{"report_id":"28085120-946e-4a87-b44f-3417ef198e7b","version":0,"status":"done","tags":[],"date":"2026-06-29T01:34:22Z","url":{"schema":"https","addr":"amlproof.online/","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":0,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"amlproof.online/","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"title":"Crypto Wallet Verification","dom":{"size":45532,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3295)","md5":"7e36d6d4585b8322c39752075ad7bcb0","sha1":"2d8aacba9b9bc727fd5c5590d23f0571abf61063","sha256":"e0a60d8fb804db896116e3cbe4031f5fd58caaea984b9d89f2d444b1b2bb5cbd","sha512":"9b447e5248884ec15e6391d514bea70e487ff988947b75358734b96fe1fd7ac42d543f852b8f7f77377cfdb69ef0aef4e15c990bcda6479eb544df75a7b21eeb","ssdeep":"768:gA77mywd/FDacccqm77mywd/D5kcogSDFDacccqc/2fSL2Ri:Tuyw1F2cccLuyw1D5qgSDF2cccN/H28","tlshash":"af13393526f5211b05934290ab26773ebf98e283d21b15a036bc4ba90fc3dd6dd375ac","dom_hash":"domhash2c21c01c111ae5264731edd09ddc8bf7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amlproof.online/","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":0,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-03T01:34:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-29","alert":"Phishing Block","trigger":"amlbot.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlbot.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-28T22:47:06.167692Z","alert_count":0,"request_count":1,"received_data":15804,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"amlproof.online","ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":1142191,"sent_data":7115,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"amlbot.cc","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-04-30","domain_rank":0,"first_seen":"2025-07-19T07:51:23.973226Z","last_seen":"2026-01-15T06:02:17.904729Z","alert_count":4,"request_count":2,"received_data":0,"sent_data":1120,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/aos@2.3.4/dist/aos.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","size":14690,"data":"","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-06-29T19:30:43.034906Z","times_seen":9743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/script.js","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"44c23fc9668c98fca87e70cef5a48bd8","sha1":"042ff32ad9177550322d433df6314abd47584f4e","sha256":"a41b568fd3a9959e3c8f90eac2d0d57234dba6d0db0cb2b9902445f680bcff2f","sha512":"27097453b090e0ba858802de1f2aa324707eebb40d47fdd8fbed0e0a4852fc525cc5d53dff0564876a8f31ce58469c7fa3cfb30a6ce8870e5e8656e27aedbd0b","ssdeep":"","tlshash":"4111ba760628a97a435f82aba2c263c1bb7514ce6445142838688c9f1af9de249e17e7","size":904,"data":"","first_seen":"2025-06-23T17:19:32.686102Z","last_seen":"2026-06-29T01:34:31.32233Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amlproof.online/static/images/about-2.svg","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.473Z","timestamp":1782696839473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/images/about-2.svg HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 May 2025 19:55:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683618a0-51b2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20914,"size_decoded":9473,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25338e0d0b31e0cb10263e648ba46d91","sha1":"8310fa1119579f2e104a5a27aae8cd748c4fda97","sha256":"95eec108925be9cd02bbdc383fdb10ca41a0cacb2a8c5424bf3b82bfc22ff8e9","sha512":"99159db795de83c3a816d6738b9f6218f4352b08e4468907b305356e7f30b6d459d2c07845ae0c5d12def84317666d1cf187c7bed5e50ced54b83c16b3e0691b","ssdeep":"384:DMoXG4s46bEE5gMDDPrAesOzCflNEto8qi3tXlkMi0ZoUoyB/:QT94E3DDDAHONG8qKCMi0Zowh","tlshash":"2d92c7ed2f718ee9ecc896dbbf0251ac341390b7a9958b78c2a85e1c3845c1dd851ed3","first_seen":"2025-06-23T17:19:32.680314Z","last_seen":"2026-06-29T01:34:31.330213Z","times_seen":12,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/images/eth.svg","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.475Z","timestamp":1782696839475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/images/eth.svg HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 May 2025 19:55:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6836189f-81e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2078,"size_decoded":1144,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8fdadbbc6bac9ca724770845ab7cd9df","sha1":"84c5c932feb03175a4e30c79202320d7736ac951","sha256":"1c2669fa26127953bbedc1d3c1ceb1ecf30107ff0aa109f9d22873466d37cc59","sha512":"72960ae3c362dfaa7522080fb04f93e4a89642b6357fdd4f80fe7c2b19538cdcd0c43e305effb92ea18d0a28dc7d281d51043ec89381a31df5e78deb4d72b068","ssdeep":"","tlshash":"ae4102dfeb4455d0a409db7ffa1569e9749f60ec6f24c5808bc61e4b780481e086dae3","first_seen":"2025-06-23T17:19:32.681121Z","last_seen":"2026-06-29T01:34:31.328103Z","times_seen":12,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/fonts/SFPRODISPLAYREGULAR.OTF","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.626Z","timestamp":1782696839626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/fonts/SFPRODISPLAYREGULAR.OTF HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/static/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 298944\r\nlast-modified: Tue, 27 May 2025 19:55:16 GMT\r\netag: \"683618a4-48fc0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298944,"size_decoded":299261,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"aaeac71d99a345145a126a8c9dd2615f","sha1":"e19df199e78d296e5b6491d4832a76756532ed43","sha256":"71a2162c852e87baa6440c983e406283391646778c8bc74e57b00613a3412f80","sha512":"4f6a5048ba4cc7851c408f6b8933b416b5e3a80fc29f13bb40ef71542511eb58049da1f992cc5cf1110f28e89dccc40fc0b29cfd0e6a1a155f0de8e41ef9a24c","ssdeep":"6144:5jxDdX2EXAwixl05kVYiEqYZGgZoagkmD:ZOo8EqYZFSagk2","tlshash":"03547cbafb076a68e19656390ff3d3393eb4b5117c2aa346f0b7907116813b824c67c5","first_seen":"2023-04-18T18:58:04Z","last_seen":"2026-06-29T08:57:14.591999Z","times_seen":551,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/fonts/SFPRODISPLAYBOLD.OTF","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.628Z","timestamp":1782696839628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/fonts/SFPRODISPLAYBOLD.OTF HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/static/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 334728\r\nlast-modified: Tue, 27 May 2025 19:55:17 GMT\r\netag: \"683618a5-51b88\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":334728,"size_decoded":335045,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"644563f48ab5fe8e9082b64b2729b068","sha1":"100e7b7fd24facbca4db38e6d4d7e01c73b82818","sha256":"a981001f6d4e70292fd26fa8e05437c4a9f0f8c5981027ff0ceead01bb30311f","sha512":"7fd24a6e4437b8220074f5ec6069450e41d49bf2c9ca222902fac562b1e58d5226876d835fb475480f598925ed46fd8fb7672213a514072ebf4cc2312f54bf66","ssdeep":"6144:IFWjSaex9FmtB06XrELgiBBFoS7CQnfGTXbFNL3DUMuFA6MVdh5kgh3kusPuOSsE:62+FWLXQUqES7CQnfGTXbFNL3DUMuFAb","tlshash":"2f645bb4bb7b3a10d05ae43d1fd2c3397abab4155c9fb145f06b85a891893f728853c2","first_seen":"2023-05-10T19:38:00Z","last_seen":"2026-06-29T08:57:14.56248Z","times_seen":476,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/styles.css","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.449Z","timestamp":1782696839449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/styles.css HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Jul 2025 14:29:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6884e62c-4b17\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19223,"size_decoded":3986,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"cf9e074c51bdbae4b825fcf9c26991a7","sha1":"6a0d7cf021788a209b8a684fa7d112056203a378","sha256":"07646f6ef982fc175ded27db2862062a44c19e5215984124989b5e44c193844c","sha512":"4704dc512175cd4ca37a401dfceac4905af4f0143b04c5cbfbab9c80f4e38983e33a798b5b199b7c096d0626d4e59fe13c24f524a205165da0a4285e32996bba","ssdeep":"192:Y6LSmTJEEFf6R7m2Dnl3F5rc9SGPzIdP3UTFd2eFYnQ8l9dAk6acYVvlOU4fmYvC:RKoCZ5vmIZeIjl9f7B","tlshash":"f8827515561292a6a233af796bf6570dfb9c50678a0202fc3bdc32444ff92b56260fdc","first_seen":"2025-07-26T22:50:53.253308Z","last_seen":"2026-06-29T01:34:31.320551Z","times_seen":10,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/script.js","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.458Z","timestamp":1782696839458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/script.js HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 904\r\nlast-modified: Tue, 27 May 2025 19:55:02 GMT\r\netag: \"68361896-388\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":904,"size_decoded":1229,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (904), with no line terminators","md5":"44c23fc9668c98fca87e70cef5a48bd8","sha1":"042ff32ad9177550322d433df6314abd47584f4e","sha256":"a41b568fd3a9959e3c8f90eac2d0d57234dba6d0db0cb2b9902445f680bcff2f","sha512":"27097453b090e0ba858802de1f2aa324707eebb40d47fdd8fbed0e0a4852fc525cc5d53dff0564876a8f31ce58469c7fa3cfb30a6ce8870e5e8656e27aedbd0b","ssdeep":"","tlshash":"4111ba760628a97a435f82aba2c263c1bb7514ce6445142838688c9f1af9de249e17e7","first_seen":"2025-06-23T17:19:32.686102Z","last_seen":"2026-06-29T01:34:31.32233Z","times_seen":12,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/images/cooperate.svg","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.467Z","timestamp":1782696839467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/images/cooperate.svg HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 May 2025 19:55:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683618a0-6ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1738,"size_decoded":1153,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cde685cbff584903d16b2f2ba21d52e3","sha1":"82376b0c7ce82152229b14e80bf01b6a65b29310","sha256":"63ab978b4ed673727781ba2ee651993aad7f6b74e0f4791c25a1bcc7c5f5fec9","sha512":"4df9e34fcc55262af67e29d6bf3434589ce093b549b0cb409bfe6aa85eb3628aa3433df9634ad5dd4fb793cd6faad43415deb20ab551ac2842eb0349ced4945d","ssdeep":"","tlshash":"dd314445a365c59df00151fd852375b929a1dde3be22d55ecbe02c17a08050e6932dff","first_seen":"2025-06-23T17:19:32.683902Z","last_seen":"2026-06-29T01:34:31.3171Z","times_seen":12,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T01:33:58.777Z","timestamp":1782696838777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 13812\r\nlast-modified: Thu, 12 Feb 2026 17:33:43 GMT\r\netag: \"b5dd-64aa3e3daa94b-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":46557,"size_decoded":14110,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3297)","md5":"a49c37948c7efdcb33ce7a4dbf279612","sha1":"ff20ba31180647b8d45365bbfdf047c3830f10e2","sha256":"67ea7b7dfda388678cb9677b59335580ee119d1fee59bac951530c005fa1562a","sha512":"3490a0ea97ef25523772eb91d1f7869b5da07ed0d5e3d7342e4b05a424a5bcf2edc3878e5276c08fab3b4dd957a8de2dedf43d80c001b85a835d84e129453b83","ssdeep":"768:gi77m0wd/fDacccLm77m0wd/p5kcogSDUDacccLMq2IZSDSO:bu0w1f2cccqu0w1p5qgSDU2cccwqcDF","tlshash":"53234a3526f5201b04934290ab35773abf54e183e31b15a436bc4ae91fc3d9ade3b5ac","first_seen":"2026-06-29T01:34:26.929588Z","last_seen":"2026-06-29T01:34:31.328793Z","times_seen":2,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":56,"connect":30,"send":0,"wait":31,"receive":26,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/images/about-1.svg","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.471Z","timestamp":1782696839471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/images/about-1.svg HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 May 2025 19:55:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683618a1-6992\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27026,"size_decoded":9948,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"befbed2f86d23e8accb56518f0de6f59","sha1":"01e51b58c96779f39f2bae2752dcf1d27d6d9b7e","sha256":"b985dadf62b715750494b9f538793546d0d0b1facb49a644d0f89a020128cc3b","sha512":"d8fe295661851cc2a2cb2b3d544c4998223ee6b3166ca187362f3fe41e4d09e3e623d6aa40afa2ea7588a042fd71460969ac9e7a6c714c45ad69fae131bc46b8","ssdeep":"768:ThqO5vSj+kPQXmQ8B4h9bS5FH7HQ63o72:ThqKKjfQHh9uTHbQ6W2","tlshash":"3fc294dd2b500dfcdd8796eafa124488224fa0fba6824344c7595f2a7447964dd82fd3","first_seen":"2025-06-23T17:19:32.689867Z","last_seen":"2026-06-29T01:34:31.327326Z","times_seen":12,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/images/about-1-mobile.svg","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.472Z","timestamp":1782696839472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/images/about-1-mobile.svg HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 May 2025 19:55:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683618a1-9030\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36912,"size_decoded":13290,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d364932a3c587ace9113222303c4549f","sha1":"cd34326f6026ea635c8c37d316eb99f1227132eb","sha256":"515b970f390fd79f1230556067c361c1958418737ca909b7ab1fb659b317727b","sha512":"8b314c83f6412db4216e6b6fa6b9479e904362556ef5bc1887e88228a32a85382d8080bf537204483a1819c4e6db01ccb343eb90c42f7e5956d870b31a923693","ssdeep":"768:/hqO5vSj+kPQVYu1WoWmQ8B4h9bSnkgFH7HQ63gFD70:/hqKKjoWoLQHh9uZHbQ6K0","tlshash":"a3f293fc2b600df8ddc6c6dafe125498214fa0fba5424709c76d5b2a7847968d982fc3","first_seen":"2025-06-23T17:19:32.68467Z","last_seen":"2026-06-29T01:34:31.317947Z","times_seen":12,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.cc/static/assets/oneobmen-CyrSxzF4.webp","fqdn":"amlbot.cc","domain":"amlbot.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.481Z","timestamp":1782696839481,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/assets/oneobmen-CyrSxzF4.webp HTTP/1.1\r\nHost: amlbot.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-29","alert":"Phishing Block","trigger":"amlbot.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlbot.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/favicon.ico","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.777Z","timestamp":1782696839777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 30 May 2026 03:41:16 GMT\r\netag: W/\"b52-65300bbd3a6cc\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2898,"size_decoded":1587,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-06-29T17:01:16.291516Z","times_seen":6909,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.452Z","timestamp":1782696839452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 01:33:59 GMT\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-29T19:34:45.185133Z","times_seen":32216,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":33,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/images/hero.svg","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.469Z","timestamp":1782696839469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/images/hero.svg HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 May 2025 19:55:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6836189f-22f1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8945,"size_decoded":3769,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49770cdcc3899b1df4a05f65e731c171","sha1":"2d4e15948b258bcf96bc5395833a32ff46756d1c","sha256":"7e3ba6448fb8f94b32037ac3c57f159e1064a4f8bf7c41799222c9317f37d7cc","sha512":"6e0e5ca86a058b32a3f41271929116614a2af251c0b6b6d55dbb420e3ee05b06283d06a30f7ccb5d8acc6db814234537963f899c3d2d1d578f371b304d2cd1e0","ssdeep":"192:sDZBbUVHVW6t2dZFxrUM6tkWR2e6OI55Vf7bpvU3p1tWevEp:sDZBbUVtmd6tk2P5I53p8A9","tlshash":"c0029299ebf6acc8d284a7e97f0091b9325b51f7ec18ce0c82aa1db4654091d5e0d5c6","first_seen":"2025-06-23T17:19:32.679443Z","last_seen":"2026-06-29T01:34:31.329515Z","times_seen":12,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/images/trx.svg","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.477Z","timestamp":1782696839477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/images/trx.svg HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 May 2025 19:55:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6836189f-5fd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1533,"size_decoded":1054,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d8df46edcd45b3f6e59ef90168787f1","sha1":"80dac3230d20d9c4bd2cbba05013a992f268372f","sha256":"4a13988d0b90874bc12ec8c6ee8ed35463a5c528afb4ee66b7480fa9ce0050fc","sha512":"bc5393ec6970e488d6f2f6ad7b2f18b9ffcc27e220dbc45cadaf8738448a13ee2df1579c3ddeb076c90ce13da2369226841cdb5bcdba50a8c3e7f67f3f80e9e6","ssdeep":"","tlshash":"b931e1e74194db44c908efa1a91215fdb65a68fb7fa0559083c21d28a0e34ed8ed4df1","first_seen":"2025-06-23T17:19:32.690574Z","last_seen":"2026-06-29T01:34:31.330953Z","times_seen":12,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.cc/static/assets/cryptohome-Bkw0BUZH.webp","fqdn":"amlbot.cc","domain":"amlbot.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.482Z","timestamp":1782696839482,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/assets/cryptohome-Bkw0BUZH.webp HTTP/1.1\r\nHost: amlbot.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-29","alert":"Phishing Block","trigger":"amlbot.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlbot.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlproof.online/static/fonts/SFPRODISPLAYMEDIUM.OTF","fqdn":"amlproof.online","domain":"amlproof.online","tld":"online"},"ip":{"addr":"87.120.219.250","port":443,"asn":214238,"as":"Host Telecom Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.625Z","timestamp":1782696839625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlproof.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 05:45:02 GMT","end":"Tue, 22 Sep 2026 05:45:01 GMT"},"fingerprint":{"sha1":"31:16:D2:92:8A:C5:19:96:A4:12:E9:82:4F:D9:66:57:93:A0:AB:F1","sha256":"F7:A3:86:DC:C9:6A:05:2C:88:61:4B:34:44:DE:20:26:F1:ED:AD:6D:36:30:1E:AF:ED:2F:72:3C:4B:D6:FB:F3"}}},"request":{"raw":"GET /static/fonts/SFPRODISPLAYMEDIUM.OTF HTTP/1.1\r\nHost: amlproof.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/static/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 335512\r\nlast-modified: Tue, 27 May 2025 19:55:16 GMT\r\netag: \"683618a4-51e98\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335512,"size_decoded":335829,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"51fd7406327f2b1dbc8e708e6a9da9a5","sha1":"a5f5e08dd38cac2f857fb7510f7e92a2399b6f5c","sha256":"cbfd17919856efcedabdd73781dad2984326928ae7c9635bef6227b1a7d71d21","sha512":"05f4d9fc2b3e8da14a76c219965016f255110ae7ed41bf8014b602e40477c3689ff66cc9d71f895a208837951487bbb37cdfe11b665020aac3669dca392e1120","ssdeep":"3072:fEvnLLY/jk4541knKUK1dTQNZTUstTgZlOGiP5u3trhFU3Yt///////////////k:D/jNKxXGVUMTgjHiRqUoC4bOJ","tlshash":"2d648ef5fb894605c0938c382fe2c33a327af9453c1ba154bc6695705a466f52bbd2e3","first_seen":"2023-05-19T00:52:21Z","last_seen":"2026-06-29T02:55:38.564101Z","times_seen":411,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"amlproof.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/aos@2.3.4/dist/aos.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlproof.online/","date":"2026-06-29T01:33:59.456Z","timestamp":1782696839456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/aos@2.3.4/dist/aos.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amlproof.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:33:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4573\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.3.4\r\nx-jsd-version-type: version\r\netag: W/\"3962-hQ7i5cn7phCEATfGxOkrWrvEKP4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230124-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3754217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9c9vKYRMoQ5vHm%2BFOvZDCvuPFiA8atd8eqUvS9AWBIidkqj3OR5%2FSVkhdkOoCpVEFvQKnuW1F7Xpnq1RYI22LEYDysgevgxjsd2q9MeTiUAZYUQKpwmgO%2Bn42r3y4Ptq1E%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1312faeb87cb509-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14690,"size_decoded":5687,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14690), with no line terminators","md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-06-29T19:30:43.034906Z","times_seen":9743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}