{"report_id":"7dc649d2-7628-43c3-8cd0-1f14b419325a","version":6,"status":"done","tags":[],"date":"2026-04-15T06:04:01Z","url":{"schema":"https","addr":"amlscan.ink/","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"172.67.154.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amlscan.ink/","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"title":"АМL Сheck","dom":{"size":199289,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4945)","md5":"41ac8fbc26d3bb55947dca2e4c745539","sha1":"13682b42fd3323158535b8787627eb504e3ee445","sha256":"dedcf087ebcfa86634af35f36fccfd7158d958ae7b8e31293559aa387e225eae","sha512":"2ae02a6a50bb4837187842b81c5d2318b44b9bac0709fb6b3d8cf3e0a2a922fec4ae8358104d64f877805019fa39fd0e926448d7d1ece34378d96418bf95dd73","ssdeep":"3072:vJuFl1BIZk/ujf1pqZkRuDl1BIZkKpB9ZF/FLpB9HHZg:vwXIGGfqG4dIGK7vdy","tlshash":"bb148d75a6f029a3009343d1b625555bbe84a01bde474a60b2ec0fd9dfa3ce5cc7f898","dom_hash":"domhashbc06215218dbe81af6fab8d56a5e88b3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amlscan.ink/","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"172.67.154.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T06:04:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":2,"received_data":63202,"sent_data":1094,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":4594,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.topcloaking.biz","ip":{"addr":"104.21.81.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-02-11T09:37:57.368648Z","last_seen":"2026-04-13T07:55:37.798579Z","alert_count":0,"request_count":2,"received_data":1842,"sent_data":1086,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"amlscan.ink","ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":31,"request_count":31,"received_data":2177073,"sent_data":13903,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amlscan.ink/","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a9e550c2e69a7c8d9800245a5aa509e","sha1":"476b596e14be721ed6a1b6ed536dce45cbe50f1e","sha256":"a8548d6aa10a7f02529eb03d922e1a494aff174a24f88ceef23eccf05b0c3037","sha512":"8b1de11e2c30a43aba14fb2b3e20ba1fca0356e8e6b9a643877bb0d4b794799bfa0cc969ff6ae1bce7de8dfbf3033e554c724b866c79cb6f0f21ff4b0aae1a78","ssdeep":"","tlshash":"89714def79a0126055530126a027ab147a3364b52c17fc42f25c81803fb5faf97bbee8","size":3614,"data":"","first_seen":"2026-04-15T06:04:07.630212Z","last_seen":"2026-04-15T06:04:07.630212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-21T20:09:26.458647Z","times_seen":309754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/js/bot-protection.js","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21e71db527a05f7c3778590d2cd75b6e","sha1":"b2c3a0392b939ab09ff97ff26f413521e70c2a69","sha256":"7630569f77dc8d304dc8318ffcb769a40176614d9869cb827f05fede1e971a69","sha512":"1c7b7b150ac2c092fbf675bac0143df33e1a4b49e39a23ca763c9ff576eea706288b9daae1bf1de17957af66e02c57a34cb5bda9d82fb55f3b4bbb630896007c","ssdeep":"768:08T3rd10WM3jlWbNEoQlbzrc6YlCnM6H98VTOWmlG:0K7TfMJgIbEC0mM","tlshash":"df23622405fa14550102b02bcf0a7a093a7350bf3e6adb65396d0faa7fd2135cb69bdd","size":47892,"data":"","first_seen":"2026-04-15T06:04:07.631281Z","last_seen":"2026-04-15T06:15:28.882035Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"eba15489cba3e143290badbef1aeef7d","sha1":"33a8fdbb18af97efb32b85d68d0e96de870554e2","sha256":"ae9432f0cf54f6e88ecef64323626a8cd37c5977330b959e21afcaccf7243f83","sha512":"62873badef30b09fa2a39a52930c7e1b3f3ec8d0fd00af39ee8f191f2ee72d307bfcd4b2d2b32b2f9beb01a878226385c70d87b55e0763f4d49269977641e2b4","ssdeep":"3072:gauFl1BIZk/ujf1pqZkRuDl1BIZkKNB9JN/FLNB9r6QC:glXIGGfqG4dIGKnXdi","tlshash":"45149e71a6f029f3009343d1b625555bbe80a11bda474a60b2ec0fd9dfa3de5cc6f898","size":198788,"data":"","first_seen":"2026-04-15T06:04:07.632434Z","last_seen":"2026-04-15T06:04:07.632434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"api.topcloaking.biz/v1/check","fqdn":"api.topcloaking.biz","domain":"topcloaking.biz","tld":"biz"},"ip":{"addr":"104.21.81.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:39.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcloaking.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 23:27:57 GMT","end":"Fri, 03 Jul 2026 00:24:13 GMT"},"fingerprint":{"sha1":"19:7A:54:12:AF:6D:8B:6A:63:E5:34:D8:9C:6D:E2:7B:BA:D5:98:FC","sha256":"80:D8:DA:91:92:F2:E9:CA:56:CF:13:3C:2F:B0:B4:12:E4:13:EB:36:B2:96:A5:BA:58:E1:B1:67:5D:97:09:27"}}},"request":{"raw":"OPTIONS /v1/check HTTP/1.1\r\nHost: api.topcloaking.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-api-key\r\nReferer: https://amlscan.ink/\r\nOrigin: https://amlscan.ink\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 15 Apr 2026 06:03:39 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://amlscan.ink\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-api-key\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3jHTYS0slYYWgueyKQHt%2BmZ8fFslHxMZo%2F65DArC9hYBZfEjwhR0h%2FJuIg7nOeYBlGf2yzbq7Qr01dN8cq%2Byvm5D5Nrt6fV4kb6oKY4vWNd1x0jmwewIwZYNO9dGQPPLtty2%2Fc%2F\"}]}\r\ncf-ray: 9ec8bf958d4a568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T20:09:21.564057Z","times_seen":14029849,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":47,"dns":18,"connect":4,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/favicon.ico","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:39.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:39 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPUmcuvm6lPUOfJe5ywWpsyyZohegmW%2F2f19WMnNUiE2eT9adI7S2AfW%2FhlQ9cdDhz6r9tTBD3tuP0VaAb%2FlgN2wdrz4lZJ2OFjJrXUPbyShSQQMiR3o63o9JYOIRw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"a76e-649893a8c1113\"\r\ncf-ray: 9ec8bf95e86656c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42862,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 103x100, 32 bits/pixel","md5":"854845c9dc489b715a93d6718e1d65a8","sha1":"8126b243953b16480417412e11633c05ceec3208","sha256":"85573e3bf8fdc1b4a255135b2b61dc422992ae07f2c0ce53d4fd79a7c98d1152","sha512":"d5c421e91f3c869839c8d2207a63f6d506f287a1e7670da2c06079ed425533db8ebc559cbec2844f9614189c5a64055f3f4aec1bc02f9f3d62c6f21dc7813fc6","ssdeep":"192:nVNPtBme7yyGkbVlDRGxeODlmRqqQL3JSpE1t3O2KP2iO8rNZMvTZUwoHVV9AJpR:VEyLpqHN/BZvTZxoHVV9AJpQn0owt7l","tlshash":"c21312a0a462e395f0db353945a3d5f8645bfe9873820812e53c73f91933a835eb374a","first_seen":"2025-06-20T20:01:15.025332Z","last_seen":"2026-04-18T19:34:11.419536Z","times_seen":219,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/home-image-gzJaQJ7U.png","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/home-image-gzJaQJ7U.png HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 146551\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-23c77\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eOK865CoYMBpUeCXX7AhzmvaX33GmrDBrMfxVbfvTNSv%2BHCm1YZC7AQiN89Y22J30on5V2aqkux5B0fw9FJSdfFo5B6HxHj2psG5Vx44B5xA27I9ZLO4komsJ%2B7ArA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99688856c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1512 x 2130, 8-bit/color RGBA, non-interlaced","md5":"9cad99dbdf29233a3e18fae89cbcdd56","sha1":"05d9639f849359af23082e722dd8bae99bfdf560","sha256":"b005f5a6875b15ca7957b90dbae8cf52e6ff1645b327d4b7ef90892401ffcff5","sha512":"9ab249cc09967d21d5a3cf2b75250c3bcc0305d5c0c693d9c7b55e62dcd0de734950c55f5ec6dcb3b5d091ff6d193892b5b27de3cb6a06065df1f7df84223665","ssdeep":"3072:GaDBLdkD1Y5RW69+1cVOA0gi52BytVMTSqXQfjo/n7:lDBLqqW6NV1+52BytVMuaqc","tlshash":"6fe3e058250b5d6ac84d86358beb4fb5f76c8ad94598fe1b0bb40276bcf7319cc83881","first_seen":"2025-04-08T20:33:55.226246Z","last_seen":"2026-04-18T19:34:11.487231Z","times_seen":448,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/%D0%B0mlsafe-Dapxivrv.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/%D0%B0mlsafe-Dapxivrv.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nb07GP%2BDe5D0b51MeCZSTY5OsRu42AzBFX9ZWHTfBY3VIBNXl1m8GIseiFmnlJ6VM1vOXIwZlm9JXxhDsI4CRjsJg7ctnUYezGLp%2F%2Brc3rA%2B06kLICYS4ze6XwwXJQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99b89a56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-04-21T20:05:53.793342Z","times_seen":94720,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/favicon.ico","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:41.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:41 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnFgRSSwhV9po7DmBuze0JXZDtEAA6vuKCBtA%2FFSzxHtsQwCEd9XgVAhtGwIc6yY%2Fhg%2FgkmEBMbP%2BmFz6fGXi3vRurtNtm4VeyCz%2BWA68R2toSh6Pc%2FtUF9vWHQquw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"a76e-649893a8c1113\"\r\ncf-ray: 9ec8bf9dc8b356c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42862,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 103x100, 32 bits/pixel","md5":"854845c9dc489b715a93d6718e1d65a8","sha1":"8126b243953b16480417412e11633c05ceec3208","sha256":"85573e3bf8fdc1b4a255135b2b61dc422992ae07f2c0ce53d4fd79a7c98d1152","sha512":"d5c421e91f3c869839c8d2207a63f6d506f287a1e7670da2c06079ed425533db8ebc559cbec2844f9614189c5a64055f3f4aec1bc02f9f3d62c6f21dc7813fc6","ssdeep":"192:nVNPtBme7yyGkbVlDRGxeODlmRqqQL3JSpE1t3O2KP2iO8rNZMvTZUwoHVV9AJpR:VEyLpqHN/BZvTZxoHVV9AJpQn0owt7l","tlshash":"c21312a0a462e395f0db353945a3d5f8645bfe9873820812e53c73f91933a835eb374a","first_seen":"2025-06-20T20:01:15.025332Z","last_seen":"2026-04-18T19:34:11.419536Z","times_seen":219,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.topcloaking.biz/v1/check","fqdn":"api.topcloaking.biz","domain":"topcloaking.biz","tld":"biz"},"ip":{"addr":"104.21.81.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:39.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcloaking.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 23:27:57 GMT","end":"Fri, 03 Jul 2026 00:24:13 GMT"},"fingerprint":{"sha1":"19:7A:54:12:AF:6D:8B:6A:63:E5:34:D8:9C:6D:E2:7B:BA:D5:98:FC","sha256":"80:D8:DA:91:92:F2:E9:CA:56:CF:13:3C:2F:B0:B4:12:E4:13:EB:36:B2:96:A5:BA:58:E1:B1:67:5D:97:09:27"}}},"request":{"raw":"POST /v1/check HTTP/1.1\r\nHost: api.topcloaking.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlscan.ink/\r\nContent-Type: application/json\r\nX-API-Key: e38f0e18a8f0454099b6ffc832aa49c1889c7931e8d5ae37\r\nContent-Length: 768\r\nOrigin: https://amlscan.ink\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":768,"data":"{\"stream_id\":\"beb68e57-9477-4e15-910a-08c3487b5887\",\"cid\":\"78cec4603249e2d1c1acdf9af432b5fc\",\"fingerprint\":{\"navigator\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"platform\":\"Win32\",\"language\":\"en-US\",\"languages\":[\"en-US\",\"en\"],\"hardwareConcurrency\":48,\"maxTouchPoints\":0,\"webdriver\":false,\"pluginsLength\":5,\"mimeTypesLength\":2},\"screen\":{\"width\":1280,\"height\":1024,\"colorDepth\":24,\"pixelRatio\":1,\"availWidth\":1280,\"availHeight\":1024},\"timezoneOffset\":0,\"document\":{\"clientWidth\":1280,\"clientHeight\":1024},\"automationMarkers\":false},\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referrer\":\"\",\"accept_language\":\"en-US,en\",\"host\":\"amlscan.ink\",\"path\":\"/\",\"query\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://amlscan.ink\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 600\r\nx-ratelimit-remaining: 585\r\nx-ratelimit-reset: 1776233047\r\nratelimit-policy: 600;w=60\r\nratelimit-limit: 600\r\nratelimit-remaining: 585\r\nratelimit-reset: 27\r\netag: W/\"6f-oUVVCPSgWoFO+Mcztir9TbQ5Apc\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BLlRwSvXgK%2FsFEhtN%2Baf0%2F4CKDMO2gO%2FG92Wwn6E2%2Fjy8ZYoKdnALKLgeCWsCwEZ%2Bz6wdshHa%2FciUgz%2B3B4rTcJWhIqjBevIAFzKKwuQ0AdLUBfdTXt0Y0JWDbhIAq%2FaxfuJjqr\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ec8bf962dde568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2e8eb570d2e4e996e16c5a79e85296f5","sha1":"a1455508f4a05a814ef8c733b62afd4db4390297","sha256":"6aa74e32db020a91ef9b4039249119caf3b12cc58e595f4eab79e54be71503a9","sha512":"a99752303b0f75a571586caaf5cf633cc2f83a054c4d823b3669a422148e1c97c9c0f9e4cd79a93201eabc50b9f1454b58dfcb5934ab0b1a0e48c53b863daf55","ssdeep":"","tlshash":"c4b0120018472c348a421fc440036f39257a0172518d9db659315dacef361ab2f41482","first_seen":"2026-04-15T06:04:07.608981Z","last_seen":"2026-04-15T06:04:07.608981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/ind.html","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /ind.html HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlscan.ink/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UzBX%2BcIHEOJ8tmRFzfyQzzVOoyebXSzMxD4fNx2uCTdIngGbwfSOc%2BakdUFwsu3Q3oyW%2FUadZfY8vINxID%2FtHpqj1WnspyaXhLFQMmSSWt%2FUHLczQO%2FJF1tu9HHnPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9ec8bf97586d56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":199189,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4945)","md5":"ed3f5fc211cef6fa7173314221be8195","sha1":"e47f4f188ed5d7e0256605cbe90b9fefc67350b8","sha256":"41338366bd35b23f3b50ca9fef802df44d406905dd7350a20c4a82ac7dda6afa","sha512":"cd962edde59ba630afe3f8aecc5f86c5f6c390d9cee146f0a0a47724a7996d0e3cf6315cdba2976f99a6f737520c9eb4f7ed6222e14d22980332027b620c12d6","ssdeep":"3072:OJuFl1BIZk/ujf1pqZkRuDl1BIZkKpB9ZF/FLpB9HHZO:OwXIGGfqG4dIGK7vdo","tlshash":"5c148d75a6f029a3009343d1b615556bbe84a01bde474a60b2ec0fd9dfa3ce5cc7f898","first_seen":"2026-04-15T06:04:07.610144Z","last_seen":"2026-04-15T06:04:07.610144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/uniochange-B8zbqJSY.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/uniochange-B8zbqJSY.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4226\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-1082\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zWjLcbpm9S%2FVHSdTHxe0%2FvlZ%2FTqzjcwnMQyG99dVgCVvApnsSa%2FvDi9VQnbMZXjDDYdkgwqoVImBGQSeMLDyMEQFyZvEDHyJ3ZK3Lf3%2FYsvloiKpzKdwjroe3EJ2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99b89b56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c1d8ecc4eb00c7b2fc07c6e6bf80d62","sha1":"9f4768ee54c89fc835ab8ebb553f27d1687d6c09","sha256":"239a8beaafa035e38e4e3a96bd524269676557d5f2fa5c2b64e086a283e82308","sha512":"a4a3a752dbf6a1d97c0e711bf100988e80fa47bfc6288ccf523bf97b0527d4373267f4306cf0d04cf6cd10d430b609bd9e82153e28b244297108ffbc3761eb0a","ssdeep":"96:vytkHXw/Xbumhm5aioWQPDN7a4Ic44MUut0mXZ5FsmOA:mkA/w53JQPDVa4T44MUutBXZ5Fso","tlshash":"f8917f549f8835318c170d4928372225a0e4968edc380ddfee531c21676dcb1b9b1f3c","first_seen":"2025-04-08T20:33:55.219007Z","last_seen":"2026-04-18T19:34:11.48538Z","times_seen":373,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/44-DcUgPKtf.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/44-DcUgPKtf.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10916\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-2aa4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VL%2Bh9LFm7VCvq5ks42I%2F%2FsTmTyfNOSK%2BjJxpQRObQUGEBN5ZJREhF3JVOX7wdBdfrflB%2FkkLi7L7CUX8GIiMLzgP%2FufKS65LlgvSK1AzCORPBxqAmb0gPjC5obNmrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99c89f56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8dc93cca387bf2c17d1f47b79205b00","sha1":"afd9f668392c676754652edef35bc84af4624532","sha256":"064243afc32b9aba427090bffe6c1fb20a9a3068368147cec2566007d5dbf709","sha512":"a4364e4e888bfa68c1ed6e279753e8947616ce68c933bf16857e59d509551fe7a2b0d94966c34f10c7c74bb61bd721223db97416011e573e2c0ca22fc8ca50b8","ssdeep":"192:HCtlaTub/yIuJoKRhKGzNnL3DrY2kVBOr60PuO/mpIs3mW26mbBNzY:iuCb/moK+Un/rrkjx0B+pIsH26mdN8","tlshash":"5232c0e1be3a71a09a0439aeb36c5194c535600fc27a7df77a59047ca8c35f031817d6","first_seen":"2025-04-08T20:33:55.238728Z","last_seen":"2026-04-18T19:34:11.447282Z","times_seen":410,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlscan.ink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 02:59:07 GMT\r\nexpires: Fri, 09 Apr 2027 02:59:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 529474\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-04-21T20:22:00.174033Z","times_seen":6261,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":185,"dns":1,"connect":29,"send":0,"wait":29,"receive":9,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/js/bot-protection.js","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/js/bot-protection.js HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltLpdEQkXWiScRazZFnIwAg6DAIJPgkLy730dSVsRv4iU4%2F03r6mTDmfx4gleePMdeiG4Hc8gETnpmW7DDdBeIJeUienY540uvDeHCgS8mBknxXMfnvYorObakTtgQ%3D%3D\"}]}\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697b88b1-bcdc\"\r\ncf-ray: 9ec8bf99488656c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48348,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with LF, NEL line terminators","md5":"ca66f51096a5d6e65baac8aa67f2de8a","sha1":"033b5d931fa4f4becc3f7e39e76e838d3bc48f82","sha256":"65016f3fbf81efad93ae955186b04f06be158c9b2df963abf4b0dc7e705e32ee","sha512":"b755d683d3f0d6ff32093139da56fc3ffb0f37a53c9f03bbb2bd6d11f448f9d055b004c4cf9b97d1db44a05ccf9cc8180fbf7938cba8231752bfcef6e458fca0","ssdeep":"384:08T3rRv10WM3jlWizsyO8yy5YcuG1QOJs4kMGiWDNbiWjz+iWSO3mmX+RqEl:08T3rd10WM3jlW05Yc7Oc6uGN3OWmlG","tlshash":"e2432f1c11ba2095123f2427fb1a37c02d32d5eba68dd96b391c837cafc97e586607d9","first_seen":"2026-04-15T06:04:07.613855Z","last_seen":"2026-04-15T06:04:07.613855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/team5-Z1xAavYy.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/team5-Z1xAavYy.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5402\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-151a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FTUgTvq%2FGmy%2ByXUIP1E9UVWZB4O3KIFgNadrZqDAwDK0w4xyNBVm5yj9lYyPIIAOQNjtMVsMuDalAUEyaFsMxu8bBitEIGkbCXGSw1IeI6PpvXmfj2fR%2BhqdsllBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99889156c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b861f2296e3769da970e6af87cff205","sha1":"23e4cfc4f857247ae9955dff2503c3d6231febb1","sha256":"05201c411495b15a1807b3e649ca8fbbfbfee22e149b1ad0c42f9e3768e81230","sha512":"e9dc80a9198a8ee38b1a9407ff0d74258851a61f9461c97a83f5f9f34642ea5466a510610e6371e5d9f77333257749505396468ee9f8a2cf40241fc97dbc3b91","ssdeep":"96:ZRNCyHuEJ8uPWkvCwcBsYUKtZ88YPn+AkI+TwG0UVJg:fNBHui8uPWs2WYUEZ8jPxkTVJg","tlshash":"f1b1aed50af4c71c980316884b4c294beb7a6f5c9d20fd755c52eebb939bcc0661260e","first_seen":"2025-04-08T20:33:55.227028Z","last_seen":"2026-04-18T19:34:11.481024Z","times_seen":416,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/team7-CmlWnAqS.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/team7-CmlWnAqS.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9688\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-25d8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKyYmnPjGMDnbbIvNVSksz1%2BUR9jrvm4TUofG%2B98qPMtolO%2BF4r64uClWAerkbVl24PCH%2FV5okQCU6r%2FDBSeAP3YRZmbavtGF4THWlLRrS7jEd9t3ICMhjANhf0j0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99989456c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"21990ddbef30acafada5ba840885cd4e","sha1":"25696e08962a0758185198ede1429c789ab3516d","sha256":"241f8c2374eedda4b5bcdc553f91e383fb54cf2d99e8e9e3ca95fb935964c262","sha512":"a118c8c34208bb2c182be1c5b26551a1d6144172f32f40d929c148d2a972a942f85a73571381d6c5671c93718b3571fc3d446749dfdc4ce8c27292c432e68998","ssdeep":"192:i10Tks2INi0TU+xhRRqeksiFAoOqA1vrM4x6qlqRV7r5X6:imRgchR7ksfjqA1vrMOARFrs","tlshash":"3d12b018d340648eef0ae7445261726681d55b7abf7b5c701a3c8bda308f8b61906e45","first_seen":"2025-04-08T20:33:55.241357Z","last_seen":"2026-04-18T19:34:11.432158Z","times_seen":416,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 15 Apr 2026 06:51:40 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyBuAFTIWnRClLbyoboa7DbKRfdDG%2BNbNb%2BCKJMEsJQ5ysImS2bOQGyDRXxMSaZXe2WGV5xjw%2FbLzB9Ok3KqfJZ5quNSMTh1x%2B9vj7TwUInKRu8urM%2FaljbPm7m8pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncf-ray: 9ec8bf99c8a056c4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-21T20:09:26.458647Z","times_seen":309754,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/team8-Ba7qheCQ.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/team8-Ba7qheCQ.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19804\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-4d5c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKAk9TLX0CkhppMF5q2AK7%2B39x3tLH7%2B3DinoFcNne6bPo%2FDo1M%2B7aC%2FJAZgh%2BCXbnxvUeIFx%2BgDNxFuU1%2Fan%2B9Ywh8s81v%2BQYv4MfiuBx0PRwtE6Q5wP6TJObAn1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99989556c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd8f7be198d97dbaaa2d1a3b5645191b","sha1":"8ca51f777ba30dbb1f57c755abe0cd17c9ba3ccc","sha256":"3d886348daceeeb72cbb1f157440d88e3cd8e273199f0be11ab8fb489a8d6b60","sha512":"618952eff83f028c6d211dffe0525d2f6c2b957552e33010698dd8119163ccc349d5389c2cd78e0ea58f80ce7e710cbc9417df9d48c33091bd6db2ee3651c910","ssdeep":"384:jnpCiYZLoKv/PpXu2HTr6bhIBuwbIkC5SxpHgoIHEC4Eij4dvvngZp+T:jnBYSa/HHTrqqUwG5cHaLi0d0E","tlshash":"a592d1066158b1a2e7bfe4029bad2daf1d20c2cdb86806534d9cf141d617db27b3f56c","first_seen":"2025-04-08T20:33:55.235982Z","last_seen":"2026-04-18T19:34:11.481945Z","times_seen":416,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/oneobmen-CyrSxzF4.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/oneobmen-CyrSxzF4.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4282\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-10ba\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9kLt7sNG3z1S7hCmTlk9TOucEMnpStjJEIZg4CS1L%2Beri2%2F6KBWVK8PEvjGL8f64BYoJot%2FRWSWP1cuPY3ZPejUIyREZga3Lb0QMHjbLwt2MX%2Bgk2IGysQU1RYFhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99989756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1bc53ee5929fc3195e5adf1d86c72a33","sha1":"a72412370f4ff21cbb9d758dd6d68731356c9276","sha256":"a6264cb3a7fabd924bcd62bee017831472ecd32fc7624700d3df895a0968af7c","sha512":"acda9b9f3a95005731d72c16ff515c0121114d43612838fcc8f34c731741171c37dc2cc4abe9b461a8eed3984249c38c8457c819f9795064eea99e75b0a1b80e","ssdeep":"96:X2mKVaGphCpFLE38bTHNstUDueEtDhT8zCJK6OS+CRC0MwhwH1nf4i7:vgTpuicTtGUDVE3T8zsHCDwhw","tlshash":"d2918fda6a84d4b4d905a77f4af27f40db8423064781075e2157a906fdbc8c854965f3","first_seen":"2025-04-08T20:33:55.235244Z","last_seen":"2026-04-18T19:34:11.482794Z","times_seen":373,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/team2-CTL725D4.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/team2-CTL725D4.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5812\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-16b4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aok2dTnAxCt7IECR7m%2FampXGqvdTzSRaZfpAHSBJBc4eeUfRpCZJXDt%2FNt4qZaSCJr5PxiDl5PbgiLuem3WJxn8z3ml9yymkvXoj0UJ1q8EzKY8EwL1ZbgMq%2B5KlKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99788d56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7ddbbf9cab745b9433bea6b2edc96096","sha1":"5d6c1060beabd56827c5441fea4d7cabdd59b70b","sha256":"3a3f8a7f6ccee1feb368a7a7c8d357a29156e35181772292242b6de2a053cf01","sha512":"7635535a1db3b572135119ca99e4beb6517af783ab9df43ee97535273c534e247610d7b7cfd123886fe73c8941deb68e4959daf394c91ffc8c85921f9af92729","ssdeep":"96:8WoZZT+fYdS4oDKOhMRDvHm4s6XepK3f/j+u63ygikCq6d+Lv1A+k2uos:8njOYdFoO7D/mv6RD+7jikCBQL9u3","tlshash":"efc1afd46f92c0bb00d1f848aabd189626bd77e1ee12112625c9690038d13a4625feef","first_seen":"2025-04-08T20:33:55.24233Z","last_seen":"2026-04-18T19:34:11.48011Z","times_seen":416,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/team4-B3PbVeRF.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/team4-B3PbVeRF.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4960\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-1360\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8gKHUINqPodQv8ASfJBp7CZC8fBvDrrf%2BO69%2FOqj%2BG7erTAIjvufcTcWS4wcBKQU9HcGPKVkSpaAkcPFcnkCQPslsVq7GqNjK%2FnApSdTBo6OzAmDiyey8jkgFS4vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99789056c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4960,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"667a7a156924eb8cf1ea2cc310fa84be","sha1":"a0c41d24550cb1375e1e7184e562cdd1fc19bdaf","sha256":"687e6062d6b65a7669c1badbbf7a4f374eb95572ab40efefcabee1208b96f679","sha512":"c7f8d10bc7c4d14fc2a2444150999baf64f7ae98728ddcc09bbc6147d8452bfdf08f3e17780641303299482bc7ab237d9df36f332446d674632771ff81d2b99e","ssdeep":"96:MZETuQouq6zgoF7sOUTf/l6RdFDcPAnD+zFc5msuDmMIui/Jyx9woc0BhNC3:3TuQo67sO4/ATFDoAD+zW5mVTIRhnocb","tlshash":"e6a18d621f66e1a1eb564f3b2431ca4a218337c487c490a8b3a99c9561d597cabe3b12","first_seen":"2025-04-08T20:33:55.212733Z","last_seen":"2026-04-18T19:34:11.489953Z","times_seen":496,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/11-CEJH9EXk.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/11-CEJH9EXk.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19946\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-4dea\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5h2UvJd3klPaWxPi%2Fz7s21HgUnEgj8wTkhkL1%2BP7%2BqNrfD3xtXurMcYwuq9N6Li84xOd8mhrI0uM1oOD9wlkGnajLW%2BCATzfKBIGc27r758eb32sT7v9ZmE5BZXgvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99b89c56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d848cc6082d065edec132c04bcc72a1e","sha1":"ee347487fc051c45082e8053d05d06aa37a0dccb","sha256":"ece6e8ca616a5c0416427834c086199980328f18e36c53707dd559cd49f0536f","sha512":"b67c5bd932034b717261d74d10d67fd5d1ab0ca507dd0dcdeb2f1679bc8628d83762af7fbac359fb2148981804a907bc7a138f69d1ceba3ca93f34ebd720668e","ssdeep":"384:qJTRUuDcWFQBZnHM/C0R7YDW1w2gMTFT1eDQTS0VamG7MurCubw/g8qf2Ggt:qX+WFQfs/C27O32gevTS0VamcCRg8qf+","tlshash":"1792e0087400489a87ff0ddaa85f9771534e5edd7c7e00693bf8aa8c93e4a958215f4d","first_seen":"2025-04-08T20:33:55.233493Z","last_seen":"2026-04-18T19:34:11.427447Z","times_seen":410,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/img/cost.png","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /img/cost.png HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/source/css/Land-Btat2g4s.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qu4S8iocW9dBlbuanfeGY557PctJsQYTCvp1NhjI7hwxGU2rX2yaNYj9r5XiwIrNdIIBHBKNqBvh2N7ul4oVRRJnMpVVQCwl3S%2FTQkUBgzQvqFbLvewzq8Q3%2FITs%2BQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf9c48a756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-04-21T20:05:53.793342Z","times_seen":94720,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T06:03:38.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 06:03:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.2.24\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5FcwVjF0TvqazIC5h%2FDpC4NnUmSZLfeO0jxZ42sgElst3Ms7U4y3V8h40UcxS3y%2BpyDHNtdrJdLimkERD3vquAFTE6mif10oc2C50d8TP8J6RhrD%2BSCa55F4s0k4g%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ec8bf90dc3fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3727,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2635bfa2b620320227c6a72ad038b772","sha1":"4c66ae233670c9814f88e26a827c7c9cb9d4a3e4","sha256":"dae6461ac61a6a7664601805f937767f83ed36156e7dc790859acd1688c72665","sha512":"850f46af46ff12449dfce5c18242e0ebed639811da119a9f967208e08cff8631b62004fb7ed9a68637f54f0e16b3eb17fda7d0d686de1adffbca331e5fddda51","ssdeep":"","tlshash":"8d714eef39a0112055531126a417ab14363760b52c57fc01f29c80803fb4baf97bbee8","first_seen":"2026-04-15T06:04:07.619929Z","last_seen":"2026-04-15T06:04:07.619929Z","times_seen":1,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":37,"dns":22,"connect":4,"send":0,"wait":528,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Apr 2026 06:03:40 GMT\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3908,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"935871d1a732f1e46db8fac63abf0dcd","sha1":"1c67935ab647d6cb5bfa911856397443ab4a64ed","sha256":"b8eec3c6430ec7af2ae527219f944b1f3fde1695eb73efc2a56b3cabb23e2481","sha512":"2a9cb9036467308726cc6b979cab5e2c7159ec088436136f4aefc70cf43b6e90c7ebd277697beca525b052f2a8f8dc5909d9b9e5e4b09afc930e290a7195a571","ssdeep":"","tlshash":"2481c0910517a504da471cc523cf7e26de0e66767494d5797ffe2ca8bdeac220324b2c","first_seen":"2025-09-05T02:18:57.460387Z","last_seen":"2026-04-21T20:14:22.40471Z","times_seen":51482,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":131,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/1-B8hMQnFc.svg","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/1-B8hMQnFc.svg HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jq1nCJMTmLLFY9cXB8Z8ykJcpYFEVmIzlXsQi7186yGvGVqcGqMdTCIjj3ncQ8gCGkm5kk4yWrF1CdfGGKpQCcRRMEYkrJV2%2FD6PVU%2FUeTxqn2sN4Dn%2FaN8uVb2hlA%3D%3D\"}]}\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697b88b1-dadf3\"\r\ncf-ray: 9ec8bf99688a56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":896499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e54ee403da676c99d77633c01b606c3","sha1":"351c6bb9a4dba01eed5cc86ac6ae0a38f3e472f6","sha256":"59fee31a79439edb17dccae8553674f87012403c8a486c9b098a1e294c119e65","sha512":"7cc6dd0aea72a3f8e9c324dec727ab5133eef87d600768bf29801201118d4025fae2ce28071582dd3699b13a1ded3f3b78c56aa9fb53a67c7e5d1bcb7a099947","ssdeep":"24576:euayhlfPkhRx15QVsLcIuJ2wStoU6ghC5:eaDex6gW","tlshash":"be151214f80ae5b503bd0a251eb7156c6f748f709895ab8e87ac774683983c0f3ede25","first_seen":"2025-04-08T20:33:55.231096Z","last_seen":"2026-04-18T19:34:11.461682Z","times_seen":418,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/team9-sIMRwxbc.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/team9-sIMRwxbc.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11080\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-2b48\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GwhT2xfMHXDl6DFzjJXHpRXYIG%2FJqlmWHKx55hF%2FR8N%2BQ3G0nsrRiZKwlmv4vVzA6Pr62IozRb9bT8N%2F71ZuHqR0RsWSs3jjxHFXWlJaujZEfUBy%2BlEmnbIQLqdP5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99989656c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87d484adedd61343f676bf417fc61fd6","sha1":"96cf1ad110d99c2870f85c9f5c717fbb14f6c44f","sha256":"ec79aeb903b3fa0ad35e684b252ab35fc654bcdf93fa4b28cccac058b8b69ccf","sha512":"7a6d1e57e3434d8ae603cc9d8d1c3b80ab1666a281d62b16f1ea109d97d52b64aebba41d998be548f2d69c5c052f1e1d80abfa07bad36a595aea3da0ebfeb125","ssdeep":"192:qmmu84BOdcxxn8iFk6GI+HgvIm6mKj544gF2jVr19XzKlpwoTI4GlZY92Vm:qmmvX/iWEvp6Bj5NgFI39jKlp7TnGlZI","tlshash":"ff32c0f5858d67f49f809b468043ec6d04b7905bce86e1e6013b640a8a77c89ec2a31e","first_seen":"2025-04-08T20:33:55.23263Z","last_seen":"2026-04-18T19:34:11.470115Z","times_seen":416,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/how-does-DnlstxIX.svg","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/how-does-DnlstxIX.svg HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ND9e88AFncr5MvtmoIkOKH%2B%2FJnm44IQn8YDZI1LEspnnt6iifNSNBA4Z4NPjs4m26EHQ23aFUszmg3VUDwfnpWJgzfwdgKHC5LFJPiOSLc33iavjZmDgDJlZ1%2FUCwg%3D%3D\"}]}\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697b88b1-1270d\"\r\ncf-ray: 9ec8bf99688956c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75533,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f74cda42deb365718c80d66ae85c229a","sha1":"4239d279133a77b716a777486656143cf4338569","sha256":"f01c6f20d0beb7cb60a8831b8da262f042cd98a11a758be9032a2459550d4c98","sha512":"d6e3819cb59a1f4e9d1f9802d17c8015e978702b3eeaaeaa4fd61d5bf22a47aae20333fde7abcdb2d450383e9d1617f6edbfd3588d5d0b540376e0dd88a5f7e0","ssdeep":"768:oPk3zyS7R4f5w0BpHL9HMayHkEBGhFUfSmAVg3wTcECVSW7pfxMXuGgNQrdpW4gG:O04o7kF3DTcD7pZy/JkBZga4V","tlshash":"757383dc3f708cc55ec48bdb7f1150ec6a57d5b3aa898e08d15c8f6d088682c9dea983","first_seen":"2025-04-08T20:33:55.218198Z","last_seen":"2026-04-18T19:34:11.426229Z","times_seen":457,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/what-else1-BqAm836B.svg","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/what-else1-BqAm836B.svg HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bD42OOZvE1u9aApQMXoLeDzzySLi3t1s27fDM2ft9QfzNqgeysW7b2zLFxR2xqNyk0SX76Zn%2BdS3vzo40tzJR4IE%2Fw5bQ1XuL%2BbqySEK77WuJQGH6m91y5AIfu8iCg%3D%3D\"}]}\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697b88b1-54b36\"\r\ncf-ray: 9ec8bf99788c56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346934,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"512f89c0f286c15602c3185b3e8de07d","sha1":"3056e918097ec260b8a565aa088e78ef3bd78d0e","sha256":"030d84266479bd6e195d340e2dbbab1f20afab194bcf91f92c7e0fa3f8008220","sha512":"945a753a8816321ff62b4b792f286ba617fede9e7fe087219eb688db95c88f33cb435cff215a864c89881f62152ba5a2f92ab823263c211c5b1c960a894c85cb","ssdeep":"1536:y5QRcR9vN3RRPtmmhMgbSsPpI1v4xhBQVdDNDNi+6hjNRcjRQrIGtUOW2uFh+tGw:EZH+W","tlshash":"957450ec2fb01dd98ddc8bd7bf1285ad6823d1779999ce08c25c8f581585c2cfc66a82","first_seen":"2025-04-08T20:33:55.211481Z","last_seen":"2026-04-17T04:07:36.144661Z","times_seen":356,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/22-CzpWkn_R.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/22-CzpWkn_R.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19300\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-4b64\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I50KBplgZRTvdy7joKIKTK4OdRPZZ58DxrBFar6z%2BsVeIgkh7tRCohOSiL5FRLRzOeNdA7EBuWxwAQ5hAI3YON9kcXTHd2Q15U%2BmLLUqoq405dSZWtliy2yUqOCdzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99c89d56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4224b0cea000adfe29027c4ace6ca90","sha1":"f3f62f8c429c5446db4ee28f6857c81265bb6a8d","sha256":"9c5add30b5e422671689a41106849fdc2319a01ac3952b16c9506aed05bfedd8","sha512":"f846a43f28741f7a4ee7528a042e9d0de1bb45ccb65e239f9941c4a536f74529539d08f9f740f437bb523a8f5756292835dec6dc15e2825c1b082d04a236a04b","ssdeep":"384:60GohnG8pPSTVjACEs6tLfdQYaW+61jXKDFFoBlM7PD0sHLG2Xz2x:60GoI8ZyVjCLSiZ1jXA8l0rbLG2XKx","tlshash":"cf82c0d0d6b9946bacbc43a8bf2011bdb5fc12ea3a545b134d00747c87eb97a076ad34","first_seen":"2025-04-08T20:33:55.237744Z","last_seen":"2026-04-18T19:34:11.429474Z","times_seen":407,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/%D0%B0mlsafe-Dapxivrv.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/%D0%B0mlsafe-Dapxivrv.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWkwJbbGo38kOfO7vNTMRfhwDaOoQN72gUHvsASTmWng7YhqmeJVo5vNxDE3ffjAMSW2UcMLHkTcXJqfNI%2BDtAAfwGr9sz58U9t%2BL0hj91P%2FFEyIEl2%2B2SjU5Pz0RQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf9b68a456c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-04-21T20:05:53.793342Z","times_seen":94720,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlscan.ink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 18:02:56 GMT\r\nexpires: Sat, 10 Apr 2027 18:02:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 388845\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-21T20:09:28.857609Z","times_seen":341050,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":135,"dns":0,"connect":28,"send":0,"wait":29,"receive":37,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/css/Land-Btat2g4s.css","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/css/Land-Btat2g4s.css HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Ia1ia4kNV%2BNti9kxseetwAXFhG2%2BhdTONZbpc90xkTQpH%2BHwKVa195kXsmn2vzeZCVyfUV%2BEuk8GgfNKEJxPo48e3nlfa3XVtpVJw5NDijyh2MZQkCDmuUbp5Qnrg%3D%3D\"}]}\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697b88b1-1c17b\"\r\ncf-ray: 9ec8bf99588756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115067,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5129)","md5":"aecc31dc9546fa6b764cef13787014f1","sha1":"6a4e5e1eed4326acf2301324b7653f08099d4169","sha256":"874214d3cef8b6bbb52f5fb35df30a84773ff1171eeae9094c3a0f58a220f6a3","sha512":"48acfb0289241ef99b87e8cf1a2dfd0862c00a77babb2a9ee76eb853ec0ec8d576b01558f8b7f2f0e997984caa4c789cce0214f049b3aa9072cff1e9f30c2c76","ssdeep":"768:C4FIakFZ+mpBHWYv1UvZfbcD8GImYPFBFn7W20QFwdGf9ldKxt:HkZ/pB2YNUNcNItf1dza","tlshash":"1bb3782616631945780b98181ffe17a4717880479a0fdaf4bfca7a44df8f1a4b5f2b8c","first_seen":"2025-09-08T03:51:48.181626Z","last_seen":"2026-04-15T06:15:28.884573Z","times_seen":26,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/33-1yWRRjf1.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/33-1yWRRjf1.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51260\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-c83c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FwHqTGn5sazunswhHXzFCFyC5eFJO2f6pXG%2F1Q7XQtacw5nPwsec%2FNdew%2BumPN8QUd8oGGf7M3GQsiUCHLjRUc2WhliueF9XNkGd0vqgVl7ulfyRu9Zcl3W171i1tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99c89e56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee868cf20c90ea252365e462b6ed3c5e","sha1":"152db0b5653fd2b887fd121364cdf30958681d03","sha256":"127cbc5c941fbc03d9cbb37facd6601951d51318c0e6e50c7d15596c4481630f","sha512":"03515bab68fbeed2a2f2ac21c9f59551eeabffa5b8f62789aaab7fb2983303a36d7d9ba4cbb2d798df73081c15f614c6cc9504eb5813d11fc298bc4214438707","ssdeep":"768:j653t9vVD5JXaaGDkMYqov6bM/z1Czd1spLBSuvAmxpp4UZYrmlKLs0PpkhHWQhw:stFV0vYt6bY1CJSB4UZ1Qg7/6uoeC4","tlshash":"6533f1d2bbee3551c19ff51dc9eb49da1105f40ace1cb98c42d864ca99722fd132b163","first_seen":"2025-04-08T20:33:55.213792Z","last_seen":"2026-04-18T19:34:11.434946Z","times_seen":411,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/css/index-CBzum9nO.css","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/css/index-CBzum9nO.css HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ee5YuDpNFTxGix113bGq9xyxVnocM%2BA%2BIzjUVZz%2BNePbJYeAZa%2Brw9OuEXauZEShSdWsRBOQBxMLvHWw0PxTp34R2KIAhJIXd3LimxmQRnpwA1AAm4X%2BkkRAgdS9fQ%3D%3D\"}]}\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697b88b1-6c8b\"\r\ncf-ray: 9ec8bf99488556c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27787,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27787), with no line terminators","md5":"a78c6309bd945a5e4ff7694357615e52","sha1":"5fcae055779d4a098501f78ecae62d782d75577b","sha256":"4294dac0964df43caadc9294d22948b4202000e93a2bc78b820f31b5a216bf4e","sha512":"f82e99d3402725a3078b1a8941f3af164042905ab447464fb3fc9cccfec29900586f88cd1070d675b64a098926bf1f299e492d00c41f09abdaa95fe6dadfe784","ssdeep":"768:457MJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEI:+MJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"35c27d5a7a4cd100bf835b4362df2e0855347588e530194abe3b35ca2cd5ce6ba73fa9","first_seen":"2025-06-20T20:01:15.009002Z","last_seen":"2026-04-15T06:15:28.886127Z","times_seen":134,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/what-else2-c8YgOWn0.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/what-else2-c8YgOWn0.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22208\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-56c0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jaxC%2F4tI9rJxkH4QQxEOsouSxHysJaE%2FNKY%2F1qtfpcmizCZRHibHRyYNB6P4jLSDRICROON4b69SVlc69PCpkK4kqkENN2UU%2FzirhSifihdRvezUQuBNhs7cQJgLvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99788e56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1e057fdfd21fcb1b20f6dbff68beec6","sha1":"0a1b93824ad73034f0fdcca9cdb69bb141cc766f","sha256":"56999b85ede07c51cb32cbb21169a76bab2fd5396bb1edf7cedf88b1f32c32eb","sha512":"7d78ceee169f2e5309396dec77dae0bded22a9b2f0223308c15019904c203233071bb88f126fb037de94a793ef2d88533dff1cce22efd85216fb2d5f4587385d","ssdeep":"384:VZgiCAV2JY7iTlSiIQigkOzLewew0/dOnPm5FcHCQO5D2p:VYWmTlSiTTLez//dXFcHCQSa","tlshash":"25a2cffc302d028afeedc67b6906af92b9fe14571470ca0d63587a8155906c753cabb8","first_seen":"2025-04-08T20:33:55.221615Z","last_seen":"2026-04-18T19:34:11.488137Z","times_seen":386,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/team3-DH9H-rCm.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/team3-DH9H-rCm.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5358\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-14ee\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXyGeAMOmbxE8iyiVXd3ZDy1JOQ5Pv3su0ssNAqWBbOXxrLBMdtoFueZ6zhw941nQhr8YUBp1V4lW%2BP85L84b0tROtYHte6pafoFoUyTvNC6dvxr2lT1%2BKoFcLuwzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99788f56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74bcbc95eb9c765eb9807d9a6f5a198d","sha1":"3a1595be13ffd0a8622900fbe79b8bafa5a72d3b","sha256":"40b376a82e6f6ed6e382e6955fca2037bb67a22fdb08b26736d357051393dc2a","sha512":"41286c269e0650b523a3cbc18f91b95a10173f7f90bd5a0164f0f29a3c114928dbda998a93397de4e80cb5838370c46cf7ff369a189abb4a777d0fe34ce17e6c","ssdeep":"96:CHNESUnx97dkN8xnkhSwRWXBwK025xozmK0sMu2+7fJDf4Y/UCh2:ANof7g8xkhQhzzPtfu2exrt8Cg","tlshash":"9ab1aee0825d0da86a8ed98c15576a636c2d345c17c403951c855a637a8f61ecff4f2f","first_seen":"2025-04-08T20:33:55.231907Z","last_seen":"2026-04-18T19:34:11.489095Z","times_seen":417,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/team6-DPDdh9tS.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/team6-DPDdh9tS.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8070\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-1f86\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sk%2Buvy9jT0oOgb0fmpXZ6eRqSgykZDvMdYm5D%2BAAGvUBR6W6MyeWdtizMyhbtCoOFIoIWyh7cTSlGeHIwsP4Jtjo%2B3QkW04SNgryUm6fvxDWJFNlHtKBq55Vm3kYnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99889356c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff92c5d0702748d4fd4a7598287b52e9","sha1":"1c52f75273473401f01060b11732c9f2b93bdec0","sha256":"4678f709196922389c98ba22c894212e124843154455769551b2af283e2afb78","sha512":"0d728fb2b6b205466fda940e0732da04c5bd6f42a17a266ba871e2412d285caada5814ed15240ebfa942798871c2de97ee109cd16856da574255de2ba4abca5c","ssdeep":"96:Ag9uYyKIvVYX1msb1sbUItmcdl0+InYMAXAf6glqBTTCxBd5bIe75fPM8Hif/pDq:V94J+8sRYHzM3dtPMSifFKXG+8W9fJ","tlshash":"d7f1c0157ba4493c6ee08b78d1f4e6827ef5dd0946f37d1a580518f43c2d690390bb26","first_seen":"2025-04-08T20:33:55.234306Z","last_seen":"2026-04-18T19:34:11.490843Z","times_seen":415,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlscan.ink/source/images/cryptohome-Bkw0BUZH.webp","fqdn":"amlscan.ink","domain":"amlscan.ink","tld":"ink"},"ip":{"addr":"104.21.48.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlscan.ink/","date":"2026-04-15T06:03:40.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlscan.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 20:04:19 GMT","end":"Tue, 30 Jun 2026 20:04:18 GMT"},"fingerprint":{"sha1":"07:19:36:68:D2:B2:BB:1F:C8:04:B0:6F:6C:D9:AE:9C:F6:05:EF:87","sha256":"4B:BA:B4:78:25:8C:6F:F9:9A:05:7A:66:B5:41:E9:8D:19:3A:D2:DC:D4:47:30:40:CB:03:9F:15:67:55:B4:0F"}}},"request":{"raw":"GET /source/images/cryptohome-Bkw0BUZH.webp HTTP/1.1\r\nHost: amlscan.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlscan.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 06:03:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6524\r\nlast-modified: Thu, 29 Jan 2026 16:20:01 GMT\r\npriority: u=4,i=?0\r\netag: \"697b88b1-197c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXYjPuynjtjunGQOQhDrf61qf8UT2%2BuwXDLnb%2BOjRJ7WeaN9AGK9K5terPKpfuzu2voOQDbFkv2FIjfMCpZc5rN%2BItXd7ftAhG3KJxgMcoPmyab69uBjwoZo9pNatQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8bf99a89956c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a2a0b43e1c12c0518ee43437610ef9","sha1":"49885aa60fda4e756d9e02516f9e8b4abf0441b5","sha256":"bb65329601cee30def53aeabaa90cca20c36c5c5560c20f6bb7c85f40989f5ef","sha512":"d08a23b1764987b0c01beb8f6f5c5ede4305be744ea396f7c0fa5670a347768123958154f5e34c34fcce6c6b962264327a091c0d82f7b5a53bdbab83782b5c77","ssdeep":"192:K5CHETRBoVjBVHm0hQVK2/R8j+9yYZXa:KAH6R+tsFVNR9a","tlshash":"a0d18fe6236d7678e4546fb4bad993d1a6447a3c84507d37283f8eae7cc56748230dc0","first_seen":"2025-04-08T20:33:55.236886Z","last_seen":"2026-04-18T19:34:11.491735Z","times_seen":374,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"amlscan.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}