{"report_id":"1e811179-43d6-4e9e-9228-7f31d76715a9","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-01-30T06:15:29Z","url":{"schema":"https","addr":"www.multiscan.app/","fqdn":"www.multiscan.app","domain":"multiscan.app","tld":"app"},"ip":{"addr":"108.61.166.34","port":0,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"www.multiscan.app/","fqdn":"www.multiscan.app","domain":"www.multiscan.app","tld":""},"title":"AMLBot - Comprehensive AML Compliance Solutions for Crypto","dom":{"size":23131,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21666)","md5":"5ac5ee5ce3cd43e0076ec2724ab99329","sha1":"033d7559ee58cf6fec550a18100b17019f199327","sha256":"53fa977eeab6c5d2a2cfaa4a489d1f4f5b70fc60866ce1ebb58d0224bdda6faf","sha512":"a43ebb2c2e0e3e8672f13a0611cb74e50d8696f4edc1e3e14f30ef23a7ac2b8526540041576955b591beccb21b697d886d838230c45b2ca43dedb3d966d0226a","ssdeep":"384:H/UCmQXLL3hOhVnFoyJMd1Y9+/dK9PdrRfVDTnngKs7jybgoAJUfnUCmQXLL/ho8:NmQbLghVnFoyJMffhumQbLmi","tlshash":"fca2a2f252052337523709c5ba2a239d32abd2adef27048057fdc6a41bd7ca4ed274c8","dom_hash":"domhashb24f700479b13ae9f2d5d6a4131ed863","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.multiscan.app/","fqdn":"www.multiscan.app","domain":"multiscan.app","tld":"app"},"ip":{"addr":"108.61.166.34","port":0,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T06:15:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-01-30","alert":"Detects file containing Telegram Bot API","trigger":"www.multiscan.app/assets/index-1bA2O17Z.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"amlbot.com","ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-31","domain_rank":653759,"first_seen":"2017-04-19T06:25:05Z","last_seen":"2026-01-30T05:31:47.314054Z","alert_count":0,"request_count":12,"received_data":65389,"sent_data":5756,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.multiscan.app","ip":{"addr":"108.61.166.34","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-30T05:31:46.8475Z","last_seen":"2026-01-30T05:31:46.8475Z","alert_count":2,"request_count":3,"received_data":579902,"sent_data":1361,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":3076,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"www.multiscan.app/assets/index-1bA2O17Z.js","fqdn":"www.multiscan.app","domain":"www.multiscan.app","tld":""},"ip":{"addr":"108.61.166.34","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"md5":"070984be4d4a62bd418daa7ff061d636","sha1":"7c99696467929a2c6587b366c78a45b9f3a4b820","sha256":"0b683f9013d408b7bddc58d08bae472316fa6e9f6a093d61e957f81fa30f7728","sha512":"8623aab71d8086aa182efa3ffd663f2f4692adb40389903f1381f1a938e8ff18b7abc34a50c14ece590fa394e83f4837e8f268a5c5c1e9825d39d0ee86303578","size":526265,"token":"8488646645:AAEyGRl3Os2AVMveBzJWdFgbb9yKVEDrhuI","is_revoked":false,"bot":{"token":"8488646645:AAEyGRl3Os2AVMveBzJWdFgbb9yKVEDrhuI","user_id":"8488646645","username":"Crypto1377Bot","first_name":"CryptoBot","last_name":"","chat":{"chat_id":"-1003373959785","title":"CryptoAml","type":"supergroup","bot_is":"administrator","total_users":3,"active_members":null,"admins":[{"user_id":8488646645,"username":"Crypto1377Bot","first_name":"CryptoBot","last_name":"","is_bot":true},{"user_id":8379964221,"username":"bm543171","first_name":"BM","last_name":"","is_bot":false},{"user_id":7970392479,"username":"nenazivaymenytak","first_name":"Волан де Морт","last_name":"","is_bot":false}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.multiscan.app/assets/index-1bA2O17Z.js","fqdn":"www.multiscan.app","domain":"www.multiscan.app","tld":""},"ip":{"addr":"108.61.166.34","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"070984be4d4a62bd418daa7ff061d636","sha1":"7c99696467929a2c6587b366c78a45b9f3a4b820","sha256":"0b683f9013d408b7bddc58d08bae472316fa6e9f6a093d61e957f81fa30f7728","sha512":"8623aab71d8086aa182efa3ffd663f2f4692adb40389903f1381f1a938e8ff18b7abc34a50c14ece590fa394e83f4837e8f268a5c5c1e9825d39d0ee86303578","ssdeep":"6144:XZMi35I4mZMyWPxm3TENOkbdHIoKfa7CPw+u7VqfaLRjt2wU3lbWhjLPYZ7s+fiv:JMsUZaET6b9I5a2Pwz7VBCWO0/","tlshash":"8db45bd431abf1664bb614e5007b0103f2395c66744d84a0f26ceeeb3bb944995bbfb8","size":526265,"data":"","first_seen":"2026-01-30T05:31:54.225378Z","last_seen":"2026-01-30T06:15:31.921012Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-01-30","alert":"Detects file containing Telegram Bot API","trigger":"www.multiscan.app/assets/index-1bA2O17Z.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amlbot.com/_next/static/media/icon-shield.8fac01d1.svg","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/static/media/icon-shield.8fac01d1.svg HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 30 Jan 2026 01:55:44 GMT\r\netag: W/\"5ff-19c0c9d0b3a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYlWn46g00vnOsTMbD%2FRXWgfsyvM278UPktCKDs7VMgmZtd57Xw80jXRlYEtIg1Epc5%2Bz4Iv4IVJ4Zteu2p3OiaLTiHtwYU4gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 4818\r\ncf-cache-status: HIT\r\ncf-ray: 9c5ed543cdc4c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c92235e29b4cd7114c224915afda1fd0","sha1":"406636e603072697fa29d085bcaeebade257b735","sha256":"c5875ac56ebf69d08b29d19e13875e502183171b7c282a9aafe3a6f23623d4fb","sha512":"f2b99859974f7e5bbd9ea9b888de86a74cfdfe2b04e196d8ddeacafb42488f4df19ef8d73ed80594afd768e2f7afef5beae906b484d0741b35af683e4faaed09","ssdeep":"","tlshash":"d6311fadcac892d8748197b0c127e8360baf20f67b42df958654aee4e70a24d0c1dc90","first_seen":"2025-01-02T04:53:56.636465Z","last_seen":"2026-05-07T17:25:52.048651Z","times_seen":58,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":33,"dns":8,"connect":1,"send":0,"wait":9,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FLSW3.f1348f65.webp\u0026w=96\u0026q=75","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FLSW3.f1348f65.webp\u0026w=96\u0026q=75 HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1220\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=315360000, immutable\r\netag: EwYgPvjTHMcS+saNz8vD5Hc8dP8K7mkS-DA-wJiN4Ss=\r\ncontent-disposition: inline; filename=\"LSW3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLW9NrOCFeJLhSO8cq4duJWFe1rf09Ogcr7ImbxQ2JFTjK%2BBgmPsQkxBXYkuHxbmaUyz84nCxGwdzySdWY%2F4fSAhwgR7BdNsVw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c5ed5445ee6c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2adb81a6fb04686d4d9c4b06a0f8dc76","sha1":"b45e11677efaf36c0f4e1ba7302b8d8b83873dd0","sha256":"1306203ef8d31cc712fac68dcfcbc3e4773c74ff0aee6912fc303fc0988de12b","sha512":"8604ddfcdbaa4d35404d1ea980f26a506cd693e6d542ecca8cd40f8f839e8cc54cdee7cabe9f63d15903ab5252768d31af4f6d8dc64d42c3a646694f29dea292","ssdeep":"","tlshash":"7021da4c4369915aebc63a8fe3d871053704b4d90e68f31c9904091358acfd633464ab","first_seen":"2025-07-15T16:37:15.327163Z","last_seen":"2026-05-11T00:12:38.983292Z","times_seen":59,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FFTAHK.a46bf924.webp\u0026w=256\u0026q=75","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FFTAHK.a46bf924.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5216\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=315360000, immutable\r\netag: ipP+qxaf+BAz-CJifFKzqgao2jmaXUN+CFVqMnSVi1E=\r\ncontent-disposition: inline; filename=\"FTAHK.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ORk0GNkCo0UFbH63q9FcG9JcD1X8iIMLio4UKRlhVr97%2Fu2dLSiTBbhF7yHsqSRzNvLGGrY06c6Yv4uaT08F1OIRUEDXaGCU9g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c5ed5445ef0c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3566bf48385350d928e338894b58b5c","sha1":"a6a52b5878861b65147325f20fa5b907b341c7e1","sha256":"8a93feab169ff81033fc22627c52b3aa06a8da399a5d437e08556a3274958b51","sha512":"e4a7e595192141f1f565827b7825926d980ec8246c8a3ce43f55459a52c5f6ad8baf40ed2abe2d40b6fae66fa075d6052ed102a76bb075ad6cce4addd3ef73f5","ssdeep":"96:N6ZcRs6wgRgLLaZpKsa3jmvAFaJvq8eZoOFk1BMHnxUGJuOydfOkxZLz:N6ZcRsNLq3a3jpaoFPS1BQxUGEOAdxZX","tlshash":"3db17d82d7d2be62d20c8c220bd8153955c8f11b54ba6ef78f554202e276e3a5c4abb2","first_seen":"2025-05-30T09:05:59.233731Z","last_seen":"2026-05-11T00:12:38.990585Z","times_seen":80,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/_next/static/media/huobi-white.ef112ac0.svg","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/static/media/huobi-white.ef112ac0.svg HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 21 Jan 2026 04:10:55 GMT\r\netag: W/\"be8-19bdebf90d3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRS%2Fmo%2FPuJCZnufZjIVBX4drHYw9GBVcEYrqTGuimg9T3uLNwJRDCM%2B%2BrhAlVmlpJoGSBR3D3pRMSKVZDBN1pBU5pZ%2Fl8u2zIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 679943\r\ncf-cache-status: HIT\r\ncf-ray: 9c5ed5445f02c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3048,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65924fc0d138c205eaadba4f53d04a61","sha1":"b0d1f59feba8f4c981f4d1845351c7ea664ec3b1","sha256":"054f78aea65883bc1f1b67f1508030a4f8522581918cfedc80a541db00058fa1","sha512":"6160b0ad4757125920803bc20b91f6480629603a0c879882b46d5a63fb9d9cc45cebb49d805bbcdb8d4d5e6fabbe51aa4531937a1325871a1a57c16e7688f745","ssdeep":"","tlshash":"575194c993cc93f8e805b3f40124947a263725f17a63c16883dc2ea5fd4615fc98cac8","first_seen":"2025-06-28T19:36:09.234114Z","last_seen":"2026-05-17T04:03:20.15376Z","times_seen":89,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fcover.9d5222c4.webp\u0026w=1920\u0026q=75","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fcover.9d5222c4.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29518\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=315360000, immutable\r\netag: 3xHKuWZNzZa94FyTm9poHtScoq7VPWeKue-VRh6N2s4=\r\ncontent-disposition: inline; filename=\"cover.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8pFEg8VXBfngtNT9wfre%2FKPhiQZZ8Dj1Gvt3KokzELtXbN8tfNzwcsc7SrByKkbc%2F6ynqcd8v%2B1V7G9rjM0qEx%2FIVcG%2F1kJpw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c5ed5444ec9c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d39c85d71fc3e1eb753fe198f8c24640","sha1":"5230d47613a60b0293ce539727f1f5e423dbbf63","sha256":"df11cab9664dcd96bde05c939bda681ed49ca2aed53d678ab9efd5461e8ddace","sha512":"37a4d25ffa1caffb11a9d8e3c6beb8e389065f2c64964008bf950af22d218efb5333c77f2a3da4e739c02f6daa601d6c39229c7f322860a492b668f439f4b7e7","ssdeep":"768:RllxzVPpijULSs9QllHu4WZipgp9Q+SGzjxugPFDR48W2kUr2h:Rll1BEUhKllHuPi29Qkjv342kUr","tlshash":"f9d2bf3741ede186e381bab45165fa8326622d3e26134a841d2d2c2b5347dbf3b589fc","first_seen":"2026-01-10T17:03:26.026141Z","last_seen":"2026-05-13T13:15:04.45351Z","times_seen":19,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FATII.cf0e185d.webp\u0026w=96\u0026q=75","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FATII.cf0e185d.webp\u0026w=96\u0026q=75 HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2486\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=315360000, immutable\r\netag: Lnq7npSGkxM1IFuG+TPGPXr4f8HNuUeP8uCH7drKBUM=\r\ncontent-disposition: inline; filename=\"ATII.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IdNyozT%2BB4pGJ6Dr9R7ANeplQuo1iBNvBmIQM97O4YzP4xP5MrqS8C%2B8uMImj43trPKORpdHD8udNtLwmNIp93UGgbYczmi90g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c5ed5445ee2c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da0d31a8dd42682de2b0042f31b970b9","sha1":"51309b7378e766b68564f464c2c0c63dcc0286e5","sha256":"2e7abb9e9486931335205b86f933c63d7af87fc1cdb9478ff2e087eddaca0543","sha512":"626a3cd9ace3f351c001a4c279749f96e1fa48565ee4bd71d89ffb1eb2354f6b894b20aacdd17642ae38ff92adf83b70759419456c478f9a6fbf3f3a1b75f5ca","ssdeep":"","tlshash":"a2511c5943e9839759110535a5f8fe44b583b4faf502b400711eb5b2dc4bdd1b68b930","first_seen":"2025-07-15T16:37:15.37126Z","last_seen":"2026-05-11T00:12:38.976677Z","times_seen":59,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FEBA.a1002461.webp\u0026w=96\u0026q=75","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FEBA.a1002461.webp\u0026w=96\u0026q=75 HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1792\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=315360000, immutable\r\netag: xrkPzj-It+IEP17kOIyyP+O8P9+ntoEw-eyjOXcGzrY=\r\ncontent-disposition: inline; filename=\"EBA.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AU6P2Rxdapq5O8ZYz4QAKedi%2BZrTVVYXRhrP0xa6nytwdoUk2vkzwdGNTERkfqxmeyhNaI25f47v4zwUiPAGAmfHBsav3%2B8D5Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c5ed5445eebc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1822014877c2090873360b1ca4fc55a","sha1":"5487e92bec14c4adcee960c36b4609ce18678dbe","sha256":"c6b90fce3fc8b7e2043f5ee4388cb23fe3bc3fdfa7b68130fdeca3397706ceb6","sha512":"35887a25df1fc25be45a29028f71ac301196df123844695f80bf09dbf66a2f7fa9f63a53c40f84f2d84416bb1f593e743a395ac38b549e742125dc0ebd1712d0","ssdeep":"","tlshash":"4c31e9c541b54a55eb8dbe6f0321b00b160169e452dcd44c628583f023e8be273e9a2f","first_seen":"2025-07-15T16:37:15.345082Z","last_seen":"2026-05-11T00:12:38.984201Z","times_seen":58,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/_next/static/media/okx-white.32ece2b9.svg","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/static/media/okx-white.32ece2b9.svg HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 21 Jan 2026 04:10:55 GMT\r\netag: W/\"e2b-19bdebf90d3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkF86Qk2IbiRbT0TDc4guGVn%2FaxpWFY7aFHLkdyEmduuxW35uzX9VssnPexqKGx0DMuVOkLHRjpbMfbfBqasMkKAYeIiyib5Uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 679943\r\ncf-cache-status: HIT\r\ncf-ray: 9c5ed5445ef8c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0c53aa999c88a232bf00d8d50dd8548","sha1":"07bf1f375a55a841b03a5f131efc62e2f9a8da7a","sha256":"e9b72ee47d139385ae90d6a8b4a1e0baccd2ea7697f75736b4fbf911cd3314d9","sha512":"da17d076133f4844a097c298e99a7a79d0c9983384b38778e09086362615fbc92e501107138ba5606f43ba82fc0c47d4b7eb7e92549de92911dd99ea9d70d7f0","ssdeep":"","tlshash":"1d71648597dcd1909343aff4c3247475aeb328e8db214a50c790ddbaf82549ecc89dc1","first_seen":"2025-06-28T19:36:09.240132Z","last_seen":"2026-05-17T04:03:20.160883Z","times_seen":91,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/favicon.png","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 842\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=120\r\nlast-modified: Fri, 30 Jan 2026 01:53:36 GMT\r\netag: W/\"34a-19c0c9b182b\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcPcrwgMt6Flv2NQmHtwIx2P4ru1AqmuagLGHYyPH60idWy5XxcVQZtGKNZE5Yu6i2K22qXlo9yQVTBblQwFazhBDGEdCJM1yQ%3D%3D\"}]}\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\ncf-ray: 9c5ed5474cf7c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"476eed806d70bf9f1bfdecf4baf2e309","sha1":"97e7c78720573a83268c59ca94c2cd3f4509b87d","sha256":"5f5e527b934604aca616122cb13de8a844caa057dc72d8e9310086998f6c61a7","sha512":"e424a2d6608c004c7f8b4d122c9855d5148ed4d8ad6cbfed40e14f647b8ecc50b1c46c2d5c5357f6b30ec8b75f6aa332e8fa8698dd6599c4f9b0e5b5a3874721","ssdeep":"","tlshash":"870170afa2392807d0f80e99eb12528edc91934c611abe14cc280703867fcb3f2a1d03","first_seen":"2024-10-04T11:01:22.290979Z","last_seen":"2026-06-01T01:07:42.516854Z","times_seen":299,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.multiscan.app/assets/index-DBhOLNUR.css","fqdn":"www.multiscan.app","domain":"www.multiscan.app","tld":""},"ip":{"addr":"108.61.166.34","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:07.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multiscan.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 15:33:46 GMT","end":"Sun, 26 Apr 2026 15:33:45 GMT"},"fingerprint":{"sha1":"16:3E:4D:45:5D:D8:70:8A:CE:18:1E:35:AB:3B:0C:61:1D:26:0A:6D","sha256":"6F:0D:8C:5D:E3:DB:EC:74:1A:A4:47:FE:74:2A:E6:4D:B3:F7:48:DD:76:F2:7B:9E:78:3A:AA:1E:39:04:44:99"}}},"request":{"raw":"GET /assets/index-DBhOLNUR.css HTTP/1.1\r\nHost: www.multiscan.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 30 Jan 2026 06:15:07 GMT\r\nContent-Type: text/css\r\nContent-Length: 51293\r\nLast-Modified: Thu, 29 Jan 2026 15:32:09 GMT\r\nConnection: keep-alive\r\nETag: \"697b7d79-c85d\"\r\nX-Who: multiscan-conf-d\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51293,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (51291)","md5":"35f053a3f3aea58a8cab7c5fbc42b5dd","sha1":"61332c96c8e974c9282036ff8b95151729a9e9e9","sha256":"b768e4eebbf95e81fc2806f56e411e73fc4c6ae054ecb5780c4c7b40604f7bc2","sha512":"a1d293ac4a1d19c98c17df3f459d12991d8080f13b8dc0f084b33a97d0d71323b13ddcadf46a3e9c8d9f909c824ccf4071202f38ae7c9c3682070cacae83211f","ssdeep":"768:sbLeJrOLLdWSsprpSG9pSiQPtMtlb8paEgSp:+LIrOLLdGprp19ePtMt580E7","tlshash":"d633d8336718201ef02b8515b6e2a7dd2519a845e71f47fae913be6495cf2a30933bcc","first_seen":"2026-01-30T05:31:54.217871Z","last_seen":"2026-01-30T06:15:31.920196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":34,"dns":1,"connect":15,"send":0,"wait":32,"receive":17,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.multiscan.app/assets/index-1bA2O17Z.js","fqdn":"www.multiscan.app","domain":"www.multiscan.app","tld":""},"ip":{"addr":"108.61.166.34","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:07.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multiscan.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 15:33:46 GMT","end":"Sun, 26 Apr 2026 15:33:45 GMT"},"fingerprint":{"sha1":"16:3E:4D:45:5D:D8:70:8A:CE:18:1E:35:AB:3B:0C:61:1D:26:0A:6D","sha256":"6F:0D:8C:5D:E3:DB:EC:74:1A:A4:47:FE:74:2A:E6:4D:B3:F7:48:DD:76:F2:7B:9E:78:3A:AA:1E:39:04:44:99"}}},"request":{"raw":"GET /assets/index-1bA2O17Z.js HTTP/1.1\r\nHost: www.multiscan.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 30 Jan 2026 06:15:07 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 526265\r\nLast-Modified: Thu, 29 Jan 2026 15:30:40 GMT\r\nConnection: keep-alive\r\nETag: \"697b7d20-807b9\"\r\nX-Who: multiscan-conf-d\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":526265,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"070984be4d4a62bd418daa7ff061d636","sha1":"7c99696467929a2c6587b366c78a45b9f3a4b820","sha256":"0b683f9013d408b7bddc58d08bae472316fa6e9f6a093d61e957f81fa30f7728","sha512":"8623aab71d8086aa182efa3ffd663f2f4692adb40389903f1381f1a938e8ff18b7abc34a50c14ece590fa394e83f4837e8f268a5c5c1e9825d39d0ee86303578","ssdeep":"6144:XZMi35I4mZMyWPxm3TENOkbdHIoKfa7CPw+u7VqfaLRjt2wU3lbWhjLPYZ7s+fiv:JMsUZaET6b9I5a2Pwz7VBCWO0/","tlshash":"8db45bd431abf1664bb614e5007b0103f2395c66744d84a0f26ceeeb3bb944995bbfb8","first_seen":"2026-01-30T05:31:54.225378Z","last_seen":"2026-01-30T06:15:31.921012Z","times_seen":2,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-01-30","alert":"Detects file containing Telegram Bot API","trigger":"www.multiscan.app/assets/index-1bA2O17Z.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"amlbot.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FCDA.d7fac033.webp\u0026w=96\u0026q=75","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FCDA.d7fac033.webp\u0026w=96\u0026q=75 HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1464\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=315360000, immutable\r\netag: WXFBSakpkJXKnq0bXWL+kWmLeGMCd0dhNip9K1b-29M=\r\ncontent-disposition: inline; filename=\"CDA.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vhy71K9yvxktdhT%2FtwMRz90o5kn6fl6zYKY4wLDdMJOu3VhtAmXBbB73dZWDleXCZwJEsK9cl%2FqzGZKlu2kQiSKuaO94rYutEQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c5ed5445ee1c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b073fd6159828af449f66e5b33f20299","sha1":"36f76562f8e2aea9f0e64cbed88b29bd6d7bbdb8","sha256":"59714149a9299095ca9ead1b5d62fe91698b786302774761362a7d2b56ffdbd3","sha512":"970858de8207fcf89c03190913003257bc5012126375bf48335f89dff1d54db951c50bb0fc771da2dd2086a4c3b404af6ed98ccd6000925cb25bc9e956e1e41a","ssdeep":"","tlshash":"50311948423db0a08b8a2706155d89053a257d941d786e36033c01bd04af7f49dd60bf","first_seen":"2025-07-15T16:37:15.343411Z","last_seen":"2026-05-11T00:12:39.018498Z","times_seen":58,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FINATBA.9636cc23.webp\u0026w=96\u0026q=75","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FINATBA.9636cc23.webp\u0026w=96\u0026q=75 HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1344\r\nserver: cloudflare\r\nvary: Accept\r\ncache-control: public, max-age=315360000, immutable\r\netag: gwLI7wY6dUNI27yX8gVAWler6nVejCt4HjhxFKbOZgE=\r\ncontent-disposition: inline; filename=\"INATBA.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxoLCvc%2FeD7HkDnX9pdfLsfrTcf7etyFm1iHiODYfxlk4q8f02yhtkfPG%2Fkdk7kjCR14Kj%2Bu9cW7bJd%2Fa7ZhXSHlJR8p1fjkgA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c5ed5445edfc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1344,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60d4656a7d1bc12c60606058b2124a59","sha1":"824f8b49aefff47bcdeb4e9ccf49129f08390417","sha256":"8302c8ef063a754348dbbc97f205405a57abea755e8c2b781e387114a6ce6601","sha512":"45054af57b6d4eb7947c55d55680a709d4ab823e9dedbfc79865949fb0b8304e6e5b2a471649ca728dd7c7955a95cdc84bbc51025e0e64cab626f52f72618bcb","ssdeep":"","tlshash":"39212b44013c5c80ed4da91e6100a191aa1b79db8f5dceac73a020f298ed3f22bc0d71","first_seen":"2025-07-15T16:37:15.362838Z","last_seen":"2026-05-11T00:12:38.975409Z","times_seen":59,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/_next/static/media/binance-white.aed1452d.svg","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:08.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 03:43:58 GMT","end":"Sun, 29 Mar 2026 03:43:57 GMT"},"fingerprint":{"sha1":"A8:D4:99:92:1B:E4:9F:25:26:44:B0:50:54:9F:8D:13:C3:DE:05:BB","sha256":"57:B4:FD:77:9A:3E:C0:A0:2B:F8:34:F8:FF:A6:9E:72:E2:8B:68:93:3B:DC:7B:31:99:A2:11:1A:A4:90:A8:23"}}},"request":{"raw":"GET /_next/static/media/binance-white.aed1452d.svg HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:15:08 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 21 Jan 2026 04:10:55 GMT\r\netag: W/\"1096-19bdebf90d3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1u3aNriJOGZjhNW5tt%2BwHdXhUS1qL9qP05HVVizKHvU2aBqAGnDQ%2BfQ9ZgOKs9FEwqCfky9oPxORvqrMkRItpBEsHbD7q7E3og%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 293013\r\ncf-cache-status: HIT\r\ncf-ray: 9c5ed5445ef6c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c476922d1280fbf708b441a94631de0","sha1":"c07b648faaf8fd519f06e28684f75066537a40b0","sha256":"4873562ac2ffd2ddfc86ed3daa0674640414fcc1393aac0637abe443c66a7a0a","sha512":"a7d8e7ee55d2988241f1fa7e8801a8b50e3b8d0bbb75eea3519b05cd35d8054f205720d680b5e4bf27acb39ed135b2d59f66b516bc365c84ed1758f98ffa7b9e","ssdeep":"96:d+hJ940X5BHxFsfY4LcIddQ5IP+xGsft660wd2:dWfX5lLswUk6P+Us0wd2","tlshash":"a291a5da63dca1a0c447e7756707107bbe2b6cf9be2ac790465a5c9ebe1009e4c9dcc0","first_seen":"2025-06-28T19:36:09.204961Z","last_seen":"2026-05-17T04:03:20.168958Z","times_seen":114,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.multiscan.app/","fqdn":"www.multiscan.app","domain":"www.multiscan.app","tld":""},"ip":{"addr":"108.61.166.34","port":443,"asn":20473,"as":"AS-VULTR","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T06:15:07.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multiscan.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 15:33:46 GMT","end":"Sun, 26 Apr 2026 15:33:45 GMT"},"fingerprint":{"sha1":"16:3E:4D:45:5D:D8:70:8A:CE:18:1E:35:AB:3B:0C:61:1D:26:0A:6D","sha256":"6F:0D:8C:5D:E3:DB:EC:74:1A:A4:47:FE:74:2A:E6:4D:B3:F7:48:DD:76:F2:7B:9E:78:3A:AA:1E:39:04:44:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.multiscan.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 30 Jan 2026 06:15:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 1534\r\nLast-Modified: Thu, 29 Jan 2026 15:30:33 GMT\r\nConnection: keep-alive\r\nETag: \"697b7d19-5fe\"\r\nX-Who: multiscan-conf-d\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"4656766006f9721c739c2d1c893f91de","sha1":"4d565d477deca705e66b8a8ebebfebb20450065b","sha256":"4a1e702b45255dcc9906562f945b0ebbe708dd306ce24ff5510d26151deb7913","sha512":"7e4f1e0741488b59c513ad1aa8ce6cd94a3616433e86077829be9ae5ea6181ba7fe40df58be4696a42e89b4d99b7f2c9847833a1fe7450e4b284ba8afe80122b","ssdeep":"","tlshash":"963112234a848846137082942ed3f01ccd5691c79759ee91b2d9609f4ff36e1c9ff666","first_seen":"2026-01-30T05:31:54.223969Z","last_seen":"2026-01-30T06:15:31.925216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":77,"dns":39,"connect":16,"send":0,"wait":16,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.multiscan.app/","date":"2026-01-30T06:15:07.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.multiscan.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 30 Jan 2026 06:15:07 GMT\r\ndate: Fri, 30 Jan 2026 06:15:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"99732590118df209cfff721d0d4bbb19","sha1":"6ae6323f3fcd8085a9bb38292b65972b92f1881a","sha256":"7d306f38fb5378f3a004776b9c2436cb31e864dfe47674b4f8334673ae5a2bb9","sha512":"c84f3706d491bf8ee62c595caba3533a9078dd5e474ea291b8d683d50eed716f19379ceb6007ac78ad50a53f64faa65f776310029514b363a4f9126c5aa3f1a5","ssdeep":"","tlshash":"ae419bd1087be114ab831cc123ce7d37ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T06:17:11.832934Z","last_seen":"2026-06-06T05:45:23.236632Z","times_seen":4066,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":193,"dns":1,"connect":20,"send":0,"wait":34,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}