{"report_id":"5372305c-1b1d-4443-8037-e3a03f9d6b4a","version":6,"status":"done","tags":[],"date":"2026-01-30T06:23:09Z","url":{"schema":"https","addr":"amlreviewbot.com/","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"amlreviewbot.com/","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"title":"AMLBot | Free Crypto Check","dom":{"size":113525,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14199)","md5":"b1269df847f892008c4c9aec9b87e4ac","sha1":"5774ae4e9d4c4a85a6893da3edf5d1002decf745","sha256":"536f7154561d72a70a223872698a07508011c179c597e23834f2824ddd666631","sha512":"f99e7b88d6169f762fc1b7067de18b7a9c2eab2bc5c0d8d68ff19e6315b1987f13c7804b1e53d838def1b477ad0d34210657f1936f22ec8e9e5cb3f3c9392e1e","ssdeep":"768:OQXoyQXvaQIhQqz/WmP7Eqx5RRYzccOqjcjRZ1OmQbLZpJ6FbdBg5mQbLXMMMlLr:BYNHIUmTv6Ppeg5WS/RIb","tlshash":"96b30b9091f45b762c035ba256ad5a0dfa26e0e3b8d74d4cbede06890f83fc54e23649","dom_hash":"domhash1ba0c11613d1e021d11ed2611765e603","first_seen":"2026-01-30T05:37:08.622328Z","last_seen":"2026-01-30T06:23:17.241808Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amlreviewbot.com/","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T06:23:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"citychangeapi.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-01-26T21:27:25.023771Z","alert_count":0,"request_count":1,"received_data":1601,"sent_data":629,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-01-25T23:20:32.712034Z","alert_count":0,"request_count":2,"received_data":144331,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"citychangeapi.digital","ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-30T06:23:13.024155Z","last_seen":"2026-01-30T06:23:13.024155Z","alert_count":2,"request_count":2,"received_data":623,"sent_data":1079,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"rpc.walletconnect.org","ip":{"addr":"18.185.182.14","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":891779,"first_seen":"2023-02-11T03:06:43Z","last_seen":"2026-01-22T01:33:06.023203Z","alert_count":0,"request_count":1,"received_data":1653,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipwhois.app","ip":{"addr":"185.111.111.157","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2020-06-10","domain_rank":48917,"first_seen":"2020-06-10T18:52:00Z","last_seen":"2026-01-25T22:15:49.776115Z","alert_count":0,"request_count":1,"received_data":1191,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"amlreviewbot.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":100,"request_count":50,"received_data":6309214,"sent_data":24167,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"unpkg.com/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","size":131882,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-06T02:34:12.750324Z","times_seen":17298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4d8b5621366fe12bc0a477c2b7101d8","sha1":"15315b47064fa4145c075746b45632c5c622549d","sha256":"85371e3f1f53431fcc3f87abf6c7efabd557bca2e6b24639f6dc60219096e7d2","sha512":"ad34707409215becee6a43fcd7d12728db893b0f0338c7aabe0fb975ccc0100e53cddafc5419fac329e1fdf428bc39776e3c6e89b5d07091ef5b1565895f2d68","ssdeep":"","tlshash":"32f0d49e2c47b45637fa353dc3676a6b2762070378c2d505ba0dc4152fd4a961c419ce","size":511,"data":"","first_seen":"2026-01-30T05:37:08.70799Z","last_seen":"2026-01-30T06:23:17.339624Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/ConenctComponent-DADKzo0O.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"339f15766ca04701c9855f64c40a7e35","sha1":"1d016ff9ef33218c52ee5a24b0bdb35c0378af2a","sha256":"2fee76d3186cfb5ebd2dd892f871fee882ae3f364b1cc35cd749b7cee6767b22","sha512":"1bef06dab579b22b5e56a011f5899602287ba12406cb5b9b84b13e9ac23ce04a31a1f730fc1fe321285de2f514aff29afc222c6c79c4b9db87f6c4a74adf5db1","ssdeep":"3072:1n9+nanB4ncn5TtEc8cGC8kk2jJ/zPPVf9xYs0yzQieK:pEanB4ncn5TtEVcGJmJ/zPPVfvYs0yz7","tlshash":"8704944a3af721b21253b0791e0bd441f225d54f219dcc587a9c42f4af46a78cbf6fa8","size":183083,"data":"","first_seen":"2026-01-30T05:37:08.677002Z","last_seen":"2026-01-30T06:23:17.255618Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/requests-CbtsKuQf.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"importedModule","is_inline":false,"md5":"48eb3f6b5b0a549c7f714798d0d7d339","sha1":"8754b925237ae3f218ec8dfbcf89d8db1b4aca48","sha256":"6e2b1047bf781f2fb5d639c76c3bf415db24ee9192b8e2b6eaae5b0f7b3fe28b","sha512":"4d462088803b6f80ffaa592562b31d771e7da679519745671e1ab46d2d4edca9ae7e53d2247e20fa3a19a4f31bbb6ebf6555d7f24bb6fc7be505946177d51b77","ssdeep":"6144:31au64gyz1W7qL72wm1jYRuEDv23BS3hmKCxvXDuP/8xZcg1GeHAfDpMXHS3N/08:3syzR2BS3hmLxvXDuP/8xZcg1GeHAfDb","tlshash":"2484a6493af320e14217f4781b1fd841f229a41b2aa8ec4d795c86f45f4da3c87f5ea9","size":392110,"data":"","first_seen":"2026-01-30T05:37:08.679665Z","last_seen":"2026-01-30T06:23:17.29074Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/TronConnectButton-D4Wsi5f_.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4da6ea485597cc9efd872fb8ead1bf8f","sha1":"d3289f58d8a330e8f53dbec687dd0c523f8d41f4","sha256":"e1157ba460993c1790a8c274f56a633b08fb8af2add64ad9fd099ae1cdaefeb3","sha512":"630c12f0004ed898817ed68d022f13909b2b663aec97fb77943db681e85940c22173bbc6f1555dea3d340a2b072d931e39cba2f0d098df7f029c0fb20e5b6f9d","ssdeep":"49152:/9eLbM4lgJ8Y/4O+TrbiGor+6LJlbFyjQXjlsWy6OucAm8lj5d4I5q3bVIWw741y:oLbM48Pt","tlshash":"4b7583047bf761228253f0b85f1fec08b228950f915cdd5dba4c92f06f9557887baba8","size":1582206,"data":"","first_seen":"2026-01-30T05:37:08.709178Z","last_seen":"2026-01-30T06:23:17.341168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@18.2.0/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","size":10737,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-06T02:34:12.747977Z","times_seen":17421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/mui-DuBSgSbP.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"importedModule","is_inline":false,"md5":"6e48b50ae0bbfad826d72b33e730cfcc","sha1":"c14a06ab8fae14e98f08e24759a35b85818c9b9a","sha256":"fade0fb27c183172bfffb60c53ede9c7bb6b057effe7dc1b650020ea4b13a22a","sha512":"d2d1abd8920abcc93155dbc7fb72e34a1b6f5d78fef7be691906bd6ebf3fcd6eb1c91944e59dc191e63c741e7c0a7251d3cd2d568b1fcf290eb39b0bd5a55588","ssdeep":"3072:VQ0zZhtnoQlbmNeVTvlW3al+qWpJVJ2o7ZTVpsxaERKvZ+8s:TZPoDANEalGTJ2o/psxaNvZi","tlshash":"1d64d70966f120310513e0b95a1fcd1ab63955075e6efd68badc92a82f4d03cd2f2bed","size":309344,"data":"","first_seen":"2025-04-15T18:32:02.814913Z","last_seen":"2026-01-30T06:23:17.33714Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/ChainSelectModal-CmYdoVgZ.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ccc2cd01ff927792daf86db99db4282","sha1":"4a9fecdd0ce5cf426338f3100fe530b982da4eaf","sha256":"f803991b3080ea9672b0d23960dafefb9ca6b56131fdc48094070c2390c5fea5","sha512":"5f097a0a9c801e745dd8d4ff20a2a08f2e522fc994e4e5868acd685ae871a0799c8c05304273c970eb90ffc1607a00dafbe646ac9e3677cd7723538cca63158f","ssdeep":"768:8e9+GPRqlGGse1DN5X85echwfULuZtaIM1r8Kzj/SVrDHHMDG3vokfM:8e9+4pJwQechwfULitaMKXyXsdk0","tlshash":"9523d60563f615320667a07d1e1fc82ab320240f265dee5c3b9c16e55f489389af6ffa","size":47786,"data":"","first_seen":"2026-01-30T05:37:08.69819Z","last_seen":"2026-01-30T06:23:17.333044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/index-DaMICLxR.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e757193eb2142abbc0a6939d7b8b24d8","sha1":"51fe44cc9e7baf9a6d450d65a6b429afbff6802a","sha256":"62b745b72b8a5d0f3538e202d7b9bfce81a50c263b666bdbed720dea2f267eea","sha512":"06ead20f54b29abaa86ef901dc0e0da88df2214f11828237db13d4db809df17225e97a5d1f06def3b90903b75c17c5e437b9814f1445fccd2396f483d04fb908","ssdeep":"3072:M6WaXsmbn2jhbWGOCAdIJEeSz2b1yQE2Q:MlaXsmbn2jhbWGOROGeSz2b1yQE2Q","tlshash":"b3b3b4403af720358357e0ba6e1be915b224a41f259ddc5c7a9c86e48f48538c7b2ff9","size":117316,"data":"","first_seen":"2026-01-30T05:37:08.701406Z","last_seen":"2026-01-30T06:23:17.312849Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/index-D7-5QWqs.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"importedModule","is_inline":false,"md5":"fea5c544e7ae328cf63d52a63cdc1690","sha1":"90e67629ccb91e85c464f72481e83a7cd92d6e02","sha256":"97441397b42cd039da7e0d0b8d3b798ed3ba4f351f3ad22021a2e763fc70c6c8","sha512":"f2b8fdcecc57949f45462f4055c04cce85dc17b02d39366a8732fef81c7c1f4b6d405e3a7c8fec549117b46c9877751030b5c7ab6a47edd9a9bd07f5fbbac3c8","ssdeep":"49152:dbrzV6+tCnhj0/w62jmLZ+JwFRzkzX86W0Nhpg8eZTHQ/e2b1AOkG3ypRf4gOeI0:dru8IQ7XZ","tlshash":"6dd5d34877f624359223f0785e1fd804b228a40b1649ec6c7a9c92f49f49578cbf6fe9","size":2837236,"data":"","first_seen":"2026-01-30T05:37:08.712027Z","last_seen":"2026-01-30T06:23:17.342877Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f64775538a8ad53fa103519ae4a25a4","sha1":"a26b01b5b248a114b35b94ba6300094994659018","sha256":"dff94103649bd2a37d4897f2d7438b0000dd65da7ce0421171aca0f1ff8c92f7","sha512":"a710192eed878731b40b51b26c57765fced9ddcd04b2537b754bdae97c4c97981fd1af541c63ec573edac1cfd0ab2455492d6397ce58a228691ab9472126e956","ssdeep":"","tlshash":"5a418d2541379172003b219ed79b93cdb9e1005bb405dd0a3d0cca8a2fa9c6b1bf3bd8","size":1978,"data":"","first_seen":"2025-03-23T11:30:41.340958Z","last_seen":"2026-01-30T06:23:17.344377Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/integration.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b86276ba1e1ca7382ccdf25632a9b44","sha1":"aff7904756150edab6a8bb34997c2b722ef4f727","sha256":"40e7779645dd32c534748bd176739ca1af3dfcd64719b0774e8117d4773203ae","sha512":"25e2eea27d20386fb9ffd3a1abf020ec3dea48b95e4ef553c701d84c8b1694933c66cac14c7c5128c8d4a4abc8aa1a6eb7f21209e16865d81865538fc837f687","ssdeep":"96:Pkq8v3dmP5pFNpy2fGtTzEArwU4BsAuezfbjTeo8M/KqKFl86553tQJnIlkhaXlz:sqgNmR1fGtTTQBsDofbjK9RC5CZ","tlshash":"e772fd40a9105e3a3c637da647dcef5cc12b90d248eb1a9e7ecf504d46c27d90bb6749","size":16837,"data":"","first_seen":"2026-01-30T05:37:08.642423Z","last_seen":"2026-01-30T06:23:17.268351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/index-BgpgeINB.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8aad240c3e7c1e3216e41d83376f18de","sha1":"7116ec20ade21a00dea4d4d7e8ab5100e0626d7a","sha256":"38b2af7a5405a031b0cd0a71f8f1b137ae83c2f627383857f5877c367f969064","sha512":"774bf083c74638ef9104a9c3162202bf86aa255b3dc807670f4d04ae28db42a7d201e07af44883452d12e5756c6ff566f2c94a1f1d48db661996fd25d916c44b","ssdeep":"192:U3kUP5MJZnXcEZkF1HIAbjxTluh0LfTFXa6YmBvqcukk+6Uvldvc781RsE/:U3fPCxXSF33RXag5v081f","tlshash":"290241e56afb49784197b19c1a1bd911a120409f990898ad3ecc12f0cf8e625cef7fa5","size":8365,"data":"","first_seen":"2026-01-30T05:37:08.674512Z","last_seen":"2026-01-30T06:23:17.331845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/transaltions-DPWujcIL.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"importedModule","is_inline":false,"md5":"148f37430b10841ad10e875bcccd4247","sha1":"9a6ff81cc78500cb8e863a4252a886b813fd3f9c","sha256":"7beb60ee9af68b1f39e0902eb7c9acef104963a2ba1353a4493246fabc3acc66","sha512":"5d16987130ccb1b7ecafff0259682ec1dc45a51fd24bfcbc794e0fb6664dbda677b5d0fb6fc933ad7355a6fa1cdb15ef6d6c10dbad417cae1a9d4b4a143a7f0d","ssdeep":"48:7RjGoPk4RnG8Mt6EsYmsU9ttSStni21XcvCvQvea048DqO2ea042CoEIp0gmqLbr:7RjG4bxGRaY74toSli21MaYMt+M9EqgK","tlshash":"8a911fb2c58d21640282150bc7677d5f24d515bf9fa6733a33e109f87bea22b453b28e","size":4324,"data":"","first_seen":"2025-04-15T18:32:02.803093Z","last_seen":"2026-02-28T20:26:52.531101Z","times_seen":804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/hooks.module-De5wo1yq.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"importedModule","is_inline":false,"md5":"3246f47ac3c91dc34425178b7917cf5b","sha1":"c0403a819d8192468cdc64ab9e85e68703a432eb","sha256":"567836ece7850e79de9997785aa06871e5d62565f725cc64e6e528e0ceac480c","sha512":"5642e85ea08e1aade47e7e473911cdc2f6ede3b3e9f52b0806e4a1787f2675ff387e8781e80e096c020f21aa07a290d9059c2a02593df62fb9d1749d2005f8b1","ssdeep":"384:NRgxlV8SIVGl4Fi4YARl2xeppEQaDqH1XVzmvFTD+eioPghnZw6lYBXp3wpsQE9j:NcwTGl4FFYAR8IH1XViD+e3PghnRYBXV","tlshash":"62a23e543ae93434929bf076463fcc4ab7395c4a13c8ea66770ca1f86f5093843b6f59","size":21346,"data":"","first_seen":"2025-03-23T11:30:41.323947Z","last_seen":"2026-01-30T06:23:17.278597Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amlreviewbot.com/_next/image%3Furl=%252F_next%252Fstatic%252Fmedia%252Ficon-3.29b1446a.webp\u0026w=640\u0026q=75","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/image%3Furl=%252F_next%252Fstatic%252Fmedia%252Ficon-3.29b1446a.webp\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=cac9270048b3659e292ab23d81cd44d3\u0026st=appkit\u0026sv=html-wagmi-1.6.9\u0026page=1\u0026entries=1\u0026chains=eip155%3A56\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:48.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 15:13:15 GMT","end":"Mon, 16 Mar 2026 16:12:59 GMT"},"fingerprint":{"sha1":"BB:A4:F0:3C:53:42:23:CF:CE:B4:8E:41:44:54:EA:D2:CC:AE:63:19","sha256":"56:62:33:83:79:07:6D:C7:91:6E:19:7A:0D:42:AB:AA:CA:79:20:84:2C:B4:55:EC:E2:C4:A1:84:5D:7B:EC:0D"}}},"request":{"raw":"GET /getWallets?projectId=cac9270048b3659e292ab23d81cd44d3\u0026st=appkit\u0026sv=html-wagmi-1.6.9\u0026page=1\u0026entries=1\u0026chains=eip155%3A56\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlreviewbot.com/\r\nOrigin: https://amlreviewbot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9c5ee0841e3256c4-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2773\r\ncache-control: public, max-age=43200\r\nexpires: Fri, 30 Jan 2026 18:22:49 GMT\r\nlast-modified: Fri, 30 Jan 2026 05:36:36 GMT\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"35d1f59786ef894e7888c8e01a6f0e8a","sha1":"92619dbd386be7c84ea38cae84f22526bb71c987","sha256":"28402c0273bd587e94a425e17e3db530d8e6306cf8a8a6cca18dcc368414d507","sha512":"82feede1b9a3f4fa2857b2645a1475f2e4e9e503277f8178470602bd1fae50f4a76bf3df49a10f18d0ff9d39c5b265b3cd935e00999e4a36d3a16696ce3d0dd8","ssdeep":"","tlshash":"b121039e57949c6b6f306b84f14cb9cad83e851741c494aba0f0463941fe927b3119f5","first_seen":"2026-01-30T05:37:08.639293Z","last_seen":"2026-01-30T06:23:17.24581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":279,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/TronConnectButton-D4Wsi5f_.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:49.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/TronConnectButton-D4Wsi5f_.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/build/index-D7-5QWqs.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:06:50 GMT\r\netag: W/\"694da76a-18247e\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1582206,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (754)","md5":"9dc70ec16f9e2e1651e57586b3c55ea6","sha1":"580f2ca333fa32958ad0883138f27a93c15fa740","sha256":"52924c15654708e580649321af922de50fd85b16e09c561af0c0908ea4170f1f","sha512":"15c098fc3f041d1d321689deff9cf0c0efafdd807cecf4fdcf80fe83925a2ca90d1da7cf92198c1bb07e64be70120234cb86570e583c96275cdfbeab408da8bf","ssdeep":"24576:/9eLbM4lgJ8Y/4O+P7rbiGor+6LJlbFyjQXjlsWy6OucAm8lj5d4I5q3bVIWw74j:/9eLbM4lgJ8Y/4O+TrbiGor+6LJlbFyt","tlshash":"3f259704bae761228253f0b41f6fec48b23c560f915ced49fa4c91b12f9557487beba8","first_seen":"2026-01-30T05:37:08.705103Z","last_seen":"2026-01-30T06:23:17.247944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/bg.793d0607.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/bg.793d0607.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22930\r\nlast-modified: Thu, 25 Dec 2025 21:03:35 GMT\r\netag: \"694da6a7-5992\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":22930,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f13b9a1e762e883291134c5ea33f356","sha1":"f16710b0c258c8380e76b33233e00dbb00d854d3","sha256":"d16e9f7e6ea78231fa1e3ae237d34d0b2e9245e769edc4da79f9156e2609d669","sha512":"34b95ad7aa12518476d1660091e93b7b5443f7e7430465674d0dd6cae939cac1333b094357bc1b8e6e5ad57981f79edfacb6e7ec0c3c935d698239f6558c43e9","ssdeep":"384:YwT4/jfw1mVC8h+EqFiqdyEMTM4B4+29ozh/A2uVcSobrFpr:dTARZh+xdb4u+H1/A7Vc/bxpr","tlshash":"69a2173bf324c5a8e66e4374240995fb28dfdfdfba28921c92408c2857146dd3b6c2d9","first_seen":"2025-03-23T11:30:41.305611Z","last_seen":"2026-08-03T00:18:16.52964Z","times_seen":134,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":360,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/a34f9d1faa5f3315-s.p.woff2","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/a34f9d1faa5f3315-s.p.woff2 HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlreviewbot.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48556\r\nlast-modified: Thu, 25 Dec 2025 21:05:06 GMT\r\netag: \"694da702-bdac\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":48556,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48556, version 1.0","md5":"d4fe31e6a2aebc06b8d6e558c9141119","sha1":"bcdc4f0b431d4c8065a83bb736c56ff6494d0091","sha256":"c88db2401bef7e1203e0933cc5525a0f81863bfd076756db12acea5596f089ec","sha512":"1cbe7641b8930163ed3ea348f573cad438b646ed64d60c1923e5b8664c3de9c2c21ba97994ec8d886f489e4d090772b010de72a1167547fb4f6a2d242d46aec1","ssdeep":"768:+rvWCaG0bvTIyNOporIvE+9OZduZ35LhKvXxYdBJaqyXNWLU2m/jG9EHmqGq55t:+ruCR0bvT386c6ZduZpFMXxQBJ82Q5tJ","tlshash":"7823025eb4b5c6e3fa05e60e86d990613909424f86b6dfc54f3741a038fcf912d3ea89","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T00:00:00.590781Z","times_seen":10266,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/index-D7-5QWqs.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/index-D7-5QWqs.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/build/integration.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:08:00 GMT\r\netag: W/\"694da7b0-2b4af4\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2837236,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (949)","md5":"1c475646c786596da97b6f44fe5a6b6f","sha1":"67ae7fe4ec1b3c19cda6783b49aaf1c075771eef","sha256":"42a33293739d5997a30b1bda6a30ecd68195df75f896ce7bf1f940494f34a1e0","sha512":"ec887f347552255b7b07cfe436fec14e044cbe465cdb5b277d6911276d0c5fd06bc60784ce3f83c7ff1a498613d1fa3914ca4a84033897980c08adc337d8e307","ssdeep":"12288:h7TwSrbHV2Cu+Rn8ea2REnhj0/w6eDjmLZP:hHbrzV2J+5a2Cnhj0/w62jmLZP","tlshash":"ad25b5496af725218213f0394e1fd845b239a9071a4dec5c7a9c92b46f4843c87fafed","first_seen":"2026-01-30T05:37:08.691077Z","last_seen":"2026-01-30T06:23:17.252266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/image%3Furl=%252F_next%252Fstatic%252Fmedia%252Ficon-2.de782008.webp\u0026w=640\u0026q=75","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/image%3Furl=%252F_next%252Fstatic%252Fmedia%252Ficon-2.de782008.webp\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/ConenctComponent-DADKzo0O.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:49.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/ConenctComponent-DADKzo0O.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/build/index-D7-5QWqs.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:05:44 GMT\r\netag: W/\"694da728-2cb2b\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183083,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"339f15766ca04701c9855f64c40a7e35","sha1":"1d016ff9ef33218c52ee5a24b0bdb35c0378af2a","sha256":"2fee76d3186cfb5ebd2dd892f871fee882ae3f364b1cc35cd749b7cee6767b22","sha512":"1bef06dab579b22b5e56a011f5899602287ba12406cb5b9b84b13e9ac23ce04a31a1f730fc1fe321285de2f514aff29afc222c6c79c4b9db87f6c4a74adf5db1","ssdeep":"3072:1n9+nanB4ncn5TtEc8cGC8kk2jJ/zPPVf9xYs0yzQieK:pEanB4ncn5TtEVcGJmJ/zPPVfvYs0yz7","tlshash":"8704944a3af721b21253b0791e0bd441f225d54f219dcc587a9c42f4af46a78cbf6fa8","first_seen":"2026-01-30T05:37:08.677002Z","last_seen":"2026-01-30T06:23:17.255618Z","times_seen":2,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /react-dom@18.2.0/umd/react-dom.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c5ee07c0f060afa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1036880\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\nlast-modified: Tue, 29 Apr 2025 17:16:21 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:IXWO0ITNDjfnNXIu5POVfqlgYoop36bDzhodR6LW5Pc=:\r\nfly-request-id: 01JT18SAD5YKAW2W39JTAW4ESJ-ord\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":131882,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (945)","md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-06T02:34:12.750324Z","times_seen":17298,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/css/003b3958c1b64c98.css","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/css/003b3958c1b64c98.css HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Dec 2025 21:03:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da695-7b89\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":31625,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31625), with no line terminators","md5":"a8c8c18f069a6fc451a1bfe058a70474","sha1":"fed331bed3bb689aff27e9c3aaa9f7b60366ae30","sha256":"081de0903316055fedad2c9b3ac6317506e730331daf0a0ef59b3a4ec958a683","sha512":"67170fafa175fd93e7dd35fa31fa02beda46e52842ac7e66444d40afb03bf196388de05aa40fb6cfd1b7493170571154a12e3c43b9f79397092bad704646a549","ssdeep":"768:fbIJnLDMMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01Ue6:jnMJihoCcZCOud8G8tKS65wqsZCG+dMq","tlshash":"93e2eb25761c9009ee635e4322cf3e1929783414d9b10902fe2e29d98ddbcf67a77f68","first_seen":"2025-03-23T11:30:41.32997Z","last_seen":"2026-01-30T06:23:17.261161Z","times_seen":6,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/dec-3.8b2ed6c3.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/dec-3.8b2ed6c3.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 509\r\nlast-modified: Thu, 25 Dec 2025 21:04:12 GMT\r\netag: \"694da6cc-1fd\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38370ad15bb2406d6555176eeaf9fd11","sha1":"b41413fc4a10728a76296441f7f18ab071f82a42","sha256":"c3c3a77a1f7df5471c2de514b4bb69e457a1b5aac535d99fc77ead849c3f35c0","sha512":"07be4e7b00ff44b705db7bb0d882f8326d9ec314c4db6289cd68b51e02fe4978c0faeaa23c712fab4a7d1d90a0ad633023def4f5a0828f7c8c84bd04763378a8","ssdeep":"","tlshash":"7af0c9fe330c7ab5ad43c210f631202a20b3749686c16c16d8837d15b60109a3c19488","first_seen":"2025-04-27T11:33:18.703005Z","last_seen":"2026-07-08T18:26:51.843456Z","times_seen":94,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citychangeapi.digital/user/metadata","fqdn":"citychangeapi.digital","domain":"citychangeapi.digital","tld":"digital"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:50.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citychangeapi.digital","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 10:12:07 GMT","end":"Mon, 02 Feb 2026 10:12:06 GMT"},"fingerprint":{"sha1":"14:45:22:98:7B:FB:BD:A1:52:2F:90:55:DF:B9:3C:28:BD:13:CB:5C","sha256":"3A:5A:BB:61:F2:53:33:13:C3:35:CD:2C:59:F6:CF:CC:9F:47:18:64:90:78:9E:EB:35:70:C7:85:04:3A:AB:BA"}}},"request":{"raw":"POST /user/metadata HTTP/1.1\r\nHost: citychangeapi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 422\r\nOrigin: https://amlreviewbot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":422,"data":"{\"payload\":\"U2FsdGVkX189IjnQ1/JTTvzh0yM6ixO1SNOsPsIlI0djEhhoWinEWPQdSK+QmB9Db0npZz9moZoSdfLK1KFhnioCOtfz2pJB9Lwz7dHQ3oZzuaKY35WCgWD9tfaoL3nEYbSRry+bebe5cXmoevnOWkG0LCwEtGMho0y3k3IcKjjjjNpPejncGivvrcaGMQBi9/BDewu6J8ycpL4y7krQjf3kZb9ahSQa2S3L6ZnzTn2AZSronAeEDzzK+ZrZY9GYpVok85hQPrhTomVToHKo5b7cNzesN7b9A6Hi1oSQDZif7JNJBRkSVBTDmS0HjzAoi4yK4yAwHZSfEA3KdDJt0unv22CsoU//K+i/ZmoJHiD2s22KogxFVkMYH8Cp5Yr+45icRamT0cW+WeGfw/FPMA==\"}"}},"response":{"raw":"HTTP/2 201 Created\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"25-j+e82UeO3VMFYbc+szjb2BzufD4\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7b44f76a4d0f894e15691db9dc7bbeab","sha1":"8fe7bcd9478edd530561b73eb338dbd81cee7c3e","sha256":"1358808f8f7f49131cac1f3c1d9c724e7ad782d371985b92af48d46144d09f95","sha512":"715412ab3678e6a9fc3fcdf75854b0b9745a91710034cf2ab47b20fa790d24f46f37df3a09eac15d8f6f5fa7fce932667071b343691443f98f79239d181a6fd8","ssdeep":"","tlshash":"1080041704001fc4034310157410743551c031c154c01113d01d540fc754c313143340","first_seen":"2024-08-19T17:26:48.429951Z","last_seen":"2026-08-01T08:31:21.190143Z","times_seen":134,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"citychangeapi.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/integration.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/integration.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:05:36 GMT\r\netag: W/\"694da720-41c5\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16837,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14154)","md5":"1b86276ba1e1ca7382ccdf25632a9b44","sha1":"aff7904756150edab6a8bb34997c2b722ef4f727","sha256":"40e7779645dd32c534748bd176739ca1af3dfcd64719b0774e8117d4773203ae","sha512":"25e2eea27d20386fb9ffd3a1abf020ec3dea48b95e4ef553c701d84c8b1694933c66cac14c7c5128c8d4a4abc8aa1a6eb7f21209e16865d81865538fc837f687","ssdeep":"96:Pkq8v3dmP5pFNpy2fGtTzEArwU4BsAuezfbjTeo8M/KqKFl86553tQJnIlkhaXlz:sqgNmR1fGtTTQBsDofbjK9RC5CZ","tlshash":"e772fd40a9105e3a3c637da647dcef5cc12b90d248eb1a9e7ecf504d46c27d90bb6749","first_seen":"2026-01-30T05:37:08.642423Z","last_seen":"2026-01-30T06:23:17.268351Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/icon-1.a8abaea4.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/icon-1.a8abaea4.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8628\r\nlast-modified: Thu, 25 Dec 2025 21:04:23 GMT\r\netag: \"694da6d7-21b4\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"408717def820b3407bc8351d30e227b8","sha1":"4eb09bad8ddd94e03d836ce380469fcb7cafe9d6","sha256":"f61d79e3c727c92844032c3195165d6afd89f971b5633849b5521eaf9ba83abc","sha512":"f776ca75c28d3c1e878d1027e4a7619ac984885eb4d7ec87d72857d08c4c6efcb95c08b09ff76a1d5087e8f888a155122e29a2954409007e9129eb18782eb472","ssdeep":"192:PfwT9jB8PwYHwXtoH+E6Fl7CYNatiWqmXgOgA/bT5nngsjXrz:PfwT9P/XtoHf6nCYNat9qmX1/BgsjXH","tlshash":"7e02afe2bfde96c8e59e613c223803e1fb7a81b9c5d4590506e0ee92fc4b5c6c85c01b","first_seen":"2025-03-23T11:30:41.307261Z","last_seen":"2026-08-03T00:18:16.535669Z","times_seen":123,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":426,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/image%3Furl=%252F_next%252Fstatic%252Fmedia%252Ficon-1.8ba21125.webp\u0026w=640\u0026q=75","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/image%3Furl=%252F_next%252Fstatic%252Fmedia%252Ficon-1.8ba21125.webp\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.walletconnect.org/v1/supported-chains?st=appkit\u0026sv=html-wagmi-1.6.9\u0026projectId=cac9270048b3659e292ab23d81cd44d3","fqdn":"rpc.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"18.185.182.14","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:48.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.walletconnect.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:E6:43:A0:F8:F2:8D:21:9C:36:21:F5:DB:3B:F9:93:F7:7B:C4:8B","sha256":"09:1F:96:1E:4B:E3:8B:06:C3:8F:0A:2E:0F:79:E7:43:9C:B4:45:CC:26:0C:77:C5:50:CD:15:A8:7D:1D:83:DB"}}},"request":{"raw":"GET /v1/supported-chains?st=appkit\u0026sv=html-wagmi-1.6.9\u0026projectId=cac9270048b3659e292ab23d81cd44d3 HTTP/1.1\r\nHost: rpc.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlreviewbot.com/\r\nOrigin: https://amlreviewbot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 1310\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\nx-request-id: 12771482-29f5-4b82-9b63-426562095f34\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"800cdcaab227c96572e3f2dab7b0c912","sha1":"448cf0f1a651e092ff1200a0fa4948126bf7516c","sha256":"845227210b5d2f143f79d23ab788f8b8e6e773a27e4833c68c58b3bbe29f4643","sha512":"f3fcd58079c9d0767732e3c87bc1cd2468cfc52c6b180cf225b5f8c07bff8ecb8dd8d90788226a885b953109f70af745f40dbeaad829ecf360912a13d3cca904","ssdeep":"","tlshash":"9921338c88800c44dcb4d398dbbce8db959ef01399cd289999f82cb155fd6b3365276e","first_seen":"2026-01-30T06:23:17.274307Z","last_seen":"2026-02-06T07:11:34.447039Z","times_seen":124,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":93,"dns":4,"connect":21,"send":0,"wait":23,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/hooks.module-De5wo1yq.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:49.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/hooks.module-De5wo1yq.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/build/index-DaMICLxR.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:06:51 GMT\r\netag: W/\"694da76b-5362\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":21346,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (784)","md5":"3246f47ac3c91dc34425178b7917cf5b","sha1":"c0403a819d8192468cdc64ab9e85e68703a432eb","sha256":"567836ece7850e79de9997785aa06871e5d62565f725cc64e6e528e0ceac480c","sha512":"5642e85ea08e1aade47e7e473911cdc2f6ede3b3e9f52b0806e4a1787f2675ff387e8781e80e096c020f21aa07a290d9059c2a02593df62fb9d1749d2005f8b1","ssdeep":"384:NRgxlV8SIVGl4Fi4YARl2xeppEQaDqH1XVzmvFTD+eioPghnZw6lYBXp3wpsQE9j:NcwTGl4FFYAR8IH1XViD+e3PghnRYBXV","tlshash":"62a23e543ae93434929bf076463fcc4ab7395c4a13c8ea66770ca1f86f5093843b6f59","first_seen":"2025-03-23T11:30:41.323947Z","last_seen":"2026-01-30T06:23:17.278597Z","times_seen":16,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:49.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlreviewbot.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 25 Dec 2025 21:08:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da7b9-172c5\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/css/68c517c010fc4f23.css","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/css/68c517c010fc4f23.css HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Dec 2025 21:03:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da698-4e21\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":20001,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20001), with no line terminators","md5":"cbaa4bf38dbb68262fdd9b98071a8571","sha1":"c103e2df130b40955415168b4e51c7ad8fe1eb80","sha256":"a76e0a0d8371ca7e74a8088f86dafcd3e090c9fd98d3629c272dac7e5d94657a","sha512":"fc28b6f810bcbf17091ab8d1785693ced25b6e384bd740ac6f10d64fdb5dfbe0a303cf7d5aaf2c4b38f35776e4b896feca8f8c19f1fa046718abf0e5b01093fc","ssdeep":"192:h93W5L9YPMTu2ftHQSw2MJoWUiz/drwIXGhAd7Bfvg9Uq3o7HEqgNIJ67PlR/KYR:h93i9YPSu2ftHQSW+WBDd2oX/YzlRp","tlshash":"8a92b837eb15211ef427861af6d0a75c4126e480eb070bfef11b7e2595cb2e71973a88","first_seen":"2025-03-23T11:30:41.332543Z","last_seen":"2026-01-30T06:23:17.281224Z","times_seen":6,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/dec-2.e71ccba4.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/dec-2.e71ccba4.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 596\r\nlast-modified: Thu, 25 Dec 2025 21:04:33 GMT\r\netag: \"694da6e1-254\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":596,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4aba5fa279b12f0891294064e2bcfc30","sha1":"81e294dbf20ac193962ac83476566b4724ce6155","sha256":"c32e4460c3a4c08b86dfdf622493e32bd0aa55dbdfbdf1f1b90cf3b0bac1208c","sha512":"14fc55899c2b36a55a4f3632cccc9e883a224e63ae66f90bdfff1b872d507935efd88fdc71745f0a84f1d90a93a0234a071c68a044667f770715fceb43014782","ssdeep":"","tlshash":"a0f0ace0b20863215809c712b73430bc057ad0f5b18908348e483f0ab4508e7ed98ee5","first_seen":"2025-04-27T11:33:18.683795Z","last_seen":"2026-07-08T18:26:51.854221Z","times_seen":104,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/binance.2f2d88ee.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/binance.2f2d88ee.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 21:04:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da6e2-f39\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3897,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"901bf7a964aab64059ea10def019b3be","sha1":"cd68d17d87a054c73ec19e027dc56fa66d7ae5ee","sha256":"097bca1e282062998425a8c850c1d8d0caccd402c462e5f63f325c35480338bf","sha512":"03568739744f737a1f4e9d5a8c97726c6d3bebaad0d6d65676232f20c26eb6cc08afe4b1b83c0186d4b3b9799f0d7fa65655776741c93c0a934730fd9ccda26a","ssdeep":"","tlshash":"a781d98c13258df8f3c446e88b3435d53f25b8cff56192e8c3437e4ba5035e664a6528","first_seen":"2025-05-06T17:59:56.669415Z","last_seen":"2026-08-03T00:18:16.552421Z","times_seen":54,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/warning.09e13df0.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/warning.09e13df0.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21660\r\nlast-modified: Thu, 25 Dec 2025 21:04:04 GMT\r\netag: \"694da6c4-549c\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21660,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0a2a497caf4cc21be633ffd1ec4f8eef","sha1":"13be6fa6bd7e9d67cd7a8a076ff88410a74bd7c3","sha256":"c670a6619662da0ac66639d3ed65f1404b5541eae0e22a0cbdad369a52167f6b","sha512":"1db019d184c31825cc9a68c6fba0ac292873d94cf7cac5cfa2c9b11d406e89a5084ac038396efdee5872fdb464cda77e1343acf2d111985496c5bd1feb9a4ab3","ssdeep":"384:WwTJFMN6ib1zp3MuP0pNd/+YHSLW6YACtE1epxhk8moQ6bVH9fORoZwATLqS:vTJKhzKdWfaE1epc81Q6tsmfp","tlshash":"6ca2e1709fa10610f18947f936b0eb75731e3e5908a73cdbfc499cb11358a8506db4e5","first_seen":"2025-03-23T11:30:41.297591Z","last_seen":"2026-08-03T00:18:16.544318Z","times_seen":134,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/a34f9d1faa5f3315-s.p.woff2","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/a34f9d1faa5f3315-s.p.woff2 HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/003b3958c1b64c98.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48556\r\nlast-modified: Thu, 25 Dec 2025 21:05:06 GMT\r\netag: \"694da702-bdac\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48556,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48556, version 1.0","md5":"d4fe31e6a2aebc06b8d6e558c9141119","sha1":"bcdc4f0b431d4c8065a83bb736c56ff6494d0091","sha256":"c88db2401bef7e1203e0933cc5525a0f81863bfd076756db12acea5596f089ec","sha512":"1cbe7641b8930163ed3ea348f573cad438b646ed64d60c1923e5b8664c3de9c2c21ba97994ec8d886f489e4d090772b010de72a1167547fb4f6a2d242d46aec1","ssdeep":"768:+rvWCaG0bvTIyNOporIvE+9OZduZ35LhKvXxYdBJaqyXNWLU2m/jG9EHmqGq55t:+ruCR0bvT386c6ZduZpFMXxQBJ82Q5tJ","tlshash":"7823025eb4b5c6e3fa05e60e86d990613909424f86b6dfc54f3741a038fcf912d3ea89","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T00:00:00.590781Z","times_seen":10266,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/kuna.9d615fd3.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/kuna.9d615fd3.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 824\r\nlast-modified: Thu, 25 Dec 2025 21:04:14 GMT\r\netag: \"694da6ce-338\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":824,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b8fa5afde377a3a6e62a8c7637e7c0e","sha1":"6e81287fcb291406b7012cb3347ad804fdbfe41f","sha256":"df542e5040f614bb7df75aa483031fca203973648639a97ed55d1f720679f0c2","sha512":"1796fecc111ccb22ff02029af630ed37deb0b2d3b77c8d79cb71418d387a1d71ccf4e6afa3dfd7b1f7d3f5bd48c422a1a482e9d8e29f39ddc1107b4126c30710","ssdeep":"","tlshash":"40011eb296d3e6d3cc09a3d8825b213100380cfe616d83c8b85512aaf26c3880e2ad98","first_seen":"2025-04-27T11:33:18.696501Z","last_seen":"2026-08-03T00:18:16.541322Z","times_seen":125,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":395,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/requests-CbtsKuQf.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:49.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/requests-CbtsKuQf.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/build/ConenctComponent-DADKzo0O.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:07:07 GMT\r\netag: W/\"694da77b-5fbae\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":392110,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (569)","md5":"48eb3f6b5b0a549c7f714798d0d7d339","sha1":"8754b925237ae3f218ec8dfbcf89d8db1b4aca48","sha256":"6e2b1047bf781f2fb5d639c76c3bf415db24ee9192b8e2b6eaae5b0f7b3fe28b","sha512":"4d462088803b6f80ffaa592562b31d771e7da679519745671e1ab46d2d4edca9ae7e53d2247e20fa3a19a4f31bbb6ebf6555d7f24bb6fc7be505946177d51b77","ssdeep":"6144:31au64gyz1W7qL72wm1jYRuEDv23BS3hmKCxvXDuP/8xZcg1GeHAfDpMXHS3N/08:3syzR2BS3hmLxvXDuP/8xZcg1GeHAfDb","tlshash":"2484a6493af320e14217f4781b1fd841f229a41b2aa8ec4d795c86f45f4da3c87f5ea9","first_seen":"2026-01-30T05:37:08.679665Z","last_seen":"2026-01-30T06:23:17.29074Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T06:22:47.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 25 Dec 2025 21:08:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da7b9-172c5\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":94917,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2729)","md5":"99fc0069a8367ced9f7b33aec78ec022","sha1":"c8ebd28fb8d838f407d3ece96c2aba2f4ee55b3b","sha256":"fefd342f045ca3bb712d6b67842773f8381bf5d00a09f7b883c9b50eb05bb745","sha512":"dbbd172a4683923453ec7a840af1ecf579ae354475f2b6e4b78931f30730e26aad34a6cbb9848906fcbd1efac8090de13375b7a89d19d03959d12c566c2d5585","ssdeep":"768:N/QIRQqz/kmD7oAx5xzuzcQO4jcPRb1bmQbL4m4a4HLtAK6pxawY71mQbLyYYYN2:N4IGmr9ZBVqH1dD/RIf","tlshash":"fe9319e5e2f852f6514e43e66932124a3f65a0b7b9928e4cf3ec9bd16f03cc5c803959","first_seen":"2026-01-30T05:37:08.689106Z","last_seen":"2026-01-30T06:23:17.303279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":189,"dns":36,"connect":65,"send":0,"wait":64,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/icon-5.097c76e0.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/icon-5.097c76e0.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10978\r\nlast-modified: Thu, 25 Dec 2025 21:04:04 GMT\r\netag: \"694da6c4-2ae2\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":10978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f465ff522312748ba871fedd35e88c4c","sha1":"4ac90119dd881b560773a47469206b0d317fde05","sha256":"464ce5c7b3d0f24506e8e66fde9a8c37367c304c2965d99dc640ef4df3ca3d44","sha512":"d9095645b03ca5d93c4f66936755afb41a17e8cac9e11f9725e2b3d12c3d6ff0cd3bed3c59c65015c67596f630379c3bcbb5064043946e9d15b2a2de5ae6f3d1","ssdeep":"192:TwTA7lZBJrwvcgaC+efsKl3DYuJ0RtJu/ITDglaohF2//8EDXdz1s0uR4KJFpQnA:TwTqLr7gaCLsKlzYuaRaIRozc/1DXU0Q","tlshash":"e132b039a4fae57ec44b72f8d21e0e43f46459fcc9a7a184d98423221b5b0c6769dbc3","first_seen":"2025-03-23T11:30:41.326812Z","last_seen":"2026-08-03T00:18:16.528803Z","times_seen":123,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":457,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/okx.6a3ea2bd.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/okx.6a3ea2bd.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 21:04:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da6e9-1090\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4240,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (938)","md5":"297bcf5f2503b2dd9fe6a500fd15ed95","sha1":"98bfe3977cc1b17697777dd84496a45893cfc6dc","sha256":"8a345e730376dcb665f1f1e987eb624926ba7a988193a89b693408df1d71677b","sha512":"c4f187045d5f5f367edae85db0ed253ccc604370f33a0fb0c543acd441c83d7b7363876836440d2b46b221db0c90a6c912a8954bdb6e20092c2f7bcafe8de80e","ssdeep":"96:dcWU/cba8ilJIAEKTA7vmbpd6o9qHbRz984/7bFTyc6GZLk:6tbIAEKT2vmbpMo47HDMOY","tlshash":"8c9130dd13f502d92cb47749b7f074aa2bb9d0671ada9805f30c0a0eab847b1a116cf3","first_seen":"2025-04-27T11:33:18.682187Z","last_seen":"2026-07-08T18:26:51.887684Z","times_seen":134,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/index-DaMICLxR.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:49.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/index-DaMICLxR.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/build/index-BgpgeINB.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:06:26 GMT\r\netag: W/\"694da752-1ca44\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117316,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (456)","md5":"e757193eb2142abbc0a6939d7b8b24d8","sha1":"51fe44cc9e7baf9a6d450d65a6b429afbff6802a","sha256":"62b745b72b8a5d0f3538e202d7b9bfce81a50c263b666bdbed720dea2f267eea","sha512":"06ead20f54b29abaa86ef901dc0e0da88df2214f11828237db13d4db809df17225e97a5d1f06def3b90903b75c17c5e437b9814f1445fccd2396f483d04fb908","ssdeep":"3072:M6WaXsmbn2jhbWGOCAdIJEeSz2b1yQE2Q:MlaXsmbn2jhbWGOROGeSz2b1yQE2Q","tlshash":"b3b3b4403af720358357e0ba6e1be915b224a41f259ddc5c7a9c86e48f48538c7b2ff9","first_seen":"2026-01-30T05:37:08.701406Z","last_seen":"2026-01-30T06:23:17.312849Z","times_seen":2,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipwhois.app/json/","fqdn":"ipwhois.app","domain":"ipwhois.app","tld":""},"ip":{"addr":"185.111.111.157","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:49.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwhois.app","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Mar 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:9A:03:9E:DB:01:BC:B7:CE:36:26:30:01:29:E2:CF:97:2D:AC:6D","sha256":"65:6D:45:47:5D:B6:EE:84:12:70:CF:BC:96:68:4A:1E:D1:4B:19:EF:31:57:F4:64:82:DB:C3:A5:E3:9F:FA:CD"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipwhois.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlreviewbot.com/\r\nOrigin: https://amlreviewbot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-1331\r\ncdn-pullzone: 4617583\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\napi-success: 0\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/30/2026 06:22:49\r\ncdn-edgestorageid: 1331\r\ncdn-requestid: 1fcdbce38314d1094be1144b74809124\r\ncdn-cache: BYPASS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":658,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ff83be5928a5a7b855ef9d94ca83e982","sha1":"bcab21d9ab3838e6b28894ecb412985a3932667b","sha256":"b6e52e550fecba78b54e615f1062b68ef65e30e9f31c5030281b9b074acf3237","sha512":"4b92ac85bc0897fce6b158dfc81ba647da65683a59c5b88cf23298f85a83904591c38d106d62e6d9589490aa24264490bf6656aa89557abcd50688634d6346a0","ssdeep":"","tlshash":"be014769207cddaaec3ec3d4909d969e177a9107daca89ca87ec5e9cc2c428aa040117","first_seen":"2026-01-30T05:37:08.655054Z","last_seen":"2026-01-30T06:23:17.31603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":134,"dns":10,"connect":23,"send":0,"wait":28,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/dec-1-2.207fda65.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/dec-1-2.207fda65.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 374\r\nlast-modified: Thu, 25 Dec 2025 21:04:38 GMT\r\netag: \"694da6e6-176\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55ec60c6d979bfd48cd1125e2e4d0318","sha1":"596af9e1189e6c78bde7205b7f8eaf0ee11ca199","sha256":"1d4e3ff58d845dc8334cd680f384dbadac356e17576cd16e1eb56d0ec39a9855","sha512":"25d093c05bef68516d9ff185b9bd656e30d6c846073b33d0a5997c0a442f6b45d497529a936e835fda29d2c1578dd094a5f753288f14e57cd9beabdf0dfb42a6","ssdeep":"","tlshash":"8ae0c0e8f3c478a0dd67c3e142a420994233b4eb238d4331cd557d1060070733cae9c5","first_seen":"2025-04-27T11:33:18.695288Z","last_seen":"2026-07-08T18:26:51.88045Z","times_seen":104,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/gateio.83ba026a.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/gateio.83ba026a.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 21:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da70a-c97\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3223,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (2479)","md5":"bcc79bc24839e2f65ec11ea42e08913b","sha1":"ff2b3958e7285110bec97e5ded267ba9fa3f5f1c","sha256":"773b27e7c90e056f662b7770b5c02ac13c7f39e2472705b6a8710f05740a2871","sha512":"6d30f90d20dfe3c6bd8116302c1f754e8e5615b8946ecc6314b4694074ccbd571b09a579456caa26519e125cc95a1589d3615b1374f1354ef2ece2b9a5a598e6","ssdeep":"","tlshash":"aa61f43f13b665535dd6c16829d008942829eceb6d7a7390f85fc86ffe2c4c801a1f5a","first_seen":"2025-04-27T11:33:18.685184Z","last_seen":"2026-07-08T18:26:51.871393Z","times_seen":107,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/icon-1.8ba21125.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/icon-1.8ba21125.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4696\r\nlast-modified: Thu, 25 Dec 2025 21:03:46 GMT\r\netag: \"694da6b2-1258\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5576c2b44178dc5365bd151b7a20be7d","sha1":"0b398c0957615380d0e1038c89bc02517765cd4f","sha256":"2aaa24d07190105c086cfbd3d9202ba24281e09f430b80dc3bae424472f62386","sha512":"be72f5ccba8ee7ed379155c8651fcb948de30c9d8ff6a643bf3bf8b10940973b06a0592fc269f0ed4301bfe3098797a3b11923d646c012de96c8a3a04a09603f","ssdeep":"96:IH0wBLRWYGf5cx6OAmkbI4NpXfpg3iW0AGBJ0QodR9uOkB8RMCmva5:9wBd4Bhjhg3iW0AGB25RXXqk","tlshash":"a3a16ea1f4e98c123c1e1e7079a17cec146da3a6b950986df4d6039a0593d009cbbda3","first_seen":"2025-03-23T11:30:41.317136Z","last_seen":"2026-03-21T06:13:19.954898Z","times_seen":27,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/icon-2.de782008.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:48.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/icon-2.de782008.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31508\r\nlast-modified: Thu, 25 Dec 2025 21:04:12 GMT\r\netag: \"694da6cc-7b14\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a88c3ae49b3dcaab737825975b03ba","sha1":"651b04b5fb7ebe8e871cdfada932da8d3ff88a55","sha256":"bd28d8370f36e516e51d59026f8c3a06641ac4822717f41af10afcf40566c9a8","sha512":"015bb130370affb8df854afecfe5b7271daa5d727caa4a079194caeb8bc937f8cc7ceef2979b7f4892ac960f10efcbba5807f1ac43719e028e27920bc8f6caf0","ssdeep":"768:Llx4yBIjIPO6wqH8z3ZvJDKluT79+8vjQxZhlPfV:Rx4uIMm6nCpFKlE7o8vjQxnlPN","tlshash":"98e2f198908adad3d17bd322aa15cc4e7b5550b62fb61c0e7a7084b4111543f32f72db","first_seen":"2025-03-23T11:30:41.313177Z","last_seen":"2026-02-01T03:33:42.003604Z","times_seen":20,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/55c55f0601d81cf3-s.p.woff2","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/55c55f0601d81cf3-s.p.woff2 HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlreviewbot.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 25908\r\nlast-modified: Thu, 25 Dec 2025 21:04:13 GMT\r\netag: \"694da6cd-6534\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":25908,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 25908, version 1.0","md5":"43828e14271c77b87e3ed582dbff9f74","sha1":"e7eb03153bd32211daee21b997c51864cc9f19c1","sha256":"ce129476f4299b215b55b1eed2fc4324b46bdb2641e11d59e2481b744a47d114","sha512":"c51ab5821a76dfd8b0cf056a056de5b0ab4d54bf91b01cc1936fbded44cd56da04b9cb8d6cdf4b08518e5bd8213e0a52954b78f71adbb547e1e66ffb38b9a142","ssdeep":"768:9h9cCMVru+1kGzpohqcP32N9DIb6FmX7rkDIj:9TcCMdVvpoqcv2N9DIwmrgM","tlshash":"13c2e175bd15cbb2ecfc8d65675e84a0177d2931c7a7e94093319c783c598484a23f5c","first_seen":"2024-08-04T22:57:55Z","last_seen":"2026-08-01T21:54:21.487625Z","times_seen":143,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/favicon.png","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:48.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 842\r\nlast-modified: Thu, 25 Dec 2025 21:05:28 GMT\r\netag: \"694da718-34a\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"476eed806d70bf9f1bfdecf4baf2e309","sha1":"97e7c78720573a83268c59ca94c2cd3f4509b87d","sha256":"5f5e527b934604aca616122cb13de8a844caa057dc72d8e9310086998f6c61a7","sha512":"e424a2d6608c004c7f8b4d122c9855d5148ed4d8ad6cbfed40e14f647b8ecc50b1c46c2d5c5357f6b30ec8b75f6aa332e8fa8698dd6599c4f9b0e5b5a3874721","ssdeep":"","tlshash":"870170afa2392807d0f80e99eb12528edc91934c611abe14cc280703867fcb3f2a1d03","first_seen":"2024-10-04T11:01:22.290979Z","last_seen":"2026-08-03T12:37:51.098111Z","times_seen":321,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/transaltions-DPWujcIL.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:49.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/transaltions-DPWujcIL.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/build/ChainSelectModal-CmYdoVgZ.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:06:21 GMT\r\netag: W/\"694da74d-10e4\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4324,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"148f37430b10841ad10e875bcccd4247","sha1":"9a6ff81cc78500cb8e863a4252a886b813fd3f9c","sha256":"7beb60ee9af68b1f39e0902eb7c9acef104963a2ba1353a4493246fabc3acc66","sha512":"5d16987130ccb1b7ecafff0259682ec1dc45a51fd24bfcbc794e0fb6664dbda677b5d0fb6fc933ad7355a6fa1cdb15ef6d6c10dbad417cae1a9d4b4a143a7f0d","ssdeep":"48:7RjGoPk4RnG8Mt6EsYmsU9ttSStni21XcvCvQvea048DqO2ea042CoEIp0gmqLbr:7RjG4bxGRaY74toSli21MaYMt+M9EqgK","tlshash":"8a911fb2c58d21640282150bc7677d5f24d515bf9fa6733a33e109f87bea22b453b28e","first_seen":"2025-04-15T18:32:02.803093Z","last_seen":"2026-02-28T20:26:52.531101Z","times_seen":804,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/scheme.52c4b7b3.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/scheme.52c4b7b3.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 134374\r\nlast-modified: Thu, 25 Dec 2025 21:04:51 GMT\r\netag: \"694da6f3-20ce6\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":134374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbfaa43a6106a7fe675b740df5702d33","sha1":"5539c4fceefaa00e91f260ef775e1d5620d96e57","sha256":"01eb215cbc96c52d6fef8616d5d0597216fc7dce0b6a2694464cf4832b0bcef3","sha512":"5bc359858c86e088f0be729d093d98fbce3a7c526dd5ebef8924a2626e0338d6855907274d1a9b7b7180ec8881766f370fca62d0509b24c0f107a25d3e55a6b3","ssdeep":"3072:ArnN81WGkiKu++cqazkRxWVrSXDN0mjbkqej:ZU1Xu++4vVrQbb","tlshash":"ead3c022c11e094adaf9c0f689fee3780595f699b21c1588cfd912a8497df819d0ff49","first_seen":"2025-03-23T11:30:41.30491Z","last_seen":"2026-08-03T00:18:16.558025Z","times_seen":135,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":496,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/icon-3.abdd8ed5.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/icon-3.abdd8ed5.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10590\r\nlast-modified: Thu, 25 Dec 2025 21:05:17 GMT\r\netag: \"694da70d-295e\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e7bb39df5cff5acc6da75e568a657b25","sha1":"9f81c7bc0c166577e148ba3e9faede1905907f22","sha256":"defafbcff00c69d55db8cb24b2763e771e4cf7da067ef3ce97445d4c67c73e5e","sha512":"85a8346545244133ad256ad553ad9d22bc8ad1471734fbcfd7ff392a78d4e27671c9d4699f749e8e085de9670fab570bfc6dc6082d75ad5e7a0e24747a8aae58","ssdeep":"192:QwTPmWBVC9fYUciIxLeQ1uSmAwY9zapkIvopMAHNFFWddxYToH1Le4kzcTYV:QwTPmAWfnc1Cr5gp7WdXYMVuzwu","tlshash":"cd22bf2fe3132f44d5fd503872a3ef75a5499e6a295109570984143b27508c4fab8978","first_seen":"2025-03-23T11:30:41.31992Z","last_seen":"2026-08-03T00:18:16.524209Z","times_seen":123,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":426,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/css/c505a721c7ff3575.css","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/css/c505a721c7ff3575.css HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Dec 2025 21:03:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da6a1-887b\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34939,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (34939), with no line terminators","md5":"d381cf2354c57a191ab8b6ad0a6dd79b","sha1":"d631cc24caec89ac66595a665c9f768072b1d9d3","sha256":"6c494fbd9abdda04e0104814d01ec6b80f0af108924e18c3957c10c91295f14e","sha512":"e254c61a769958ad39180a06994f1401378898100c4b0cac2a34e7e0a0e73a12dbce3f74bd0510c4658bb11d797f4ec22fdc4f151635736910ca1be0d879e734","ssdeep":"384:s1kDlB3Up1+SUro9rPuJsdHevA+zhw/CU/5BU0brn:qE1UnkZJsd+I+ibrn","tlshash":"b0f298232b1a202cf03b8656b1d177dc1119a845e75f0bf7e613be6596ca2e60973fc8","first_seen":"2025-03-23T11:30:41.328323Z","last_seen":"2026-01-30T06:23:17.327083Z","times_seen":6,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/dec-left.ecb70cbe.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/dec-left.ecb70cbe.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 440\r\nlast-modified: Thu, 25 Dec 2025 21:03:46 GMT\r\netag: \"694da6b2-1b8\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":440,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"544be8c60693680c05914bb0aa6b5d7e","sha1":"488b9ccfb58a581a8a39f643adfe7073d053e3f2","sha256":"9ec2a9dcd198d890ac2a6d8aa8d28ace70bb2a46e17b06f26ab736c855a86e29","sha512":"508040b1c98aacb17f4bcb11143e796c99d592c1bfa9f4faa74c07360af734b86028def57f256376fdde900bdd09acedc08a3ba636cc98d2b2fd1cd3ada163da","ssdeep":"","tlshash":"8cf0abe4b30c1944ec08c290ee6c70b950ab14f62750cd9d6ec13957609f09f3f75a92","first_seen":"2025-04-27T11:33:18.677803Z","last_seen":"2026-06-28T23:16:54.917356Z","times_seen":89,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/icon-3.29b1446a.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:48.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/icon-3.29b1446a.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13590\r\nlast-modified: Thu, 25 Dec 2025 21:03:55 GMT\r\netag: \"694da6bb-3516\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b016754aa0985c354c5017f1e9e7c00","sha1":"21a98fdb2a5cd5a36f7166346734c353339be6e3","sha256":"eba3a04577ecc16176cfd11f242f9a21cd75ca2aca9e793842186fe4fb81dfc6","sha512":"4cb43e318726d4fab1f032cd79a73402c414c3f8883a72684b3ad723e65332b30594ebd9bdc9c1369710d1a7902875a059349a56440992b3bd6863fadc74af87","ssdeep":"384:I4zSIS73Ezs0w/7G/Kn1I/1tUvSu0RmXR:HSISbEwP/7eK1m1SdomB","tlshash":"9352c0773e0706f1bf9594f692e1bf1e7c4da0ab06c12c91b854126f02169fe56d583c","first_seen":"2025-03-23T11:30:41.303104Z","last_seen":"2026-02-01T03:33:41.968133Z","times_seen":20,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"citychangeapi.digital/user/metadata","fqdn":"citychangeapi.digital","domain":"citychangeapi.digital","tld":"digital"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:49.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citychangeapi.digital","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 10:12:07 GMT","end":"Mon, 02 Feb 2026 10:12:06 GMT"},"fingerprint":{"sha1":"14:45:22:98:7B:FB:BD:A1:52:2F:90:55:DF:B9:3C:28:BD:13:CB:5C","sha256":"3A:5A:BB:61:F2:53:33:13:C3:35:CD:2C:59:F6:CF:CC:9F:47:18:64:90:78:9E:EB:35:70:C7:85:04:3A:AB:BA"}}},"request":{"raw":"OPTIONS /user/metadata HTTP/1.1\r\nHost: citychangeapi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://amlreviewbot.com/\r\nOrigin: https://amlreviewbot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:50 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":215,"dns":42,"connect":64,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"citychangeapi.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/icon-2.ad9bdf0f.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/icon-2.ad9bdf0f.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9144\r\nlast-modified: Thu, 25 Dec 2025 21:04:39 GMT\r\netag: \"694da6e7-23b8\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57aee16e24a515fac9f6036b168608a6","sha1":"363057dfab3eaec53a3bdddcb86545784c9e834d","sha256":"4999e1bbc64e193980e715ca831d4b80c36f6aa3f18518c37d6926846c708c63","sha512":"1d91eb866731ac1b40b2cddcbb0510f2e03e8d8492cb0d3b38b4f976f651721b7c38c23faebec6f6b6ffe6a856ba42fdfa47276e2aa4a42ca4824ff85afd0605","ssdeep":"192:LwT/4E+3IOez57coln0tAzSXAItEyxa6KQDoxHiFP+L9t28NaiXT:LwTQEyIOs7kxh18c8MIaij","tlshash":"5e128d00b212a36cf448723c9ded35e77db05c62df214742e19536476f076ae85ed2ad","first_seen":"2025-03-23T11:30:41.324698Z","last_seen":"2026-08-03T00:18:16.52793Z","times_seen":123,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":426,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/download.ec5df26d.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/download.ec5df26d.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8866\r\nlast-modified: Thu, 25 Dec 2025 21:05:12 GMT\r\netag: \"694da708-22a2\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8866,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"870f023442d0e975c20e34a4a92b664f","sha1":"f777b1c80de216a5a8d6722ab6da664a1364e940","sha256":"3c54b1d6ffcb970739d6ca3b91113fd648a910aec9a0fae136a5cc19d2a1d4b4","sha512":"e09b75a7991d9f18ed569b085b5ce35e66bbbbdb7f6954c9764ecce1a1dabc1b54649d80dde03601f7b2d3cfa7469770d41c0c98ce557a344623af817a318aec","ssdeep":"192:QwT0LByhRg8wAoo8cdf5HvuY+35+sdkNmtoFQ0rbR1L9fX:QwTq6q8wAxdhH5SYOxPubRF9/","tlshash":"3302cf6a4f700f62fee7f879b07ca401c1f1e7738c532016ab9c34282540ee62c2b95a","first_seen":"2025-03-23T11:30:41.300884Z","last_seen":"2026-08-03T00:18:16.527033Z","times_seen":109,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/graph.c3572c62.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/graph.c3572c62.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 21:04:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da6ec-263f\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9791,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bacdaa72d94068cdf0bb3ea379280068","sha1":"7668c8d031e4f35271505bad9aafce72f2c1af77","sha256":"a4fea055aa58640e7ba70f033dea74ee7bcf853cb92764a16e2b416b9fa98711","sha512":"6215f9a681f8fb8db3e313a374c1f77798a9a24baf6ac20b2c38af3ce5860f06e88e72030fb0afcbfdd3d2854f399d2294be9aeecb2e41a0042fd8d1255943fb","ssdeep":"96:+vlRJ4lzFJaFjtTnQMBD+y1VjAP+q8noQ07WfJucWbZjlP8GQdPt6iPo:+vLJ4/JOlnQMBCwjf0SfU7jLQdPt6ig","tlshash":"cf12f999331c0e3cf8334a64db4673b9542a02932f8572a8c87b2a75053556ebe7f9d8","first_seen":"2025-04-27T11:33:18.70059Z","last_seen":"2026-07-22T10:30:31.252338Z","times_seen":124,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/index-BgpgeINB.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:48.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/index-BgpgeINB.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/build/index-D7-5QWqs.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:06:27 GMT\r\netag: W/\"694da753-20ad\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8aad240c3e7c1e3216e41d83376f18de","sha1":"7116ec20ade21a00dea4d4d7e8ab5100e0626d7a","sha256":"38b2af7a5405a031b0cd0a71f8f1b137ae83c2f627383857f5877c367f969064","sha512":"774bf083c74638ef9104a9c3162202bf86aa255b3dc807670f4d04ae28db42a7d201e07af44883452d12e5756c6ff566f2c94a1f1d48db661996fd25d916c44b","ssdeep":"192:U3kUP5MJZnXcEZkF1HIAbjxTluh0LfTFXa6YmBvqcukk+6Uvldvc781RsE/:U3fPCxXSF33RXag5v081f","tlshash":"290241e56afb49784197b19c1a1bd911a120409f990898ad3ecc12f0cf8e625cef7fa5","first_seen":"2026-01-30T05:37:08.674512Z","last_seen":"2026-01-30T06:23:17.331845Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/ChainSelectModal-CmYdoVgZ.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:49.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/ChainSelectModal-CmYdoVgZ.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/build/index-D7-5QWqs.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:05:48 GMT\r\netag: W/\"694da72c-baaa\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":47786,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (512)","md5":"3ccc2cd01ff927792daf86db99db4282","sha1":"4a9fecdd0ce5cf426338f3100fe530b982da4eaf","sha256":"f803991b3080ea9672b0d23960dafefb9ca6b56131fdc48094070c2390c5fea5","sha512":"5f097a0a9c801e745dd8d4ff20a2a08f2e522fc994e4e5868acd685ae871a0799c8c05304273c970eb90ffc1607a00dafbe646ac9e3677cd7723538cca63158f","ssdeep":"768:8e9+GPRqlGGse1DN5X85echwfULuZtaIM1r8Kzj/SVrDHHMDG3vokfM:8e9+4pJwQechwfULitaMKXyXsdk0","tlshash":"9523d60563f615320667a07d1e1fc82ab320240f265dee5c3b9c16e55f489389af6ffa","first_seen":"2026-01-30T05:37:08.69819Z","last_seen":"2026-01-30T06:23:17.333044Z","times_seen":2,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@18.2.0/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /react@18.2.0/umd/react.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c5ee07c0f050afa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 56837\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\nlast-modified: Fri, 29 Aug 2025 07:36:36 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:S0lp+k7zWUMk2ixteM6HZvu8L9Eh//OVrt+ZfbCpmgY=:\r\nfly-request-id: 01K3TC3HS2KXRKKZGAJ8J6XQJR-waw\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10737,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (630)","md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-06T02:34:12.747977Z","times_seen":17421,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":23,"dns":2,"connect":1,"send":0,"wait":19,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/icon-4.8905bfbe.webp","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/icon-4.8905bfbe.webp HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36224\r\nlast-modified: Thu, 25 Dec 2025 21:05:08 GMT\r\netag: \"694da704-8d80\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":36224,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"414750e45b9da5575f6180f3b43f8be6","sha1":"ed49e868e6d36120150b13c525459379d4d61592","sha256":"a87a2e18ff95f1e7ac09e11b79956833b1b658c78107fd8f7cd5aaaebfa4d60b","sha512":"76a035bf098f4b5691c8e06413abaa2430c4fd8a398267e025773ab7b56cee233e494b6c87e23f3be0e6d89ab7e03dcb3a57135e30ccb2e7f726b8154d0788f9","ssdeep":"768:ETYHObUxIG9Lcne7LUnEPRcyHnXUekaCpEc4+Ek7HvPptgiJScNLyVZ:JHOa5YnU5cyv3CpEYEkrPpRQc5EZ","tlshash":"2af2f114862b57afe6817c789c252364d0443e3aa437f3b73ad311e7aed062d071f546","first_seen":"2025-03-23T11:30:41.315534Z","last_seen":"2026-08-03T00:18:16.559778Z","times_seen":122,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":457,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/a34f9d1faa5f3315-s.p.woff2","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/a34f9d1faa5f3315-s.p.woff2 HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/003b3958c1b64c98.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48556\r\nlast-modified: Thu, 25 Dec 2025 21:05:06 GMT\r\netag: \"694da702-bdac\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48556,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48556, version 1.0","md5":"d4fe31e6a2aebc06b8d6e558c9141119","sha1":"bcdc4f0b431d4c8065a83bb736c56ff6494d0091","sha256":"c88db2401bef7e1203e0933cc5525a0f81863bfd076756db12acea5596f089ec","sha512":"1cbe7641b8930163ed3ea348f573cad438b646ed64d60c1923e5b8664c3de9c2c21ba97994ec8d886f489e4d090772b010de72a1167547fb4f6a2d242d46aec1","ssdeep":"768:+rvWCaG0bvTIyNOporIvE+9OZduZ35LhKvXxYdBJaqyXNWLU2m/jG9EHmqGq55t:+ruCR0bvT386c6ZduZpFMXxQBJ82Q5tJ","tlshash":"7823025eb4b5c6e3fa05e60e86d990613909424f86b6dfc54f3741a038fcf912d3ea89","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T00:00:00.590781Z","times_seen":10266,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/bg.ac8ccb0c.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/bg.ac8ccb0c.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 21:03:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da6a7-16b5\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"410e8d7e4a5fe35bb0714cad30c47c00","sha1":"3433d4d0ccc1dfc97d6a2e9c613d92983873485a","sha256":"7b3c71e5d0e959b9076765f090a30d8be386e55a3917c4c21503b8d338d4839e","sha512":"754a3a4c3a67423f8f326adb00d6b70de6a5d332d9f2343dde1e4f1747a9c2072edf32801e27fade96f38613ea95ef2377a133b810e4032ef86b727dcd0f499e","ssdeep":"96:oaFl2AraRN3bJJvp+PUdqO/caL/F4MimV97B2M93j2HBbzNF7yj:oaFkA0hJJvpuUR1L/CMd7B2ijyE","tlshash":"7cc1c6ec2ba159c48ac853d1ff5580d42f3fb1bbdf4a0614c01d6be53c668e58c1c98a","first_seen":"2025-04-27T11:33:18.690394Z","last_seen":"2026-07-08T18:26:51.885782Z","times_seen":120,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/bg.27894c2d.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/bg.27894c2d.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 21:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da70e-6682\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":26242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ec8db0e76672fc67cebb8991294c736","sha1":"0c0602128f10341dcfd7e9607d337973d054fdc4","sha256":"16328427de744283522086e2a3563664b04aebcec405f52f3ac7a9b8f7981c5f","sha512":"26d54761bf5497f03322a491efddd19c55e0ceca791e254cfa103822644631e7fca23a88a2671318652db94ba4d49e029feead729e7e254c5263b282640cf65d","ssdeep":"384:Rra9HbMZacka3dMpIXCczAieYll21/FwsyfIfgbMKkJzdZCuEsjYF4fakpL/9TLM:VFqfgMj88Qd9AXUkg","tlshash":"9ac267ec6b50ddd4998046defb11a1e81123f1aa8b4a85c0d41d7b693cc3c5dbe8eec2","first_seen":"2025-03-23T11:30:41.313879Z","last_seen":"2026-07-08T18:26:51.896874Z","times_seen":110,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/dec-1-1.43be621f.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/dec-1-1.43be621f.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 21:04:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694da6e5-404\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1028,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75e06d17efd8d58020d0c23b5d50d04c","sha1":"cd19738cba15430f8a7e52d21fe5a57728e854c0","sha256":"72e45e9d39a5ecfd7aa302d3414831520310d4ed54151f9b7fcd9b98f23e29ea","sha512":"06c148de54ca56fe1de2bf36290149f2dbb140667b207f679199a4058d6bb34e47bfc74e4fab93dc87e4aaa5aa0ebaac60d67c54ad0a8cfc3d4d65ff6a4868b8","ssdeep":"","tlshash":"9a117bd402a80ef8dc134779b6fca09a1d5271db5b880ee1f5ac2450ef452aa65b35c8","first_seen":"2025-04-27T11:33:18.698784Z","last_seen":"2026-07-08T18:26:51.842409Z","times_seen":104,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/a34f9d1faa5f3315-s.p.woff2","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/a34f9d1faa5f3315-s.p.woff2 HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/003b3958c1b64c98.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48556\r\nlast-modified: Thu, 25 Dec 2025 21:05:06 GMT\r\netag: \"694da702-bdac\"\r\nexpires: Sat, 30 Jan 2027 06:22:48 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":48556,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48556, version 1.0","md5":"d4fe31e6a2aebc06b8d6e558c9141119","sha1":"bcdc4f0b431d4c8065a83bb736c56ff6494d0091","sha256":"c88db2401bef7e1203e0933cc5525a0f81863bfd076756db12acea5596f089ec","sha512":"1cbe7641b8930163ed3ea348f573cad438b646ed64d60c1923e5b8664c3de9c2c21ba97994ec8d886f489e4d090772b010de72a1167547fb4f6a2d242d46aec1","ssdeep":"768:+rvWCaG0bvTIyNOporIvE+9OZduZ35LhKvXxYdBJaqyXNWLU2m/jG9EHmqGq55t:+ruCR0bvT386c6ZduZpFMXxQBJ82Q5tJ","tlshash":"7823025eb4b5c6e3fa05e60e86d990613909424f86b6dfc54f3741a038fcf912d3ea89","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T00:00:00.590781Z","times_seen":10266,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/build/mui-DuBSgSbP.mjs","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /build/mui-DuBSgSbP.mjs HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/build/integration.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Dec 2025 21:05:36 GMT\r\netag: W/\"694da720-4b860\"\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":309344,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4136)","md5":"6e48b50ae0bbfad826d72b33e730cfcc","sha1":"c14a06ab8fae14e98f08e24759a35b85818c9b9a","sha256":"fade0fb27c183172bfffb60c53ede9c7bb6b057effe7dc1b650020ea4b13a22a","sha512":"d2d1abd8920abcc93155dbc7fb72e34a1b6f5d78fef7be691906bd6ebf3fcd6eb1c91944e59dc191e63c741e7c0a7251d3cd2d568b1fcf290eb39b0bd5a55588","ssdeep":"3072:VQ0zZhtnoQlbmNeVTvlW3al+qWpJVJ2o7ZTVpsxaERKvZ+8s:TZPoDANEalGTJ2o/psxaNvZi","tlshash":"1d64d70966f120310513e0b95a1fcd1ab63955075e6efd68badc92a82f4d03cd2f2bed","first_seen":"2025-04-15T18:32:02.814913Z","last_seen":"2026-01-30T06:23:17.33714Z","times_seen":15,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlreviewbot.com/_next/static/media/dec-right.05623658.svg","fqdn":"amlreviewbot.com","domain":"amlreviewbot.com","tld":"com"},"ip":{"addr":"91.92.240.208","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlreviewbot.com/","date":"2026-01-30T06:22:47.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlreviewbot.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 11:33:30 GMT","end":"Wed, 25 Mar 2026 11:33:29 GMT"},"fingerprint":{"sha1":"AF:BD:54:88:DD:80:E8:D1:55:E8:57:50:18:90:3C:29:90:A1:09:41","sha256":"E0:FD:C5:04:6C:EE:1A:9C:8F:6B:0A:10:CA:1D:C1:07:AA:55:22:AF:32:8A:EC:3C:28:7B:79:B2:B2:B3:A5:BA"}}},"request":{"raw":"GET /_next/static/media/dec-right.05623658.svg HTTP/1.1\r\nHost: amlreviewbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlreviewbot.com/_next/static/css/c505a721c7ff3575.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 30 Jan 2026 06:22:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 318\r\nlast-modified: Thu, 25 Dec 2025 21:03:52 GMT\r\netag: \"694da6b8-13e\"\r\nexpires: Sat, 30 Jan 2027 06:22:47 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":318,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f18da7969d82311d432839ad0f2f1816","sha1":"b2f5c5299d179f2b4c29b3912ad7e8b05d2e7586","sha256":"40a4d7ddd3cdbf8edc110c58b1da22d93bc60d9f42e13573901ca482d62ccf78","sha512":"93bc322fc974fdec1235bbe4bd28ab4bcb1c55d0d561853d753dc3750014af2e834dfafa5e9314fb4d505839fc1da450289da870d79684fbeb7d8eda36347833","ssdeep":"","tlshash":"f4e07de4738c5915a901c391676530e91452649513468c0dde813d16214a8bb2c955d8","first_seen":"2025-04-27T11:33:18.678754Z","last_seen":"2026-06-28T23:16:54.977599Z","times_seen":89,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amlreviewbot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"amlreviewbot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}
