{"report_id":"6ef334cf-1da6-47af-80b4-4d39e785faf6","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-09-24T11:10:55Z","url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"title":"AMLBot - The full-fledged crypto compliance solution"},"submit":{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-29T11:10:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-24","alert":"Detects file containing Telegram Bot API","trigger":"www.reportaml.app/assets/index-cbd18f8c.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"www.reportaml.app","ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":88,"request_count":29,"received_data":4621346,"sent_data":13334,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.18.27.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2025-09-22T02:41:22.517419Z","alert_count":0,"request_count":4,"received_data":7360,"sent_data":2491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-09-21T22:13:13.943291Z","alert_count":0,"request_count":1,"received_data":1977,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"www.reportaml.app/assets/index-cbd18f8c.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"md5":"76e42d4aafb62c05761295661b43f1ef","sha1":"1e3e9e700a0e92398932d5a5b54c31434f57d85e","sha256":"0df826eb7fd89be283163913fd764af6627e88604a9bab0e41e48397175852fb","sha512":"23952216c999d4289f776ee268166fb82ed76f3a3237f66091d1a85deffdbc5a774a08d50c1b7cd53a06d858598cfbf0775213a4bd1ec694502b386e74d5e74d","size":3815930,"token":"8316027966:AAFUbVNO8mTkTynGrNFmlMO6Fq0fpupAdQc","is_revoked":false,"bot":{"token":"8316027966:AAFUbVNO8mTkTynGrNFmlMO6Fq0fpupAdQc","user_id":"8316027966","username":"ebotemoney_bot","first_name":"ebotemoney","last_name":"","chat":{"chat_id":"7291488584","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"112b9b9739f1c1e30638f06915a26c46","sha1":"7ca61c290327958f1b28d5f5db17a50b627dfad0","sha256":"df46d72d7d33a351bdb4c5fda8d2ca607c665cd50025c58f3da3b1168458d8a0","sha512":"68476b66f757a91849fbd1cf1497a0d24266899493d86a59be321bfcfca7bd24ea63000bf9d3f376cc56384737258ca208bdbc22a337c7fb719590181905e35c","ssdeep":"1536:yKJqGfGmh0+w8N0pxS6QUjF3j7ft0BlxvHeXkEl+V9NuRWaGCjmyiBnmYlV/CIc7:3Jh7dNS15XkEfGHBn7/CI7FchDpi7Ut","tlshash":"0fe3e889a221b67646e3169b93e4c211b3b54440b80ac4f470fd4c9f597ec9813feefa","size":153372,"data":"","first_seen":"2025-07-19T07:52:05.468687Z","last_seen":"2025-09-24T11:11:04.735411Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5198daa56ac5a5d66ee580df500bfaf","sha1":"40770bfbe7686b0aa9b98d74e3443217817aca87","sha256":"a0c5ca9ea3609a61e6c9cb99a5e9b123455cc3bc5e9a236d3a77fb6b5b2332d0","sha512":"d0bd13006427615329c2f50b7a59e4f543998dfbf7709a43689e61a26965414571eb51e47ec356493d3a664459d955305094f1bdc77f91de69e6706e5f7a98a4","ssdeep":"","tlshash":"8df05936b5581b31a19b956b538ba1dc312800cfd700d101766df7940ba0e0061ad4e6","size":513,"data":"","first_seen":"2025-07-19T07:52:05.471606Z","last_seen":"2025-09-24T11:11:04.73638Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/index-cbd18f8c.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"76e42d4aafb62c05761295661b43f1ef","sha1":"1e3e9e700a0e92398932d5a5b54c31434f57d85e","sha256":"0df826eb7fd89be283163913fd764af6627e88604a9bab0e41e48397175852fb","sha512":"23952216c999d4289f776ee268166fb82ed76f3a3237f66091d1a85deffdbc5a774a08d50c1b7cd53a06d858598cfbf0775213a4bd1ec694502b386e74d5e74d","ssdeep":"49152:uCOcH9V1VXuBu4jO/5aFX4bfFrrud1u9XWCExZb9kTeSRh9jXFyvXr5GO9hn1VA2:ecH95uBu4q/omfVW4gxZb9oyv7Yj2","tlshash":"fa064bc872d7b461439a50e0647b100af27de91da4488058f3a9d9f63db8e99837ff78","size":3815930,"data":"","first_seen":"2025-09-24T11:11:04.73859Z","last_seen":"2025-09-24T11:11:04.73859Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-24","alert":"Detects file containing Telegram Bot API","trigger":"www.reportaml.app/assets/index-cbd18f8c.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/index-34117644.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6267d0ef282965c6c283dce02d6216f4","sha1":"dd69a6f73395fc215f30d9c0b41dc3bddf82020f","sha256":"e6979cc560ad385ee40cdf382b8ff02e2abd796a8dc57177121f4cb991ad61fe","sha512":"34c53a05006f03e55c0b0acafd8fbb51c1f3fe7dd076fe2f5ef76cb8b6b601463378e6b2b225985ad5180a3ae34657f269530388a074f93b57ef6506a82e6c43","ssdeep":"3072:UQtiCsd1LXonztdT5s7y6TpwaIFmwjwcOdjbgig9Lm7PDw:UQMCsST58y6TpwhFrjr9K7P8","tlshash":"55e37de473b4b17e728342ad853b0599f2387404b829c06cf6ec96db54d2e96c5b6b3c","size":146509,"data":"","first_seen":"2025-09-24T11:11:04.73167Z","last_seen":"2025-09-24T11:11:04.73167Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb3e022a98c5d605f6121db03de440ba","sha1":"58c607b04409a2e15d12c8cfa59262f27e23eacb","sha256":"eedd014627b9676170f4eb569290c3e09bd912fdf753e756a8ccf7d022dd558e","sha512":"1174b01694dbbac3ee1f22b7458fcb52bf7aba81b8078100cff6432ba47291743bd9c14835ab4dfe98a6350a7c9c653f52cbcb292997ab1a8065a75d7a9c2492","ssdeep":"","tlshash":"6bf0273ab6541b31558ba56b639ba1ec716840cfd610d2127a6df7940fa0e0065ac0fa","size":495,"data":"","first_seen":"2025-07-19T07:52:05.474682Z","last_seen":"2025-09-24T11:11:04.741195Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"93fa4d8e57fd1dc20999ad539cbf0dcb","sha1":"2c9b79bbd86d0be650c9c1b894549755c4222914","sha256":"d72760e86279ff0be625d9da9d361c71f8b96f4af7821e6095f6df08fc0c2a62","sha512":"f0c5561e537abcf3554c7515c34ae66921d78d679956c8001cfc87f9ba7210e3ee3a6366889b1944670640979c51410323f431f3cde2f4d35ad3e6122bde3849","ssdeep":"","tlshash":"ccf02736b5541b31a9dba56b578ba1ec716801cfd610e1127a6df7580ba0e0066ac0fa","size":497,"data":"","first_seen":"2025-07-19T07:52:05.477069Z","last_seen":"2025-09-24T11:11:04.742191Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3294bf67c0c5922ba87d1dfcc71531f7","sha1":"eb789dc9a25e2a643d96abe7ed352a9a725b50b8","sha256":"0ffde3d9c5e903dd788aae6f707e8c734c2b6cbffdd95708b3e9fc8e21acf05b","sha512":"d9c084ace2a274e1d54ade68264b0a3f13b5aecfd7f06b911c5a79b1a714384b7f05c4680008f4037b7d1deccb1a7a56ec4fb5ff7048b8fb5d930f87300880f0","ssdeep":"","tlshash":"76a00224153c855059b1dc484b064f5c0a317082714c74ae622ad340b3991818fc14c9","size":62,"data":"","first_seen":"2025-07-19T07:52:05.479193Z","last_seen":"2025-09-24T11:11:04.743088Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"58a21a17efc264062f52ce4da162e1d6","sha1":"e643a5935515dafb51c83eab32e72e4f29b0af77","sha256":"ab4e380bf0d86a043da98a1603b59411134b18bd4d72a5929f85856d0c2b1d72","sha512":"978f503b666fa3574bf33b153381d22a0bd09c6fa216dac919c52be7b3e164093779641ba34e9a819c2c8afa7513164d46323debe1106cc1e3aaab703ea52065","ssdeep":"","tlshash":"8b214902917450375873994a1f7fb2542593419b99cfec7234ed8b84cfe802e85aa6f6","size":1376,"data":"","first_seen":"2025-07-19T07:52:05.481223Z","last_seen":"2025-09-24T11:11:04.743933Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a2ff6a358d308f64dc6adbb08d24df2","sha1":"d3573cea76a54b60dbfafd21c03bb5bd2cd44e9f","sha256":"a2449d8cc5b5896e227780d6745ebc82bc0a5551b75beda0784c509c4d762cf6","sha512":"fddf0f6fedd55b3232cc1cd94b8d9ee5f9bbbd7af72cdd3895252cf8ff07ca9df63b23ffe200a6f92898008fcc89379911e4d609eae4fa52874d8dbe236f27eb","ssdeep":"","tlshash":"d2600000b0030c222030008e02000000200208022220000020a0008802008882220088","size":17,"data":"","first_seen":"2023-03-07T16:01:41Z","last_seen":"2026-08-01T14:03:57.836058Z","times_seen":713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.reportaml.app/aos%402.3.1/dist/aos.css","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /aos%402.3.1/dist/aos.css HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::9qwm4-1758712232360-666034607253\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4aa39590d25f07d504269ff42ae3399f","sha1":"2c7453c66807b94ca339906c766f673ff43ebd50","sha256":"375fd3b98f7f7831250e6b735d00755b9d211922021e699d37af5e30dbbe2cdd","sha512":"47440d5372bf2d35518999193ecaf3a389018aac90a13a68f77964c0c22382e9ba348a4a85f240f4101fe6769be4d52f06a595d45a393efc2d8c26925df62163","ssdeep":"","tlshash":"d5a0120d02c0090e33c054003142017534020221df60a21551c93654610068ee700083","first_seen":"2025-09-24T11:11:04.670174Z","last_seen":"2025-09-24T11:11:04.670174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/index-cbd18f8c.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/index-cbd18f8c.js HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-cbd18f8c.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"d7e842f7b70442e337827369230219c6\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::chlhs-1758712232361-9743b0d712d9\r\ncontent-length: 1078400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3815930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40769)","md5":"876f597f0e24717cac75aeea2e63421c","sha1":"f0e0f32985f4033f2fd95da9556e14ed643e3379","sha256":"7d1bf8c78b631ddecfdd9171db0d91d1bd3eab2f04c7ffdba0f83a5c93882a9b","sha512":"aaaccac824ff5810e267f1d6ec2da39d62fbf73281110b51265d6fd69699571df6a3f7e3f042ba13ed09c039d257c6f1b6d69443ab850997e3517130d623216b","ssdeep":"12288:XIp58Qh/NhnZ+z6cc0qxlvIPP9V1y6k43yqagMsk9BuwTjO/YWa1MaFXAjNamsY:X+COctp9V1yk2Qk9Bu4jO/YW7aFXApD","tlshash":"a4253ad873967451829b40f0606f100ef27af91a19484118f3a6cafa3db8d9953bff79","first_seen":"2025-09-24T11:11:04.673933Z","last_seen":"2025-09-24T11:11:04.673933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/c9a5bc6a7c948fb0-s.p-3bcf04ca.woff2","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/c9a5bc6a7c948fb0-s.p-3bcf04ca.woff2 HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.reportaml.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"c9a5bc6a7c948fb0-s.p-3bcf04ca.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"74c3556b9dad12fb76f84af53ba69410\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4hqdb-1758712232357-efff105b94fc\r\ncontent-length: 46552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46552, version 1.0","md5":"74c3556b9dad12fb76f84af53ba69410","sha1":"342edef074482299f72f8f7a8862e6f908bd4137","sha256":"3bcf04ca301e44f13f404c8a04aa4ae707f67a950e12ef30c238f96e784266a1","sha512":"78ae2a421e6aa394f78200187a13f9b8bb313a85dac223d2863c46e4f53393033cbc400b40d2044390f3b79105da41d1a59f81d796561b8dc1c2a7b763bbb9dc","ssdeep":"768:hhTRJqooGnba8+OgF5kjearV36czFCgWWfSkLaLOJc+IfZmmmSn+VoMzQAhX/LS:jT2kuzOgFmjearV3UWfSkQsVEAjdCUdM","tlshash":"f02302f9ca6e8095b3d73fdc14a581185b4e02aa1097fc1beb152eb1cb39d0715eb852","first_seen":"2023-09-16T20:29:46Z","last_seen":"2026-08-02T04:09:10.13774Z","times_seen":8307,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/huobi-white.ef112ac0-054f78ae.svg","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/huobi-white.ef112ac0-054f78ae.svg HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"huobi-white.ef112ac0-054f78ae.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"65924fc0d138c205eaadba4f53d04a61\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b6vqz-1758712232686-f79f346b3ec6\r\ncontent-length: 1391\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3048,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65924fc0d138c205eaadba4f53d04a61","sha1":"b0d1f59feba8f4c981f4d1845351c7ea664ec3b1","sha256":"054f78aea65883bc1f1b67f1508030a4f8522581918cfedc80a541db00058fa1","sha512":"6160b0ad4757125920803bc20b91f6480629603a0c879882b46d5a63fb9d9cc45cebb49d805bbcdb8d4d5e6fabbe51aa4531937a1325871a1a57c16e7688f745","ssdeep":"","tlshash":"575194c993cc93f8e805b3f40124947a263725f17a63c16883dc2ea5fd4615fc98cac8","first_seen":"2025-06-28T19:36:09.234114Z","last_seen":"2026-06-28T23:19:24.275636Z","times_seen":104,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:33.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.reportaml.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 91995\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:33 GMT\r\netag: \"8f7cc9bc041331ac30c0efeda7683e5a\"\r\nlast-modified: Tue, 23 Sep 2025 09:37:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wjhs9-1758712233182-aff0bee5e8e3\r\ncontent-length: 105066\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T15:58:27.616507Z","times_seen":17674564,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/src/wallet-check.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /src/wallet-check.js HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::6ksxr-1758712232372-6b6d3e6aa7b1\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"137ced8017bd7b02badfa332e0238ad0","sha1":"21e4a5d536c5ac31f34ebda3ced33ad0bab08592","sha256":"6a866388e6729e142b34eaf21bdb33574353f21bbe6011187150a09c8c7f5c4f","sha512":"838f1a6ab86b4ea9ffc432ac2e253bc3f167c70550e4168d016db074e783c4163e3a3e1b0af9bb6890203b24161368afda9e5c5b96b2818d26be32357e4834bd","ssdeep":"","tlshash":"70a0243d0dc10d5d37c440113041113d000001315d30fd1041cd75447115dcdd3040c5","first_seen":"2025-09-24T11:11:04.684612Z","last_seen":"2025-09-24T11:11:04.684612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/misttrack-cd8cfa4f.webp","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/misttrack-cd8cfa4f.webp HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"misttrack-cd8cfa4f.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"7541977e4cefb717cd439b7967df1abd\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b6vqz-1758712232369-fdf07b75d53b\r\ncontent-length: 6094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7541977e4cefb717cd439b7967df1abd","sha1":"7d4c016948a40dd9bed73c0a772ae7549824541b","sha256":"cd8cfa4fb305fd5167e75016c94b8b10ab3239b7d6557f4fc79cbb7333cca47f","sha512":"22fa2eab5da21627a4fb163b3f287acd271502b365d29a0fd86517aa6a7b6e10a0d8d6ef739addd6521d54bef310afa8d4c45516d33ddf87318872274472ad74","ssdeep":"96:6EkX5GjN7mb6SUNfrGUJlVtPY5Hb+o6f3SPC3uRZjuhjFzVoFscyZcNEEEqUV7Wl:/YGBmb6SsrGUrcHb+o6fCPMuR9uhjFzZ","tlshash":"dec18e82d3e99d83943956e17b321167ddd03e826a8ac9b6e15ecc9f50303175e3284d","first_seen":"2025-06-28T19:36:09.263508Z","last_seen":"2025-11-10T04:01:58.882282Z","times_seen":12,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/letsexchange-d751e35c.webp","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/letsexchange-d751e35c.webp HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 91992\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"letsexchange-d751e35c.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"e8d51e0cd4388350ebf144090af440dd\"\r\nlast-modified: Tue, 23 Sep 2025 09:37:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vcwnb-1758712232367-7d192c660f8e\r\ncontent-length: 8534\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8534,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e8d51e0cd4388350ebf144090af440dd","sha1":"3d1206501c82806832967d15b6faf93c904de610","sha256":"d751e35c1d276712eda6927bb42617ef0c453d1694ceaab2e25592392badab91","sha512":"533946cbc9b0d8cfc70913fec4fe33cb739f6d5eeca4bf74968884e3548196195c49d899621b11f856f62eea87044b40603c2f5de68846790b4f11d7387623ac","ssdeep":"192:SfmV+5pP0VabdSmrMkD/efDjdGPdRvDZe2fsYdy6tdwx:SfmypP0Vax5MS/eLkvlxfsYk6Mx","tlshash":"a802ae1ed73a0261e4ed7678c0f29cd426633208692885ea0df5d7e92d3ac985a3f854","first_seen":"2025-06-28T19:36:09.215032Z","last_seen":"2025-11-10T04:01:58.84135Z","times_seen":13,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/credits-66b50b07.webp","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/credits-66b50b07.webp HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"credits-66b50b07.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"27982284fac56cd0a359f5f631d75547\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::chlhs-1758712232367-1e1290cc5751\r\ncontent-length: 7572\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27982284fac56cd0a359f5f631d75547","sha1":"f62626304f822522c7baaf33e1cf7b84588ae7ba","sha256":"66b50b07f6efa27960a5fe44433ed8af647874d338e3f7a3ab8a5b7514ef86c3","sha512":"a1657f593eb2603d8f6dad8067d863c758ea4aabf79560d4764fa9f3e9c1e8aa7d9fc0d856aece7972f00c408595dbe6d58d8d05b3f7412b4c46159118d0e7f7","ssdeep":"192:X3bfqwKfdI+1gui3KUPYigj12tHYqMysfZAMQiM5V:X7qxLCbxo1GOKi","tlshash":"97f17f749a8e9f79c0033bff46c0af053c4b9565817914c735872ce7cad2621ed6592a","first_seen":"2025-06-28T19:36:09.24338Z","last_seen":"2025-11-10T04:01:58.886908Z","times_seen":14,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::wjhs9-1758712232372-c6b4fbe4c478\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c55d44d62887212d7190299297f7c23f","sha1":"753180996293d48b03141d27d8e8b76234bcb158","sha256":"2b0a7d0cc08f0f0d707bc86979b81fc1840e49afbf55743f6b01eef69b381e87","sha512":"cf88f482a7c1112d9b92ff19ed9aea8dee9bb01b28c2a1152592e8e58829d4e62d98b95c6d52c02970e50797e3967dc177dc17c6c958f8c769d5404b2482b5ac","ssdeep":"","tlshash":"bba0241f05c45ccd37cc434150410177100035717d70f35041cd374451103cfd7440c0","first_seen":"2025-09-24T11:11:04.691323Z","last_seen":"2025-09-24T11:11:04.691323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/logo-trustpilot.7960630a-87a156e0.svg","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/logo-trustpilot.7960630a-87a156e0.svg HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-trustpilot.7960630a-87a156e0.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"98f8b5c54c2857747c7148e650a378e5\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rg6z5-1758712232684-37c384fa2a9f\r\ncontent-length: 3129\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8270,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98f8b5c54c2857747c7148e650a378e5","sha1":"32f8d58b4a9cea844a33427159be93d65759f73c","sha256":"87a156e0d59a442e77fcd8ed4ed1532ade845f579ba63a18400a198167a79f3a","sha512":"bd8ca19e8d21aa68d0e4ba99af80c18acb9e950a4b017fe4e29df9d06ed5892cec93ba2270b9b8d8e16ecc728050a93404cdfddf0885110c24bf95eb4994c157","ssdeep":"192:yMx8cH7EMmXTpb70MSu4wVjp7p4SrUp4B46:bjH7piyu4MtrUp4B46","tlshash":"890296c6a38066885a4fc1cf3e56fce8500b60f6f6faa5ec92f76f0c5e934a43509855","first_seen":"2025-01-02T04:53:56.645526Z","last_seen":"2026-06-28T23:19:24.271128Z","times_seen":36,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/cover-668dd6ba.webp","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/cover-668dd6ba.webp HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 91992\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"cover-668dd6ba.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"52c3af399dab01b7df4d3911dd0dd54e\"\r\nlast-modified: Tue, 23 Sep 2025 09:37:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9qwm4-1758712232366-e31c865ac1b1\r\ncontent-length: 29516\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":29516,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52c3af399dab01b7df4d3911dd0dd54e","sha1":"71637686d89416df7c223a29d321095165fd1bc4","sha256":"668dd6bae28e7e1b3fb27b3e81b5a7dd79ce9d077b7d6eea8db11e3576269f38","sha512":"b36c8d7621b67d440874cd6c7212079eabadb5ae3826c60ddfcc3d22614f4ad027b969fc2cd65fc5f8cfdd1598db77eabc0d1a5a7dd075386d55f278e4a27b58","ssdeep":"768:hllrddDl8tPovwmnllldu4WZipgp9Q+SGzjxugPFDR48W2kUr2h:hllrdVettmnlllduPi29Qkjv342kUr","tlshash":"e8d2be3755add281d251bab06160fac727565c3a21534a805e2d1c3fa30be7f3b284fe","first_seen":"2025-05-30T09:05:59.232346Z","last_seen":"2026-06-28T21:40:24.453132Z","times_seen":39,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/alfabit-9b269eb6.webp","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/alfabit-9b269eb6.webp HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 91987\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"alfabit-9b269eb6.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"18349cc221b1dd0647e4086a1f32b3fc\"\r\nlast-modified: Tue, 23 Sep 2025 09:37:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rg6z5-1758712232370-e413a736ed7c\r\ncontent-length: 13326\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13326,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18349cc221b1dd0647e4086a1f32b3fc","sha1":"5fca8865f67c76b47d0ce087c07c114d8b70ae47","sha256":"9b269eb6389dfe4aa77efc7a23fc1f7509cf78c91371ab0fc1c3ab6859cc9fe5","sha512":"09200e38d8431c56e8504161c0099b08f771600334f249ded92d2397814dab9abca2a398ad092730e7aa42dc55f55685a09aaf9627f6bc2b0499253ec762ef21","ssdeep":"384:SHYjAqqu0Q+IvYoWCenKe9ioudqqBowAlsUL4vkui3vv8E:S4wVQjvYoNen2SLyifv8E","tlshash":"4452c02e060e4a0e8b40ccf975541c43cb8b879938e79610db04bdd9b5cbe7e2a91b96","first_seen":"2025-06-28T19:36:09.244459Z","last_seen":"2025-11-10T04:01:58.844501Z","times_seen":12,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/icon-shield-c5875ac5.svg","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/icon-shield-c5875ac5.svg HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/assets/index-16a5df8c.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon-shield-c5875ac5.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"c92235e29b4cd7114c224915afda1fd0\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bk6jz-1758712232607-a5d52b3e4d18\r\ncontent-length: 762\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c92235e29b4cd7114c224915afda1fd0","sha1":"406636e603072697fa29d085bcaeebade257b735","sha256":"c5875ac56ebf69d08b29d19e13875e502183171b7c282a9aafe3a6f23623d4fb","sha512":"f2b99859974f7e5bbd9ea9b888de86a74cfdfe2b04e196d8ddeacafb42488f4df19ef8d73ed80594afd768e2f7afef5beae906b484d0741b35af683e4faaed09","ssdeep":"","tlshash":"d6311fadcac892d8748197b0c127e8360baf20f67b42df958654aee4e70a24d0c1dc90","first_seen":"2025-01-02T04:53:56.636465Z","last_seen":"2026-06-28T23:19:24.2806Z","times_seen":61,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/bg.546c48b7-b162bb84.png","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/bg.546c48b7-b162bb84.png HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/assets/index-16a5df8c.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bg.546c48b7-b162bb84.png\"\r\ncontent-type: image/png\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"c25fd5731afa1e254599fae7d1d099dc\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bk6jz-1758712232611-afc04420e35e\r\ncontent-length: 55704\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 766 x 996, 8-bit colormap, non-interlaced","md5":"c25fd5731afa1e254599fae7d1d099dc","sha1":"2dc723309836ecaae2325c3af7e83662603acd48","sha256":"b162bb843f36903d087d261d9f2bc90e6b9192b9aae5b0453bd0a3efa902fe25","sha512":"0e88b4a6aedf45eb96c7571026a1e0de1bbe4db4090a8cdc5175495701a1db1e1dfda7270667202148199567e0c69d2d153244b0fd2d95597803eb7e0ae3a471","ssdeep":"1536:V4YAknF0Io3KZPpFNPvZ8LtFBuSuLcgE1ihC:V4YAkn/oaZPpFNPR88jUWC","tlshash":"e843015dc01b56e88840fa023bd8cb11b8ca719319b06dd325d6836c88e6e6bd8f75ec","first_seen":"2025-01-02T04:53:56.627278Z","last_seen":"2026-06-10T18:41:40.316156Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/okx-white.32ece2b9-e9b72ee4.svg","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/okx-white.32ece2b9-e9b72ee4.svg HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"okx-white.32ece2b9-e9b72ee4.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"c0c53aa999c88a232bf00d8d50dd8548\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6ksxr-1758712232687-eed6955e8766\r\ncontent-length: 1256\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0c53aa999c88a232bf00d8d50dd8548","sha1":"07bf1f375a55a841b03a5f131efc62e2f9a8da7a","sha256":"e9b72ee47d139385ae90d6a8b4a1e0baccd2ea7697f75736b4fbf911cd3314d9","sha512":"da17d076133f4844a097c298e99a7a79d0c9983384b38778e09086362615fbc92e501107138ba5606f43ba82fc0c47d4b7eb7e92549de92911dd99ea9d70d7f0","ssdeep":"","tlshash":"1d71648597dcd1909343aff4c3247475aeb328e8db214a50c790ddbaf82549ecc89dc1","first_seen":"2025-06-28T19:36:09.240132Z","last_seen":"2026-06-28T23:19:24.275123Z","times_seen":106,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=1da0c8b5f8e19d71d889c5142aa6acbd\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.18.27.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:33.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 01:50:57 GMT","end":"Mon, 10 Nov 2025 02:50:39 GMT"},"fingerprint":{"sha1":"9C:07:3C:56:F1:28:FC:97:55:04:8A:8D:92:C4:89:62:B9:DC:3C:17","sha256":"DD:4C:89:15:CB:25:11:30:A4:35:FA:E7:EA:04:CD:2E:98:DA:56:CE:A0:2B:34:46:34:A6:E1:4D:D7:C8:DF:7E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=1da0c8b5f8e19d71d889c5142aa6acbd\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.reportaml.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 11:10:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2472\r\nserver: cloudflare\r\ncf-ray: 9841d603de8156b7-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfSFghIByqO-qpSeiAGASfCVErfmDcyauXnchu_YTSDQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=17+5 c=0+4 v=2025.5.1 l=2472 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9bbc32ce28fd80253987f2e1f0be287","sha1":"ac50a6c9aaaa9a3fd32f610e9858fecee25be6dc","sha256":"9b9632ed8ef4f6d25483053b956d22184ee488efd3f8c22e0ef2626b974475cd","sha512":"5863d7231d17d3edf58896ef5332bb631d9a5c27d06fb934be7653a6847b8918e92ccb66090e97c8b96f5bd51b3c9ae112d2c4eb9407cfe8f617da98ea3d3dd0","ssdeep":"","tlshash":"f8513b2e28bac5e8bedcb4ce2f90883a3283b7511ad4c45552d80854e35fb41a1db0d8","first_seen":"2025-03-01T08:57:15.902828Z","last_seen":"2026-08-02T06:27:22.839369Z","times_seen":2756,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":453,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/accordion-js@3.3.4/dist/accordion.min.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 10:31:15 GMT","end":"Sun, 23 Nov 2025 11:31:12 GMT"},"fingerprint":{"sha1":"77:EF:87:8D:9A:D6:8C:EF:F9:8F:05:89:BF:F2:6B:C2:CF:78:19:EF","sha256":"3C:23:A9:CF:90:2C:6B:74:27:D0:FC:3B:92:A8:A9:AD:66:5F:B0:D4:DE:28:80:4D:49:D0:4C:22:AE:D2:F3:90"}}},"request":{"raw":"GET /accordion-js@3.3.4/dist/accordion.min.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9841d5fc5b900b51-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 6834347\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Sep 2026 11:10:32 GMT\r\nlast-modified: Tue, 29 Apr 2025 17:16:21 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:nZMM4gw4Rp2XVsepPmuyYSfit2ujkC6APM8KR+ZtnjY=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01JT18SC2N1CWRVBJZPTMNNZEE-ord\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":1142,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (902), with CRLF line terminators","md5":"bd04fdfa74a8079d539b63a6353e5d79","sha1":"e80818a236855b40055faea1c29cc5c9fa5b962a","sha256":"9d930ce20c38469d9756c7a93e6bb26127e2b76ba3902e803ccf0a47e66d9e36","sha512":"062aa462f8ebad0d1041d5d28fa54b3ca16781def6910cafadc868df629ae176e663b0a9c864612ff665490e23e2251975583e6c3c88af408b786a3c63404a75","ssdeep":"","tlshash":"96211121cb413003521fdaa2ded2f96dc3f4e1579433898df69652698f8119e235ab19","first_seen":"2023-09-28T21:14:34Z","last_seen":"2026-07-22T12:47:35.647164Z","times_seen":49,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":26,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/comistar-19e5f7a3.webp","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/comistar-19e5f7a3.webp HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 91992\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"comistar-19e5f7a3.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"837fc2538103835d5bb014fe0a72e1d6\"\r\nlast-modified: Tue, 23 Sep 2025 09:37:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wjnkl-1758712232365-0b0a0348a2c6\r\ncontent-length: 18088\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"837fc2538103835d5bb014fe0a72e1d6","sha1":"0fed4cd8f0701820c7d8adfadfc6f4e80998fd04","sha256":"19e5f7a384427b962899381f1ba9160f27d97123be196a4b2a99f8f5ed38deb4","sha512":"4bf8193ccebe0a526690174e4a4de72d64b738aa0a125bbc18979e26155e8533371764d96c5c579c87dc6afd22ca9e61b6a4e001b355acc921e253eb91cfdb2c","ssdeep":"384:UrVX9A+e/dX8HAIm1udOfFxQM6sTgeB1zdsxLgT:Ur0+eWHmffFxasTgezBsxcT","tlshash":"1282cfc353b47a30d2cdf53ac676221f6896e3c272776020d7fa60d95310a55eaba0cb","first_seen":"2025-06-28T19:36:09.235149Z","last_seen":"2025-11-10T04:01:58.865477Z","times_seen":14,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::bk6jz-1758712232598-4c5fdf4aed94\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"3f35fef5354548f3be8f397ccbc6b886","sha1":"23f6351be82867d6d8807681273d3acc71491d1d","sha256":"6e3a45d779e495050d46365a8d4e6dbae6b9ac562cf6f064094a65b1e7e50776","sha512":"f45937f20f434faf4f98f39a71ae861190526c13b61c5346e7e25759ed649a37664081965aa4d0e9c0c4322bb75cb85c872c1b4c7c1ba685d75a5d15b9e924c3","ssdeep":"","tlshash":"c5a0112e02880a8e33c808202082a23800200832aa20b32202ceab2a20022aeef800c0","first_seen":"2025-09-24T11:11:04.704745Z","last_seen":"2025-09-24T11:11:04.704745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/ec159349637c90ad-s.p-227d03aa.woff2","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/ec159349637c90ad-s.p-227d03aa.woff2 HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.reportaml.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 91993\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"ec159349637c90ad-s.p-227d03aa.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"0e89df9522084290e01e4127495fae99\"\r\nlast-modified: Tue, 23 Sep 2025 09:37:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9qwm4-1758712232357-3294ae862d10\r\ncontent-length: 27316\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27316, version 1.0","md5":"0e89df9522084290e01e4127495fae99","sha1":"6e08f3e855415e6588214b1c7d5eb740a1545ab4","sha256":"227d03aa3cb9f678eab520c866158809784bb942c76f248c2266ca23cec58540","sha512":"ec373059611f17eae31f4714a1ae49fcc1229654efef2ae3aa5bd099d669b7fcdc8d36ff0c0fa0d17e9c93bd686d03b09b3751b76a9fc2dc209d563129ac0f45","ssdeep":"768:YeOcCvcwdBVh2aFGJoP1tXyWRb5R5c0JpqT:YtcCvcIvyoRG0Jps","tlshash":"28c2e038300d6c77a53e487af6067a403e49dfe1028542e6f7e1a343c66a50f08abe69","first_seen":"2024-02-02T05:43:42Z","last_seen":"2026-08-01T21:54:21.450721Z","times_seen":43,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/aos%402.3.1/dist/aos.css","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /aos%402.3.1/dist/aos.css HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::bk6jz-1758712232575-c41fe120e92a\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"841332b897f2977b08cc5ea0e59fcf7e","sha1":"320e73d6af68f6b95883847c348b177a3674faa3","sha256":"aa63120bd2dbf0ddb7162fb4a20513b50d03f20a7655ec52eca65fca4104221f","sha512":"3eb729283b429c07497533029a242fee1c04a91dbe2fb9a4bf107f70574355c398b0ae9d4f48ec7c23d7e7d53dcfa0478f5ca7b59eb8a04faff74129e9381ce1","ssdeep":"","tlshash":"61a0112f8a8e0c8a33e808002002823a000000b2aa20b2a002caab08a003aaeab800c0","first_seen":"2025-09-24T11:11:04.708267Z","last_seen":"2025-09-24T11:11:04.708267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/jquery-3.7.1.min.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::zscl2-1758712232359-9870d90168db\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"cfd72298aef6923c3026938bc76ec009","sha1":"bffdb3c4872f358c6575abbbb2cd6a31b2c03812","sha256":"89c14ac70d64496d29942f98fc849bccf22b516ec7f8738261ad0aa763dfae30","sha512":"92012b32864564188968d25123887423e43f562743ad9c79201a080a7f8366c9f47ffcde38d12486311115351f529ab6c0fab268e526b6846c5aa91937ab4b02","ssdeep":"","tlshash":"bea0120e03800c0d33c0885110010178018401327d11a264509b566450061cda3080c0","first_seen":"2025-09-24T11:11:04.711508Z","last_seen":"2025-09-24T11:11:04.711508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/accordion-js%403.3.4/dist/accordion.min.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /accordion-js%403.3.4/dist/accordion.min.js HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::w9b67-1758712232365-870a9205adca\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"cea9fdf116b0ff6133cc17539c599817","sha1":"1868a8fe64ce75d490c74efc17815522c2918701","sha256":"b990850856f3d95df03cfdf7dfc744b7c5eda971032a584c54714520d372c9e7","sha512":"4aaf5e0c530c69834bfd3d503f22962746b319372038a15f2bc091e266ca5413f4df80d30549aca6216a0e880bd2ccc67588b90eac3f718560317a4b709a7187","ssdeep":"","tlshash":"87a0240dc3c10d0d33c747417047417c14144331dd1cf11040dd130511405ddd3440c0","first_seen":"2025-09-24T11:11:04.714411Z","last_seen":"2025-09-24T11:11:04.714411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/index-16a5df8c.css","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/index-16a5df8c.css HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-16a5df8c.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"6fd5987fbe3d5d3343a86e89df734f7c\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4hqdb-1758712232364-ed48f1329f0c\r\ncontent-length: 33878\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101104,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f0a3da3fa35a26a8bef19d580359b337","sha1":"def3b494e5fea6c7abe2a932d16651432b98dd8d","sha256":"16a5df8ce38b0fa3eb53249d975d0e7a7a087bf5e4dd9a03ca160d2015a2b211","sha512":"897d8dcc5a5e14193f5878727821d202e8bbc8c43bdb57372c84d94cb438c6c2e7a36672a671642727f6ebef8afd8ceed492009d438fbc2920d2df814d1d5482","ssdeep":"1536:CMJihoCcZCOud8G8tKS65wqsZCG+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4Ku:Sec8TWjgciUkPyz","tlshash":"75a393267a0c9008fe174b0362df6b5c15347448e231169aee2b39c99dcade77973f98","first_seen":"2025-09-24T11:11:04.717605Z","last_seen":"2025-09-24T11:11:04.717605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/boxexchenger-c94c4fb2.webp","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/boxexchenger-c94c4fb2.webp HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boxexchenger-c94c4fb2.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"8d6d26494a05e2166d0b3660d93d53a3\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9qwm4-1758712232364-34b8afc3eb15\r\ncontent-length: 6194\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d6d26494a05e2166d0b3660d93d53a3","sha1":"5497b5a71724d94c8a061ecc1e7f0044ead69055","sha256":"c94c4fb2b79eace0db86c1108e832b68de4b4d3375c631ae8541024d8b2e9cdc","sha512":"96e20b6aea86d8eb1534b25f7f0938a7866a25828d8aaaad01f2b42700ca49cbd9a99d809467a86a9c36862003cfb008910651ec552e93aab0572b6cb76a592e","ssdeep":"192:6NRb8XzbL7a595YNNw4PmbKurSDKoT9U:Sb8XPQ4H+rOzT9U","tlshash":"43d19da9e96d38247df6d5cdbbb484e16e8b12fc3c9a40b240c9d91013dc054cc59cb9","first_seen":"2025-06-28T19:36:09.232789Z","last_seen":"2025-11-10T04:01:58.896475Z","times_seen":14,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/accordion-js%403.3.4/dist/accordion.min.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /accordion-js%403.3.4/dist/accordion.min.js HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::rg6z5-1758712232557-88403086238b\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"45e2ef4b4c5d3e28fcc91f684a76745a","sha1":"d01227203fb31df6bf72861eb34ae647e72c658d","sha256":"b32a3d1f88cc2a120e5b1220e97099ae441fab17b15ac1e01e951cedc10d58ad","sha512":"edc1dcd56075e552b629192399d2be7908cb535483be671988035327d888c6c67a8e78d484841a8682d86629f50794b4b7f35bd2706a9ef241a857cd05c0a72c","ssdeep":"","tlshash":"d3a0129f06c40d0d33c8404217010234000401215952f51050cd218624503cdb7000c0","first_seen":"2025-09-24T11:11:04.721133Z","last_seen":"2025-09-24T11:11:04.721133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/src/wallet-check.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /src/wallet-check.js HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::vcwnb-1758712232763-6ceefd0db2de\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7ddf4d8a485bd11d9641e1252bc965a4","sha1":"e5b264b4686dd33f3eab43cb290304c1ed725807","sha256":"ce1f616a5871bcc7a3d197343c2d01154e16df033f774e8e22cde0771048c82d","sha512":"0ba95dde0c71801a8f7b72a3721c2074a93000c10d9b15fe4000318178c87ddf56f5db7cfb040af8caea3b9dca6e8bb99f56c4b961d4c2a9ffc7c9c27d680b14","ssdeep":"","tlshash":"7aa0222e03ce0ece33c80003b08302f828220032af30fa2000eeab3830222cee3080c8","first_seen":"2025-09-24T11:11:04.723288Z","last_seen":"2025-09-24T11:11:04.723288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T11:10:32.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 91994\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"8f7cc9bc041331ac30c0efeda7683e5a\"\r\nlast-modified: Tue, 23 Sep 2025 09:37:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9qwm4-1758712232180-8baa94514233\r\ncontent-length: 105066\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":303629,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (61925)","md5":"8f7cc9bc041331ac30c0efeda7683e5a","sha1":"f700e69d6b7bb5be11e912aad05101f60f48d2bc","sha256":"e09b6a54495f83c730a573e35ebfdf85c7ddcb6cf4daffb940aea99214bf687e","sha512":"df7ef4be27321e1cfaee3d0c970ef819fb9cdf37b5804ecc75f71aecc4c049264e30168b4c4fc5e6f82797f55052da89e5add4cf20ddd5a7abaab9acd21f08bf","ssdeep":"6144:xJBG11kEfGBn7dqhti7UO/qAIGWxIhV/64bM:okOGBchGpKB","tlshash":"06544b9562b0717642e302d6a3a4861277b15407f80ac5a471fc4ddb4fbecd80aafef9","first_seen":"2025-09-24T11:11:04.725834Z","last_seen":"2025-09-24T11:11:04.725834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":43,"dns":17,"connect":1,"send":0,"wait":10,"receive":24,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=1da0c8b5f8e19d71d889c5142aa6acbd\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.18.27.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:33.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 01:50:57 GMT","end":"Mon, 10 Nov 2025 02:50:39 GMT"},"fingerprint":{"sha1":"9C:07:3C:56:F1:28:FC:97:55:04:8A:8D:92:C4:89:62:B9:DC:3C:17","sha256":"DD:4C:89:15:CB:25:11:30:A4:35:FA:E7:EA:04:CD:2E:98:DA:56:CE:A0:2B:34:46:34:A6:E1:4D:D7:C8:DF:7E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=1da0c8b5f8e19d71d889c5142aa6acbd\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.reportaml.app/\r\nOrigin: https://www.reportaml.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 11:10:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=43200, s-maxage=21600\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9841d602dd8e56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1048,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"48bfa267c7771f5038eb85c2d38ec685","sha1":"858810efa121d81b6469d321fb9a9db882f9c36f","sha256":"7fa0b90fd6b256aaa9c300c823eb76baf81c25891e293ba75c8c093c9c83c215","sha512":"669351f7805121e767b16da5a6e48cc792b22a722142b7898abd8b8aff4d332ec6fa973d0f676dfef34e760b2040577cb1c1739f644d190eb5ed1f95518d4255","ssdeep":"","tlshash":"f511efa747448d9e3f309bc8a46c3a4c996e661786c499cbf4c0ce3848bea7d32355e5","first_seen":"2025-09-09T18:25:20.505927Z","last_seen":"2025-09-24T11:11:04.728453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":66,"dns":4,"connect":1,"send":0,"wait":73,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/index-34117644.js","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:33.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/index-34117644.js HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/assets/index-cbd18f8c.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 198\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-34117644.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Sep 2025 11:10:33 GMT\r\netag: \"7dc6af5e3adce986352285941f303c88\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wjhs9-1758712233156-2238388ebb20\r\ncontent-length: 46820\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146509,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16604)","md5":"6267d0ef282965c6c283dce02d6216f4","sha1":"dd69a6f73395fc215f30d9c0b41dc3bddf82020f","sha256":"e6979cc560ad385ee40cdf382b8ff02e2abd796a8dc57177121f4cb991ad61fe","sha512":"34c53a05006f03e55c0b0acafd8fbb51c1f3fe7dd076fe2f5ef76cb8b6b601463378e6b2b225985ad5180a3ae34657f269530388a074f93b57ef6506a82e6c43","ssdeep":"3072:UQtiCsd1LXonztdT5s7y6TpwaIFmwjwcOdjbgig9Lm7PDw:UQMCsST58y6TpwhFrjr9K7P8","tlshash":"55e37de473b4b17e728342ad853b0599f2387404b829c06cf6ec96db54d2e96c5b6b3c","first_seen":"2025-09-24T11:11:04.73167Z","last_seen":"2025-09-24T11:11:04.73167Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=1da0c8b5f8e19d71d889c5142aa6acbd\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.18.27.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:33.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 01:50:57 GMT","end":"Mon, 10 Nov 2025 02:50:39 GMT"},"fingerprint":{"sha1":"9C:07:3C:56:F1:28:FC:97:55:04:8A:8D:92:C4:89:62:B9:DC:3C:17","sha256":"DD:4C:89:15:CB:25:11:30:A4:35:FA:E7:EA:04:CD:2E:98:DA:56:CE:A0:2B:34:46:34:A6:E1:4D:D7:C8:DF:7E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=1da0c8b5f8e19d71d889c5142aa6acbd\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.reportaml.app/\r\nOrigin: https://www.reportaml.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 11:10:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=43200, s-maxage=21600\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9841d602cd8456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1048,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"48bfa267c7771f5038eb85c2d38ec685","sha1":"858810efa121d81b6469d321fb9a9db882f9c36f","sha256":"7fa0b90fd6b256aaa9c300c823eb76baf81c25891e293ba75c8c093c9c83c215","sha512":"669351f7805121e767b16da5a6e48cc792b22a722142b7898abd8b8aff4d332ec6fa973d0f676dfef34e760b2040577cb1c1739f644d190eb5ed1f95518d4255","ssdeep":"","tlshash":"f511efa747448d9e3f309bc8a46c3a4c996e661786c499cbf4c0ce3848bea7d32355e5","first_seen":"2025-09-09T18:25:20.505927Z","last_seen":"2025-09-24T11:11:04.728453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":55,"dns":4,"connect":3,"send":0,"wait":83,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=1da0c8b5f8e19d71d889c5142aa6acbd\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.18.27.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:33.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 01:50:57 GMT","end":"Mon, 10 Nov 2025 02:50:39 GMT"},"fingerprint":{"sha1":"9C:07:3C:56:F1:28:FC:97:55:04:8A:8D:92:C4:89:62:B9:DC:3C:17","sha256":"DD:4C:89:15:CB:25:11:30:A4:35:FA:E7:EA:04:CD:2E:98:DA:56:CE:A0:2B:34:46:34:A6:E1:4D:D7:C8:DF:7E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=1da0c8b5f8e19d71d889c5142aa6acbd\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.reportaml.app/\r\nOrigin: https://www.reportaml.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 11:10:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=43200, s-maxage=21600\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9841d602cd8656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1048,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"48bfa267c7771f5038eb85c2d38ec685","sha1":"858810efa121d81b6469d321fb9a9db882f9c36f","sha256":"7fa0b90fd6b256aaa9c300c823eb76baf81c25891e293ba75c8c093c9c83c215","sha512":"669351f7805121e767b16da5a6e48cc792b22a722142b7898abd8b8aff4d332ec6fa973d0f676dfef34e760b2040577cb1c1739f644d190eb5ed1f95518d4255","ssdeep":"","tlshash":"f511efa747448d9e3f309bc8a46c3a4c996e661786c499cbf4c0ce3848bea7d32355e5","first_seen":"2025-09-09T18:25:20.505927Z","last_seen":"2025-09-24T11:11:04.728453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":57,"dns":3,"connect":3,"send":0,"wait":84,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reportaml.app/assets/binance-white.aed1452d-4873562a.svg","fqdn":"www.reportaml.app","domain":"reportaml.app","tld":"app"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.reportaml.app/","date":"2025-09-24T11:10:32.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reportaml.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 12:27:18 GMT","end":"Tue, 16 Dec 2025 12:27:17 GMT"},"fingerprint":{"sha1":"3A:58:EB:F7:BE:B8:03:EB:B8:55:8D:19:24:EF:4B:F7:B6:CA:EF:97","sha256":"B2:06:95:46:0F:48:74:14:09:4D:56:0F:71:5E:93:CD:FB:62:4F:21:74:FC:CA:80:F9:85:D1:A9:C1:80:8B:60"}}},"request":{"raw":"GET /assets/binance-white.aed1452d-4873562a.svg HTTP/1.1\r\nHost: www.reportaml.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.reportaml.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 199\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"binance-white.aed1452d-4873562a.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 24 Sep 2025 11:10:32 GMT\r\netag: \"4c476922d1280fbf708b441a94631de0\"\r\nlast-modified: Wed, 24 Sep 2025 11:07:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wjhs9-1758712232685-30e616807e69\r\ncontent-length: 1843\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c476922d1280fbf708b441a94631de0","sha1":"c07b648faaf8fd519f06e28684f75066537a40b0","sha256":"4873562ac2ffd2ddfc86ed3daa0674640414fcc1393aac0637abe443c66a7a0a","sha512":"a7d8e7ee55d2988241f1fa7e8801a8b50e3b8d0bbb75eea3519b05cd35d8054f205720d680b5e4bf27acb39ed135b2d59f66b516bc365c84ed1758f98ffa7b9e","ssdeep":"96:d+hJ940X5BHxFsfY4LcIddQ5IP+xGsft660wd2:dWfX5lLswUk6P+Us0wd2","tlshash":"a291a5da63dca1a0c447e7756707107bbe2b6cf9be2ac790465a5c9ebe1009e4c9dcc0","first_seen":"2025-06-28T19:36:09.204961Z","last_seen":"2026-06-28T23:19:24.28552Z","times_seen":131,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.reportaml.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}