{"report_id":"33926473-c0a5-44c6-9727-32bee7375a07","version":0,"status":"done","tags":[],"date":"2026-09-19T07:38:12Z","url":{"schema":"http","addr":"exploreamlbot.com/","fqdn":"exploreamlbot.com","domain":"exploreamlbot.com","tld":"com"},"ip":{"addr":"172.67.145.141","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"exploreamlbot.com/","fqdn":"exploreamlbot.com","domain":"exploreamlbot.com","tld":"com"},"title":"CheckBotAml - Comprehensive Crypto Compliance Solution | Free AML Crypto Check","dom":{"size":950335,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (62563)","md5":"c1aeeaf9a803f433df639d18198d36bf","sha1":"0d39b891c9a341e306bff7f1a1cc337861f2cf68","sha256":"db4b4dd0538d8b6358ff4707779432d680d0f9358a0bcdb2f92ff6da395f1a97","sha512":"d15ada4f3add3d36b02d6c6a9a8f2ff9e85c2dfeaba4b28c55024751a3937ab37bdb98fab843e2c034a588b44524bdd34756add5a13959e9ad8011efc123161a","ssdeep":"12288:PLwjF/hnJ/mvmqOI7bswQWcQN5hAFSMLKYeN1St25hApMPL928EGLqr6:TIzmv3OeswQWcsyFSMLdedt9wm","tlshash":"0415c07746ae21516c012eba63e73a897e24f083cd07cf88f5dd2ae0cf8a794585579c","dom_hash":"domhash7c230e57e02afdb87be835979eb87f9a","first_seen":"2026-09-19T07:29:22.219521Z","last_seen":"2026-09-19T07:38:17.087875Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"exploreamlbot.com/","fqdn":"exploreamlbot.com","domain":"exploreamlbot.com","tld":"com"},"ip":{"addr":"172.67.145.141","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T07:38:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"exploreamlbot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-13T23:01:27.934223Z","alert_count":0,"request_count":1,"received_data":525,"sent_data":960,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-13T22:44:45.310895Z","alert_count":0,"request_count":1,"received_data":479131,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"exploreamlbot.com","ip":{"addr":"172.67.145.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-08","domain_rank":0,"first_seen":"2026-09-19T07:29:17.212259Z","last_seen":"2026-09-19T07:29:17.212259Z","alert_count":2,"request_count":2,"received_data":2150861,"sent_data":959,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.5.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18125054207","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d99902116b9c2985571361fc4534282","sha1":"0002669d09cd158af4c7d93d0543117d56fd97e9","sha256":"685d951163e8756b1e3d9e103d2e9b517d969dd045f38fe165b67a48408ee8b2","sha512":"157837fea36b23386be00d36ad967ba3e613d30763d35a90580e14078d7be5fbe1219e1e25ea55a71dc457ba0d4e9ec1d4bfe9998079886afb00b806b3118f0e","ssdeep":"6144:d1B1tVVaEqrYJNmf96d8cOAIb4EUt3li3EUFbXxTtf:dLGEEdlhTEOXxZ","tlshash":"52a419cd73d674229392f574903f01cba67a29a2b84cc895f289dce42e3469a5173f7c","size":478527,"data":"","first_seen":"2026-09-19T07:38:17.093303Z","last_seen":"2026-09-19T07:38:17.093303Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exploreamlbot.com/","fqdn":"exploreamlbot.com","domain":"exploreamlbot.com","tld":"com"},"ip":{"addr":"172.67.145.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa623f5ee4db2da4491efeeef8392195","sha1":"98b52237c7c950ccd42abc55f23ee74a6d8226fd","sha256":"c84d536d5eee01a181814122d6fad9e8ec76152c40d4fb464c7c0cfc0b82adde","sha512":"91668f77e16749c3bb4f53b05c941534c27bb926dda6f972d54fb21099407f4bda8843ee8d1886b9855503f1896bec76dc35f7901d7b6e08b5427edd5f68f762","ssdeep":"","tlshash":"06c02b89210a0cb155eb2700cf7fbe04f4123204b8f95931091e73045d10f03d744c54","size":151,"data":"","first_seen":"2026-09-19T07:29:22.225541Z","last_seen":"2026-09-19T07:38:17.096469Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exploreamlbot.com/","fqdn":"exploreamlbot.com","domain":"exploreamlbot.com","tld":"com"},"ip":{"addr":"172.67.145.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b209026052678c69d793f92d020079d8","sha1":"461eab30fa42657228e7064d0f9ca65f8fde1dba","sha256":"56f665e9ab0378fa1327deb78aaaa6c822f1f659ed0b0e514f09f1937c28a4b9","sha512":"685516bec532b68dc36004f953d7eca23dc30e0bc927b26cad7cd94170208784d57e5924f4af921a21eaf581cdec556e5abfdb265c20e83e78f78f90b886b9f7","ssdeep":"96:+sK84azXhcYsPkSLEaSo5g5+oYtU61pQy3KqFqTnMuzTDZCpM2S:+oLmNkSLP21m3Kq4TMaCpG","tlshash":"63d1121733ff20621a6b64bb059752983630c043340bddee3a5c87925fe4ba5a973bd9","size":6182,"data":"","first_seen":"2026-09-19T07:29:22.227063Z","last_seen":"2026-09-19T07:38:17.09774Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=13\u0026frm=0\u0026apvc=1\u0026auid=801063702.1789803459\u0026dt=CheckBotAml%20-%20Comprehensive%20Crypto%20Compliance%20Solution%20%7C%20Free%20AML%20Crypto%20Check\u0026tid=AW-18125054207\u0026en=page_view\u0026dl=https%3A%2F%2Fexploreamlbot.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=2134126534.1789803459\u0026navt=n\u0026npa=1\u0026gtm=45be69h0h2v9252465724za200zd9252465724xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~118897920~118897930~120213116~120385422~120469145~120469153~120847433\u0026tft=1789803459360\u0026tfd=924\u0026tids=AW-18125054207\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exploreamlbot.com/","date":"2026-09-19T07:37:39.362Z","timestamp":1789803459362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"POST /ccm/collect?rcb=13\u0026frm=0\u0026apvc=1\u0026auid=801063702.1789803459\u0026dt=CheckBotAml%20-%20Comprehensive%20Crypto%20Compliance%20Solution%20%7C%20Free%20AML%20Crypto%20Check\u0026tid=AW-18125054207\u0026en=page_view\u0026dl=https%3A%2F%2Fexploreamlbot.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=2134126534.1789803459\u0026navt=n\u0026npa=1\u0026gtm=45be69h0h2v9252465724za200zd9252465724xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~118897920~118897930~120213116~120385422~120469145~120469153~120847433\u0026tft=1789803459360\u0026tfd=924\u0026tids=AW-18125054207\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 19 Sep 2026 07:37:40 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: null\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":525,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T09:43:24.527016Z","times_seen":19023449,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":3,"connect":25,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18125054207","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exploreamlbot.com/","date":"2026-09-19T07:37:39.078Z","timestamp":1789803459078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=AW-18125054207 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exploreamlbot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 07:37:39 GMT\r\nexpires: Sat, 19 Sep 2026 07:37:39 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163396\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478527,"size_decoded":164000,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7912)","md5":"5d99902116b9c2985571361fc4534282","sha1":"0002669d09cd158af4c7d93d0543117d56fd97e9","sha256":"685d951163e8756b1e3d9e103d2e9b517d969dd045f38fe165b67a48408ee8b2","sha512":"157837fea36b23386be00d36ad967ba3e613d30763d35a90580e14078d7be5fbe1219e1e25ea55a71dc457ba0d4e9ec1d4bfe9998079886afb00b806b3118f0e","ssdeep":"6144:d1B1tVVaEqrYJNmf96d8cOAIb4EUt3li3EUFbXxTtf:dLGEEdlhTEOXxZ","tlshash":"52a419cd73d674229392f574903f01cba67a29a2b84cc895f289dce42e3469a5173f7c","first_seen":"2026-09-19T07:38:17.093303Z","last_seen":"2026-09-19T07:38:17.093303Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":39,"receive":47,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exploreamlbot.com/favicon.ico","fqdn":"exploreamlbot.com","domain":"exploreamlbot.com","tld":"com"},"ip":{"addr":"172.67.145.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exploreamlbot.com/","date":"2026-09-19T07:37:39.201Z","timestamp":1789803459201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exploreamlbot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 12:29:48 GMT","end":"Fri, 04 Dec 2026 13:29:46 GMT"},"fingerprint":{"sha1":"62:E8:A3:4F:5F:AD:6F:AE:65:0B:B9:09:D4:47:E3:37:1A:58:17:3E","sha256":"3B:D2:DD:09:0A:F4:CF:57:49:BB:61:F3:2F:91:38:67:50:81:AD:23:B6:4E:77:1A:68:EF:CA:D4:C0:F0:6F:81"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: exploreamlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:37:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.5.5\r\nage: 539\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 19 Sep 2026 07:28:39 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6iUPBeJTq4hFMmFubmwiftUfEWjDLGi4Jr%2BWPjQCWtU6yXWSZpa0ko9MZA5btGjDi28NoILLKaexhsLhbY2Oadgu2ZFt%2FkPG%2BABjo%2BFu5ozf8lSYOc0wchwNoMKXU%2BSXSaV31g%3D%3D\"}]}\r\ncf-ray: a3d6ed24097fb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.5.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1074767,"size_decoded":541355,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (62584)","md5":"f90cbef9f7f1d831bfc5b743cc50aa97","sha1":"8fe6ee0fbe286340295ad3260d4337e9773eaaf2","sha256":"fbdf28c5a118669652a9b46718aa439dca8ff0f134dcca685a8b4ae5b293b8e8","sha512":"6ccb1ec504e7261cd07b40d575a9a4cb01800bf108adcb2b3df760cbe5576349fa104bbe55b5bdf6d90020934f81553cc2b4cd709b783b7c66f7f8b746ae5234","ssdeep":"12288:jLwjF/hnJ/mvmqqI7bswQWcQN5hAFSMLKYez1StiThjFbPL998EBZa6w:vIzmv3qeswQWcsyFSMLde739zE","tlshash":"4225b0774aab21516c072ab967e72a897f24f043cd07cf98f9dd25d4cf8a2d8588538c","first_seen":"2026-09-19T07:29:22.221408Z","last_seen":"2026-09-19T07:38:17.095065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"exploreamlbot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exploreamlbot.com/","fqdn":"exploreamlbot.com","domain":"exploreamlbot.com","tld":"com"},"ip":{"addr":"172.67.145.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T07:37:38.464Z","timestamp":1789803458464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exploreamlbot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 12:29:48 GMT","end":"Fri, 04 Dec 2026 13:29:46 GMT"},"fingerprint":{"sha1":"62:E8:A3:4F:5F:AD:6F:AE:65:0B:B9:09:D4:47:E3:37:1A:58:17:3E","sha256":"3B:D2:DD:09:0A:F4:CF:57:49:BB:61:F3:2F:91:38:67:50:81:AD:23:B6:4E:77:1A:68:EF:CA:D4:C0:F0:6F:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exploreamlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:37:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.5.5\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkXDi6A%2BSa1UznoUbh7TX29aTuEAw5hqZQEemMh7s%2B2hRnLnTa%2F3b9MAXhiL3kj8HlNaZLEPfAyWoyNNygNbBgj9RayZsWWGSqJqkXU5dtvbRIOQFuU8ImVbpXDCtBgsq9x%2Btg%3D%3D\"}]}\r\ncf-ray: a3d6ed1f9906b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.5.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1074767,"size_decoded":543310,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (62584)","md5":"f90cbef9f7f1d831bfc5b743cc50aa97","sha1":"8fe6ee0fbe286340295ad3260d4337e9773eaaf2","sha256":"fbdf28c5a118669652a9b46718aa439dca8ff0f134dcca685a8b4ae5b293b8e8","sha512":"6ccb1ec504e7261cd07b40d575a9a4cb01800bf108adcb2b3df760cbe5576349fa104bbe55b5bdf6d90020934f81553cc2b4cd709b783b7c66f7f8b746ae5234","ssdeep":"12288:jLwjF/hnJ/mvmqqI7bswQWcQN5hAFSMLKYez1StiThjFbPL998EBZa6w:vIzmv3qeswQWcsyFSMLde739zE","tlshash":"4225b0774aab21516c072ab967e72a897f24f043cd07cf98f9dd25d4cf8a2d8588538c","first_seen":"2026-09-19T07:29:22.221408Z","last_seen":"2026-09-19T07:38:17.095065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":7,"connect":20,"send":0,"wait":143,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"exploreamlbot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}