0e009779bd2ed4f780","sha1":"3d0841ac220d6e4eed955854466ffe23334808f9","sha256":"130fa86d8f3c566dd66701453417240d2863ee9f472e2808cfd19cc9d9dddf49","sha512":"fa5f39c610acc25a58f7ce0e3b47e6175ddec627cf50662dfd120eab4dec62b4b35f1f6459c45117ba27ec72698cf59c0cefd1cabff0ce5ff243a37aeeb0ce7d","ssdeep":"768:+PRTAekDTwMm5Cq6ujfnamokFnMg0Jkt8a1VaBXvgDLJqpYfctD7NFvv:+RA5vM5j6uIkeJJW1EQtquUDrv","tlshash":"923302f6d372ea22d43c8fc5686d16233ec10c57bf1a10b5226e90b69d4c1856b786af","first_seen":"2026-05-25T23:49:00.355442Z","last_seen":"2026-05-25T23:50:21.515603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/b43e04421acd0ec1.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.010Z","timestamp":1779752986010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/b43e04421acd0ec1.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/b43e04421acd0ec1.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45417\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20241016/d8be2f64f4d8c7e9--200x75--.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.020Z","timestamp":1779752986020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20241016/d8be2f64f4d8c7e9--200x75--.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1904\r\nlast-modified: Wed, 16 Oct 2024 11:57:15 GMT\r\netag: \"c41aa35627c350291f71f5aca55230cf\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 e30c1b0e0c77b1b52d0c4aca8cc45fb8.cloudfront.net (CloudFront), 1.1 PS-NTG-01wPO228:17 (W), 1.1 PS-XUZ-01yVV44:9 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: hB21QGKGweURP8BU3Wb4UPnRDZi_hYzT2SyAl0bLtp2roXaBSa6jiA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45428\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1904,"size_decoded":2564,"mime_type":"image/webp","magic":"ASCII text, with very long lines (2542), with no line terminators","md5":"6247b43edfb70de0c6b5bfcf37d9c826","sha1":"af71c16513b8532839c4efdcd7d52c5cae051f55","sha256":"e7125d3d7c30265db2fb907c5663d8ead6016020325d63a35a261499dea3551a","sha512":"6c2978fdee5a62c91db9f0e3c38abb68f1e773b850694f3792b5b1d3e523523346a7fe9213f675309a36fe25b9f3fb17b994a90ff99789810dab44807dcb070a","ssdeep":"","tlshash":"69514cea2cb4711522114c24f6b56020c5b67958c89fa47362a47101ed8fecf0bf7bc4","first_seen":"2026-05-25T23:49:00.313297Z","last_seen":"2026-05-25T23:50:21.516494Z","times_seen":2,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20260412/96ca5b33fe7d957a--3840x1200--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.253Z","timestamp":1779752986253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20260412/96ca5b33fe7d957a--3840x1200--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 208846\r\nlast-modified: Sun, 12 Apr 2026 07:06:29 GMT\r\netag: \"a272e1e70115af747a66f9099d87aea0\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 d65c51c078cfd9159d89608b305ffa06.cloudfront.net (CloudFront), 1.1 PSjsczsx2us11:12 (W), 1.1 PS-NTG-01hLn226:13 (W), 1.1 PS-XUZ-01tGB46:2 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: FRA56-P14\r\nx-amz-cf-id: gdsCovB6YThdAIqT2N4jhv9TUcxFGmLIsdU5EbjvZ5Tp59JXScaSEQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45451\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":208846,"size_decoded":209535,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fcc7617698bb12bf0ffe7b0949e095c1","sha1":"095411e6a99ef3ab4039020ae5652cea0057d4a1","sha256":"d6690b505b9d6604ebdc589edee2931cdfc49357979c81003f12c14cf9c56bad","sha512":"1b9ddd92f436cfe38a05a64b4dca9d5d9e753e728911bd9c323ac02f95ffd8edb370d40b0b8906cf19f79255a3f1ff2259b05de95681400e66ce8442b0586944","ssdeep":"6144:J6Ste6GLKrFXiJsIFUA9JAuChVkS1aHYcAjIV+75C7nLDaVhoZG60ts/26p4rB:J6UehLK9ipJTiVT6GjI+GYhoLMIp4l","tlshash":"364423f2386d4e9e692d403aa0c509fcce7116c5b0959bb07fac535b28d2b3199ff858","first_seen":"2026-05-25T23:49:00.361101Z","last_seen":"2026-05-25T23:50:21.517086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/adv/index/list?adv_tag=xianjin_tiyu_pc_index_piclink_leftbottomloop","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.759Z","timestamp":1779752984759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/adv/index/list?adv_tag=xianjin_tiyu_pc_index_piclink_leftbottomloop HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: c544b9654e601424791b207bea540e3a\r\ncontent-length: 752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2211,"size_decoded":1058,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2359), with no line terminators","md5":"52ae2d13059d32c46a960ae5ec298747","sha1":"e5b24100819bf608c77725e1a2acac26694dc981","sha256":"ca4a397f9c70e437bf0d3048fe92207d60fa47e94419a0bb2714344b76145593","sha512":"0b35d1a7554ac846978654936c103f460e0e283d1763fed233cd6f9def2bece8aaed74c6cef31c86901bed731d16f3cb635f12af1ae5cef2cfec8c7b066db895","ssdeep":"","tlshash":"d4519acf0815e6d49fc22a4e69b3aea7f6c940124a8f4d6252ccc364c1ed4f4571fac9","first_seen":"2026-05-25T23:49:00.26531Z","last_seen":"2026-05-25T23:50:21.517778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":563,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer4.ecab770.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.775Z","timestamp":1779752984775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer4.ecab770.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 62510\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"ecab7701b8b4722d9eeb7516de5419c2\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 f9b0f5c24b85aa3c6da29e2a9d7605d6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: c6f27f6e3d4fbb7abc2de65471aa9e8d\r\ncontent-length: 1171\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1171,"size_decoded":1647,"mime_type":"image/png","magic":"ASCII text, with very long lines (1566), with no line terminators","md5":"f8b320061e49d8973b6e6ebe0168d5c2","sha1":"4f9932302e4ec758269fe21ad82bf9df9dce49e9","sha256":"ed8203ced646e64c3719c78b41a54b30412a2deaef16331715d732bbd179d796","sha512":"8ad1ef8a2b98e047ab297d876ed6fd116144a58d6f579214555307ee6438ddaf399273f2f61713a4d74cc49901f58062c735e9ba45c59ccef82a7052361290c8","ssdeep":"","tlshash":"22310aa51e109ca5a1cc0758b81834c5adf93811d1fe5e81eb4878092be15ee4fdeb40","first_seen":"2026-05-25T23:49:00.327948Z","last_seen":"2026-05-25T23:50:21.525896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/footer9.362cb65.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.779Z","timestamp":1779752984779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/footer9.362cb65.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 20906\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\netag: \"362cb651ff2f7db971b2f245fb634c05\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:56 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 46fff4ca3e25200232e6ccba67aad7ce.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: bcc88c95ba81e74e4fed71c475ca142c\r\ncontent-length: 766\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":766,"size_decoded":1241,"mime_type":"image/png","magic":"ASCII text, with very long lines (1026), with no line terminators","md5":"2caa27a9d7b5e4c4a80521dcbba80142","sha1":"08c74e87f2dcfafe2cba45642010f6b09fe38b39","sha256":"58898c2c79a796f27359310aaabb635787c8579dd3379f086ed6ed68c13fe2ca","sha512":"f646ea0c9c2f7b0ffee28b0120f7182e193a6d0e7d9af03e01c051ecf9f9c748a3fe2ffdf3109ef94787d1d9fea7229fb123b2a2660c32805bc35f58c6a6578c","ssdeep":"","tlshash":"c311a868c79112b5ff4e2cd5451156204cdd771f118c4150e7c80127ef4fe634cb9b15","first_seen":"2026-05-25T23:49:00.348127Z","last_seen":"2026-05-25T23:50:21.526859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230908/9dcb70ff64c747d8-1.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.822Z","timestamp":1779752984822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230908/9dcb70ff64c747d8-1.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6454\r\nlast-modified: Fri, 08 Sep 2023 07:54:07 GMT\r\netag: \"f5f05d80173de9331f73bc7f72debdf5\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 38ca494e7115eed242a88b2e26fdf0ac.cloudfront.net (CloudFront), 1.1 PS-WUH-01VZz60:3 (W), 1.1 PS-000-01HMp114:7 (W), 1.1 PS-000-01Wk752:5 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: nATlXSePCrkvw5rXC5xAayjfVW19FWn5uJnqazK3FK73gjWHHZKvIQ==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45257\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6454,"size_decoded":7139,"mime_type":"image/webp","magic":"ASCII text, with very long lines (8610), with no line terminators","md5":"ad0cd86e809d75f2f27cc255451c7562","sha1":"c6da0823727dc28b2094ef290e736bc7ef3e24b7","sha256":"ba12c4a3041a566c5235d93c86b1c796a974be139cd5573cf3e68b7ccacf49da","sha512":"8fd869900db0eae9bc9cae3c846d38891d590d2321e2b06184fcb4d939e5ae8af387df6429dc81574efa1ed601b4917bace040e22103811e7bf9ef86a85be869","ssdeep":"192:JnDRuvfBAl+fs5OU6wW2pzZEzs2zJM9HP6i9vg4IAc:ND4HBa+E5OUA2mv4P6i9vMAc","tlshash":"8202af7c092e88ea13bd3031a445a5919fd81d7f92c9328e6cb0c0d1ecaef3c50a421a","first_seen":"2026-05-25T23:49:00.348831Z","last_seen":"2026-05-25T23:50:21.528048Z","times_seen":2,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/siteimg/noticeBg.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.665Z","timestamp":1779752985665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/siteimg/noticeBg.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 34371\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"03e06d6abcb65a664df28afed9a850cf\"\r\nlast-modified: Thu, 28 Aug 2025 07:29:16 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 4fe71f328c269042fb1203aba8ce66b8.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: c09cf007a1757c70a103e3b3ca7867bf\r\ncontent-length: 1443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1443,"size_decoded":1919,"mime_type":"image/png","magic":"ASCII text, with very long lines (1926), with no line terminators","md5":"f9f95573514f8a154bab7212a36c31f7","sha1":"c66868f519b8355b387789a9add3c5701c0265f3","sha256":"e027a0586d2c32b5e023dc50f1541f4e3beed7bb2fb7ba830849409b35152295","sha512":"3ac1a3e3c484ab12965000eeb429ccc181e10c9ef2f17f3f1aebfb4c2f9a14280b927ba64223ebdfae799ab53fdca409414f3eebb5856096135c89c0c018dbd5","ssdeep":"","tlshash":"f941e97674f1993964c279457002d5ce1c3c5573b04e18f097aa1e0ed29b2011bd2fce","first_seen":"2026-05-25T23:49:00.253963Z","last_seen":"2026-05-25T23:50:21.529102Z","times_seen":2,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/QRcodeBG.81559d5.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.666Z","timestamp":1779752985666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/QRcodeBG.81559d5.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/static/css/51.272be97c7be80c913f41.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 80682\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"81559d5fcbc49fd3d815ce9e96bb1c15\"\r\nlast-modified: Thu, 28 Aug 2025 07:28:51 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 58b73acb67c037ebf3e55d50e0a967fe.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: ec4a59a810d31fa881fcb4b5e589d721\r\ncontent-length: 135344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":135344,"size_decoded":135822,"mime_type":"image/png","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"aa66fa2798f7bb548f2543ef4f13b12f","sha1":"fd31374d0b3a5e0341f14c5e050ff4fd06db8950","sha256":"da8846c2453b61afe7f6d97d0f58c5dab30a48e472113f7a0af871832c078cf1","sha512":"66d4b3c03018517a859a4b4b830d0bcf72d7f052056c6161d48f84921254d066056c540cb8b52112b982e6adf64765531fb9fd456054f81c8966064be452cd89","ssdeep":"3072:gq4vyelQWh4lIutIQAlU+EZchUw6T7Umle9JOnZTz0RrGoXpgeeXSEcWhJsLL2:s6Jk4lIM+EZchg7LzZn0EWgN/JsLL2","tlshash":"1d0413280b14ba3507508e787667ff7bf73289c7a55d70834cf86483198e975562fca2","first_seen":"2026-05-25T23:49:00.336834Z","last_seen":"2026-05-25T23:50:21.530257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20240619/40d77fd74e6c71c1-1x205.png@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.022Z","timestamp":1779752986022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20240619/40d77fd74e6c71c1-1x205.png@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 84954\r\nlast-modified: Wed, 19 Jun 2024 08:14:48 GMT\r\netag: \"ee03f1858d91f42fee14bcbff2854fc3\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 c9bacacdd678f5d95591fb7de8685414.cloudfront.net (CloudFront), 1.1 PS-NTG-01FLw54:9 (W), 1.1 PS-NGB-01Ahw173:5 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT20-P8\r\nx-amz-cf-id: HIG8ziO0AJO0bnNcojnpvSE6TTxzL1BF9ZWHpOISqrqnyuX5IykUDw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45430\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":84954,"size_decoded":85614,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fac19175cbb26c0b67f7d182ce99e569","sha1":"5d40bea6aa18d7ac6dd51b41dc088ca4481f5f16","sha256":"ec2b0e8bd318d36c6dc81f610b09e5b307d01c6628ec48b9158eb9a56d0d10fd","sha512":"8b40d78c42ee3048822e960e287d8c7e6531f57be68399ff2546f95a6d3b1d1f74e5e41c7737a699302315276892daf54baefa33147e7fca2da666ca419e4058","ssdeep":"3072:Ma4kmeTyfylIkGbwasWfuSgh3sssXQ08VtIWHbSU2:MiTB+KWdwssmstIQ23","tlshash":"d5b312b910263c197723a5fef986b41b091c95b3abe21a87f13f56d7fac68188035c53","first_seen":"2026-05-25T23:49:00.356327Z","last_seen":"2026-05-25T23:50:21.531846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20250116/2d7e584818d8200f--3840x1200--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.274Z","timestamp":1779752986274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20250116/2d7e584818d8200f--3840x1200--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 152496\r\nlast-modified: Thu, 16 Jan 2025 11:56:31 GMT\r\netag: \"3664c916289e8829f431a14edad37412\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 5b376b6a8af86f25cb61289b102c9efe.cloudfront.net (CloudFront), 1.1 PS-WUH-01DME59:10 (W), 1.1 PS-000-01dCl112:16 (W), 1.1 PS-CZX-01vAA43:17 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: kHWXG7FM92SDSpg1oXcOCkaoEIT7YUbcTQBwVimi_g527nQcuOmmNg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45461\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":152496,"size_decoded":153186,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"82a50278db2c42b46bccf11e0eb55991","sha1":"3a9f1d423900f800832e3832eccdf44d483d87f5","sha256":"03faa97bd0b24f04ac3e9ad55ba440a649ecc6183ee05414efc6a128d339bbce","sha512":"b0089483c86b3a6154bf2f098904b7912e2b002d1880a228a93677a19ef76d17d4e22acd7bebd3f0e3144609b618f1d8f4aaaa682b333b5148de7b5b76a83dea","ssdeep":"3072:nPZYisqgeHWPl1t/9/D9eoDyuNUAYhv2swnYAYhUM88yz7l1oizk4vu9:PZYLeHmh9/D9eoDyQp023nYA6UX88ol9","tlshash":"7b14121824a9ec95c1ac74bfe2a66f4d6d70d78d547db7c0b621cac6a323b03950393e","first_seen":"2026-05-25T23:49:00.318982Z","last_seen":"2026-05-25T23:50:21.53382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20251228/98d3c22fcf44ee68--300x300--.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.559Z","timestamp":1779752984559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20251228/98d3c22fcf44ee68--300x300--.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 155280\r\nlast-modified: Sun, 28 Dec 2025 07:54:51 GMT\r\netag: \"0a80724b22ab3faf4a3e9f16757a2476\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 4187f012ebd71eb85a8870ea46453784.cloudfront.net (CloudFront), 1.1 PS-NTG-01hLn226:17 (W), 1.1 PS-CZX-01LQk101:11 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: SIN2-P2\r\nx-amz-cf-id: dmxijEPFdaDvwCh6XP1jp8zmjS1K2o0YazTid8hhekXIQ3rfGF_VOg==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45225\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":155280,"size_decoded":155942,"mime_type":"image/gif","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d63ae656f89a88d4fac22946f1941deb","sha1":"ac0dcb7d7c3d30bcaf91b4dd81976e03406c2c99","sha256":"9cd9ce604e958e913d24cf1b4d4be07db3e5572d4e935b24c108bf3bf937e8fd","sha512":"461c4a253cb319112f621f04692a9ad4dde264dbfef244af04de93f9f0ab277a53ebf85ffa08daf85ce5773f82cccf59bd981bff977349fe2a5797dd9c1d4450","ssdeep":"6144:6jnJWEMboqdpHQS/m/ViK6ciCkgZsg4voXzDf:6VWESHD/ckgQMzD","tlshash":"871422d70e12a4ad54ecc58238e60dcd2e1c8f1d40a52c677ae35afe6dd6c70218eab5","first_seen":"2026-05-25T23:49:00.299417Z","last_seen":"2026-05-25T23:50:21.53472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":11,"connect":8,"send":0,"wait":291,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/static/img/up.a74702f.png","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.380Z","timestamp":1779752985380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /static/img/up.a74702f.png HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/static/css/11.fceef766b55be649740d.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 66169\r\ncontent-type: image/png\r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\netag: \"a74702f9a833b18c13614fcd49381219\"\r\nlast-modified: Thu, 28 Aug 2025 07:29:06 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding\r\nvia: 1.1 58b73acb67c037ebf3e55d50e0a967fe.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-requestid: 87ec6af2a6134bd422a3752e896bb203\r\ncontent-length: 2086\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2086,"size_decoded":2562,"mime_type":"image/png","magic":"ASCII text, with very long lines (2786), with no line terminators","md5":"290301cc0d4d1ebe71f1439e4a8f8209","sha1":"37580cd9c00f589d48946276acbe4c4948ec99bd","sha256":"5237467a4bfb6e02202136c4bba3aa0bce3b630e24b4ca8d5393458f60fcbd20","sha512":"19296adb97d25afb7be8a1a67d155a6c6092dce6555d46afc761658f0974724dc9f94e47aff87d3cc7809b73a2a9b5a91dd5831aa2c3ef5c984e05b3badf55f4","ssdeep":"","tlshash":"4551e9f77567bb0d98dcd916facea0262f2cc5de68621934507639c2052c32480650df","first_seen":"2026-05-25T23:49:00.320898Z","last_seen":"2026-05-25T23:50:21.535819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20220927/3b01ba81d907c22b.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.972Z","timestamp":1779752985972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20220927/3b01ba81d907c22b.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20220927/3b01ba81d907c22b.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20251218/e5b916f85057cf21--3840x1200--.jpg@.webp","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:46.269Z","timestamp":1779752986269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20251218/e5b916f85057cf21--3840x1200--.jpg@.webp HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 323280\r\nlast-modified: Thu, 18 Dec 2025 06:33:06 GMT\r\netag: \"0ee49b7a78400ddeb4b85dd1430c734a\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 18b24b9d82f8c92dd1fa9bebaf56af42.cloudfront.net (CloudFront), 1.1 PS-000-01HMp114:2 (W), 1.1 PS-NGB-01QPH177:10 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: CCU50-P4\r\nx-amz-cf-id: -759EqRWT17Rz9yAKt8OwFpE4Ho2Ck0BPGfjDTVEYGbWu8uYcVM9AA==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e01a_PShlamstdAMS1vj92_47818-45456\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":323280,"size_decoded":323943,"mime_type":"image/webp","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7333f5025f73a052f44f9081be1632c3","sha1":"3872ffb400df55bd9f77035d8371aee8c5e72d3a","sha256":"fc64652d7241ad35bdfa632f51d8673f60ada15485876f969bdcd52980d13337","sha512":"1e25d4f75bfc89ee7bfaf34e237a149e51cafe4f87351d8e1afd2e6b94915b29d05fc8eeb45afc736e38890e714a6a5abe09179b6df75f76a2c072dc933d97ac","ssdeep":"12288:Xs0BhIj83XtZy/NF4HnHwMQ12sazAoRGNMQE6YP9L:c0Bh1a/NF2nvQ0dzuHI","tlshash":"0c9423339da29cdb4bfc5b0262ca74047fad62c74487fce196cb1bcb809f24245d99a5","first_seen":"2026-05-25T23:49:00.331941Z","last_seen":"2026-05-25T23:50:21.538649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":431,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/lottery/lottery/home-list","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.746Z","timestamp":1779752984746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/lottery/lottery/home-list HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: d77857b71f6637f0b8f73867e3396877\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214278,"size_decoded":23557,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"983bdd9742f5f4fbca3816574a00bd63","sha1":"6464daf51d38ff692d8f51add7e01f6e8969eafa","sha256":"ff92be30903c7d6d24b02e3b0c7f54ca69b775ccfed57f26aa9437341f31c848","sha512":"8da7916843a88d17f8e95ad7594f9e1dc155565dda8ecad0dba7641a33c4e57c134963b01954a66ab3a0299e4c6ea74744721db717b3891f5b814fe1ad26063e","ssdeep":"1536:hcuMtzb1BcuMDQa45CcilugWrKJJT+eQG0oiAKJlblTltl6bTtF/v5G19n4vfp8g:eXPBprtSXlh/xBOe","tlshash":"9c24049701c6a8ed9b6268f968cfc65af59e0617c046ce58b785dfeccfcc651a133028","first_seen":"2026-05-25T23:49:00.272814Z","last_seen":"2026-05-25T23:50:21.541144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230909/7e159415ac43e237-1.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.773Z","timestamp":1779752984773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230909/7e159415ac43e237-1.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20230909/7e159415ac43e237-1.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45246\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20230511/23b60e1463a7f0ea.png","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:45.328Z","timestamp":1779752985328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20230511/23b60e1463a7f0ea.png HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://img.badendental.com/uploads/image/20230511/23b60e1463a7f0ea.png@.webp\r\nvia: 0.0 PShlamstdAMS1vj92:6 (W)\r\naccess-control-allow-origin: *\r\nserver: PWS/8.3.1.0.8\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e019_PShlamstdAMS1vj92_47818-45312\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T23:30:23.176379Z","times_seen":17698708,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaaa5115.com/_data/activity/popup/list","fqdn":"aaaa5115.com","domain":"aaaa5115.com","tld":"com"},"ip":{"addr":"154.213.177.173","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:43.806Z","timestamp":1779752983806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaaa5115.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:24:36 GMT","end":"Mon, 01 Jun 2026 16:24:35 GMT"},"fingerprint":{"sha1":"F3:EA:F1:C7:1D:F8:4B:0B:57:D4:A8:8F:AC:A3:BB:80:C2:5D:DD:C9","sha256":"DB:84:F8:1D:52:BA:73:9B:3B:A6:26:FA:9D:4F:EE:F4:BE:53:56:7A:C8:6C:FD:64:8D:CF:D9:11:B9:29:E1:72"}}},"request":{"raw":"GET /_data/activity/popup/list HTTP/1.1\r\nHost: aaaa5115.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrType: 2\r\ntpl: 5\r\nWebver: 4.10.2\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 25 May 2026 23:49:44 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=15768000\r\nvary: Accept-Encoding, Accept\r\nx-requestid: 94b9d58a44a6a91e84648e749d581e60\r\ncontent-length: 3379\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8926,"size_decoded":3686,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (6571), with no line terminators","md5":"ea00b582bc22a4547da4d1b87c312bdc","sha1":"5a8e12f73554753eef4b3fbce9a6f23b4f892259","sha256":"43713b4536482ed3e7190b7cf18e27198caee9892eca87d87b4ffaff5a5f31f9","sha512":"e5d3605be6ca8228e5b26cadc5811235d376e3f881c757999a30be98cfc21db851049fc9bcb0d6ccfa9879aaed9e13fd69fc9ad9066338f719e6314af4db1374","ssdeep":"192:SykkPtA2L8yQLXmt3qe7pxb5OP6hMZqhJociqhK1x4Z:tqy/jpNocbZ","tlshash":"a712b89354a9d6e945a824db11e19f6e298102dfd4e26f74f3f3f8384ad0878273724b","first_seen":"2026-05-25T23:49:00.287056Z","last_seen":"2026-05-25T23:50:21.476194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"aaaa5115.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"aaaa5115.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.badendental.com/uploads/image/20251026/3053e5d03d9a6bbb--300x300--.gif","fqdn":"img.badendental.com","domain":"badendental.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaaa5115.com/","date":"2026-05-25T23:49:44.563Z","timestamp":1779752984563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.badendental.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:52:FB:D7:63:2B:7E:0D:F4:5A:A7:22:B3:DA:C4:00:AE:A8:B1:49","sha256":"DE:27:39:E8:6F:03:5F:4D:C4:31:B6:64:E1:02:8E:96:79:8C:A1:3D:D7:02:A4:B9:98:FD:F6:00:E0:67:5F:45"}}},"request":{"raw":"GET /uploads/image/20251026/3053e5d03d9a6bbb--300x300--.gif HTTP/1.1\r\nHost: img.badendental.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaaa5115.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 25 May 2026 23:49:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43075\r\nlast-modified: Sun, 26 Oct 2025 07:29:54 GMT\r\netag: \"b6376f9df41c07d607dfe4ba48e63fea\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 3f53c5d558c7725105f3837916f8e5c2.cloudfront.net (CloudFront), 1.1 PS-JJN-01m5h211:9 (W), 1.1 zhoudxin93:18 (W), 1.1 PShlamstdAMS1vj92:6 (W)\r\nx-amz-cf-pop: NRT12-P8\r\nx-amz-cf-id: zId2_-M5DFauBVIKtDNtlQzhj5vdJguTsZSagQnqyiUVcWRaqQKaIw==\r\nx-px: ht PShlamstdAMS1vj92AMS\r\nx-ws-request-id: 6a14e018_PShlamstdAMS1vj92_47818-45230\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43075,"size_decoded":43731,"mime_type":"image/gif","magic":"ASCII text, with very long lines (57436), with no line terminators","md5":"b23462fcf828f18f34ea9d54aa91cb67","sha1":"0c528675761b82cfceea9d8c2c2a560a94b3ba77","sha256":"98dd7bad67db4b8763b6e158dbd09e25b1bfcd90107c7195254a6013aec5b4fd","sha512":"dbf5b20485f83b34d43d04f21bb1f9f313a147cf1bc70c1d4240ce1a986ded8147c4764df36860bbf6e375b5d12b4d31da22c930d3011b6a256948c52cae50da","ssdeep":"1536:iI31pjeEKbq4MQhlG5So3nCo3vcOdeMoh8Tc3:5mBlmXhkcdohT3","tlshash":"50430267b0b96d354e8dd8b67d26130b8d7aa5f9926b335f92326632e0094718c2fc43","first_seen":"2026-05-25T23:49:00.26055Z","last_seen":"2026-05-25T23:50:21.5428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":566,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}