{"report_id":"805c2539-19e1-4676-a0e4-a8b0863177f3","version":6,"status":"done","tags":[],"date":"2026-01-20T21:14:39Z","url":{"schema":"http","addr":"sync-aml.one/","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":0,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"sync-aml.one/","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"title":"AMLBot - Comprehensive Crypto Compliance Solution | Free AML Crypto Check","dom":{"size":74984,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"bb9126500744e4c8dbbeb82fee22733d","sha1":"6646ff141fd802c45d2c0f73aec5f8a0e4474ef4","sha256":"0643139b7c83b4a37861d5c34ec76fcab3db1b625a319105041c7d145f4334b5","sha512":"76468d12ea9469dd5cc509367cd1ee6740636f58e9a651b1e6b3e004091cef3124355e73fb289c789e36e64355bc81c002986a6a585377d0723298b00db9b99e","ssdeep":"1536:ZhBK0dSt472YCr4XRSEw4XLSQR4XUS52vINp798+698AP98/9:ZvkB","tlshash":"28736279b205da9dfc8f2d55243ead39604ed25bc677cd6482ecdd2142c3879ea83ac0","dom_hash":"domhashd85bae5a97f08946d3c8cafe8dfae77e","first_seen":"2026-01-12T21:14:58.559857Z","last_seen":"2026-01-20T21:14:43.418452Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sync-aml.one/","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":0,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-24T21:14:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sync-aml.one","ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-01-08","domain_rank":0,"first_seen":"2026-01-20T21:14:39.92662Z","last_seen":"2026-01-20T21:14:39.92662Z","alert_count":48,"request_count":16,"received_data":765474,"sent_data":7527,"comment":"","tags":null,"fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/main-app-4fd1e584785caac0.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdae2f13c548dd74334b710ff8e72381","sha1":"81bc8e0263b99fe345282ff19c84028285956951","sha256":"68d13047aa2e2bf8aa40e67be85ef039857b5b2639e973b6dab9905acd1abc98","sha512":"ebfef3d8f049ae9b2a5c229c35456a4faeea4a223a74a2003864eb9ba7035d94a212b929f19bdb2bfe7cba4aaacb8eb0a146409bf526a3fea0bc2570064c64c3","ssdeep":"","tlshash":"aff0375a4f5cf42f1c266d24fda36ce2245f4135302b4e646901eeb12c27bacd261419","size":463,"data":"","first_seen":"2025-09-08T16:47:02.799234Z","last_seen":"2026-02-07T09:12:17.395096Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/173-adb53e817c3964da.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fde46c3910390f1492cc14232b56df8","sha1":"d7f3f246c4b0b0606a0741ca97dcd48b343b18fd","sha256":"4ba43cc8a05d48289be794023d624a82e292dd0d0505ddbd4add97522e6f54c9","sha512":"2c69700d374a2b5bd7a8fcc17fc18f772137bfcd77544a9bba4659d51787c4ce9282738cc05f1e0eb6e9e46b30889b888010eb647a3f901ad8e6d54c0beed789","ssdeep":"192:3UeVAZ+zmvA2t139v6QCO4W8lZIIaM0opd2KL6ImJY1w3c3YXwV9GWx:3lummv/3k2GM13bMIXwV9GWx","tlshash":"e112b996b1d2f8a2c3bf0061443b100bb2791d79285e7154f7f49ce7b9b046da1a3f59","size":9778,"data":"","first_seen":"2024-12-24T08:04:24.058682Z","last_seen":"2026-08-01T13:08:08.722328Z","times_seen":254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/app/(check-wallet)/page-bd2d9b9cc202bc2d.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"16d7d1a78a99bd6c108eac67bd053bcf","sha1":"1af5557184cd37745c95c354c1629ff6958186ac","sha256":"1affe9ba8973c2a2492d2187d35f5f9804e40fa46c3cfd04004051c2225b4f37","sha512":"e0d48575300edd86739fe6f9816b4e07fafba68f48f8b277318019905d8c52a146e725bf648a9e18d06626104a10ddaa9689797a91602850da5b9876095ac1b4","ssdeep":"","tlshash":"3dd05b861549741d6d166968f89158a2295a1475346f8ad06701dd601853a3c8361846","size":245,"data":"","first_seen":"2025-09-08T16:47:02.826788Z","last_seen":"2026-02-07T09:12:17.406428Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-02T03:58:54.811651Z","times_seen":211046,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb0a618211e39da3e6949a6ebc385564","sha1":"d8eed31c83ef38ef76c52e4f05fc6a1579383ec6","sha256":"bb9c76a0daaf4c21ffeb89b2077d0fc5cd23803e482f0e5e4613199b1bb471bd","sha512":"37a3425f272881b2b3d29d3b1c3a0a92073e2c04d4d8395404803af09e99dae934aa326544a2d35ba20136ec3d6f7c4dcbcb67eadf998d8656b52a4eb58dceec","ssdeep":"","tlshash":"2e11578ef646d9a46c72ce1a41770d7540d8fd3863706494a2cfcaea0121d3c576ac46","size":935,"data":"","first_seen":"2025-10-04T23:17:49.499029Z","last_seen":"2026-02-07T09:12:17.417126Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/517-44e799f43aba42ae.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8ea5bca79b0fcb341018376e7406e36","sha1":"cf0acdb9b4b5249af6ee521861576c41e23ac805","sha256":"129bb8964cecfaa860eac2fa0fab9e179076895af006adc84739a58d236a7e9e","sha512":"2d50085ff79bd717133fff96a820aeb6093873a775e654ec3df5444583b5031bbfbcadff50fe54c80b1f9e446594dda9f499549ddcdb76a20bb0129ec46af9f2","ssdeep":"1536:q/5gIJct9xrxIT7hL5JJ/KcMZpa9dEwJMxsS+VSMprNizTP8B6XIhnKb:ec9+hLflS09WwJMxsSDP8oXIq","tlshash":"8114d9f676d0f8a107a740e5843b4006f3391c7a146e74a0a3a5ccda75644eee1b7faa","size":200648,"data":"","first_seen":"2025-12-19T22:57:06.929937Z","last_seen":"2026-07-19T05:20:55.761432Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/webpack-eef9b65c224c311c.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"323dcc70a43c45ac02a0be34d99a3aa5","sha1":"a1d342e1b813f014a840fb2e9276101d14cc1ac6","sha256":"96eb73e292ab470d24d1f7607f52bf4808208ac48fc8d84c5cb546e8f17adda2","sha512":"5a1f58a6c9ce656afb3fa838173c8b8f884b6d703d6c113328e9de28f0d004e0a5f30e7d41d09335ca6bd5fbc4edd7d047556c015ed951b7df005f23fa231420","ssdeep":"","tlshash":"4e61c4a93625f9b156f108c5887fc142f619203b052afca0e717dcb9b468aa10562ff3","size":3412,"data":"","first_seen":"2025-07-19T07:53:22.752827Z","last_seen":"2026-06-01T01:00:40.27407Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/970-769979ef21074360.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"02712a9faa10174461b00e3ddd982927","sha1":"becbeffffcf8ac7b036b87bd1325067a1ecc6bd7","sha256":"235776f3434300a9a1437507cdaf61e38eb8e66bcf2c9a060893d92c84531622","sha512":"ce00061afc5940f63f3e471f109bdfbe845598ca6d343187e8f0556405ce28557dc6337b2241cf39046041c0f63465e946022b4fa3cbebbacf67732e79d4b175","ssdeep":"192:i9WdYcTZpYzm7y2BjTwwfQnd58IdMavNEz+66fRFxYiC4BMqCJ:i85Tn7njw1dD36yu46qQ","tlshash":"095209b73690fcd6278b80d5883f000df3655d76632ab04873a5ccd9a6e0595f1a2fba","size":13530,"data":"","first_seen":"2025-03-27T22:07:13.889189Z","last_seen":"2026-08-01T13:08:08.723896Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"83507eb29cd258a83689d6c33eac4755","sha1":"78884a322533d97ed9271d269bc54747031ce123","sha256":"3f21fd58d39733cf277e773d04c6fee846daabb5ae8eeb659384c10fc6414c98","sha512":"b3652ef249c10b17e62c4cb23d6e2c07050cdf5a778ca15d9d5642efe7d813bdbe8739cf61f83d8978a465befad0ecf8d3bc43dffe2de0678283bd5e740540e6","ssdeep":"768:Q8vIN0zW1oP02Ziq0qVqTq9hq0qVqzqXSq0qVq0qwM:TvINp798+698AP98/E","tlshash":"eb13f039b116de9cfc8f3d55143e9c39644ed25b86aace74c2e8dd214583479bb83ac0","size":42274,"data":"","first_seen":"2026-01-12T21:14:58.575707Z","last_seen":"2026-01-20T21:14:43.430785Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cea1a96f121269bb4533f882a35e3f9","sha1":"ebe84b787dcb9905b5354630b2cd725eb0b27bcc","sha256":"1b838f01eb90e2d976c4ce429d24f1622f5fda202824c82f88090df4ff8ee22e","sha512":"c91969c7c12eaeec4ece27f162d13aa1268108e79c93a7039ff388c7291fdf591551b3b95d4c5f33cb93b815610c3baf2699e7ef2f89c0d40fca047efd2953d1","ssdeep":"","tlshash":"3801f4606d19ed4497a30f501fbe1cb560cc82a49341c9525bc8c8180685e395ef3bc5","size":687,"data":"","first_seen":"2025-07-19T07:53:22.796058Z","last_seen":"2026-06-01T01:00:40.279975Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"36e4141fc852dab6e49aeaa80fb299ba","sha1":"331ebd46d5a53ea0c72661d9422176d76cebeba3","sha256":"e2687344a526a2a25864e0dd8732758493774990544e6a5b2009fd0a809e29c0","sha512":"15958c05579aac5ddd9fbe3563b0bde7fa7d30d33c3e1ba93619f007080c9b6e9f0d42966eea7f95f76727651b209445073d09342f60724fc248e281bd437174","ssdeep":"","tlshash":"e7800470c0405c15c03140731434130d017d400d0000071053505744501110f5505ddd","size":34,"data":"","first_seen":"2023-12-29T21:14:23Z","last_seen":"2026-08-01T20:50:40.430096Z","times_seen":2634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/4bd1b696-dc53661a9e7a1ea0.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"134c96f899922d29279b675e9fbee451","sha1":"81a49edacad8533e4a1dc0953c3c41707429645b","sha256":"c03ea96e1936ca94440d2f2b1db6105027ac80129374e2738ec2332769dc2183","sha512":"15c10d98073cae3ca5f670b137ae0218ccb8a6d6c86179233751a58e987efc8de8a8aae5420f3e771f3fa921e0f0bc8a52dac3383895a12a109b785fb50c51f9","ssdeep":"1536:6WSSc/OtXTZdmomUsjbmLCbLcL56jtP3VfHPqmH1c59zhFcavz12smlh77eP9AH1:tc/OjDImScLOTD1sFc0Olhe2WX+","tlshash":"71f3f9ec3999e651aeb302a700df28037378262b240d4d60a614fd9db57845bb17bfde","size":167090,"data":"","first_seen":"2024-12-23T17:43:51.448446Z","last_seen":"2026-08-01T21:27:55.669996Z","times_seen":1058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sync-aml.one/connect-wallet?_rsc=178ft","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /connect-wallet?_rsc=178ft HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sync-aml.one/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(check-wallet)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding\r\nx-powered-by: Next.js\r\netag: \"pv1aorjb2x14o\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1464,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1464), with no line terminators","md5":"46bba51e1cef8f821379960baaf0651b","sha1":"032fe26e8f5b502f2839f0b5c661237f88526f19","sha256":"a8af198abfda85c6f8dd4020b9776ab0ceb0d903b051c446dbe9a3045af191c7","sha512":"143a7f3c03d37742368ee19315d2e9f594195933d34d884edf26b78ab38ab9deac28b28d9844e3d24e62b56893ed828770bedeacb75af051590469ca32f3c72f","ssdeep":"","tlshash":"8e3147478f0ec68646228d8ca531e37e1405e436d6b2c8a8b7dcc4ac4b707de4faad95","first_seen":"2026-01-12T21:14:58.56836Z","last_seen":"2026-01-20T21:14:43.419539Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/css/711bccf17d52cf7e.css","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/css/711bccf17d52cf7e.css HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"1a1f5-19b9bc2511a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106997,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (63243)","md5":"daaa77bafedfde89c53944f42d8374c8","sha1":"a490d1427d86a464c8ff1a6977b42e03ace76014","sha256":"569c4843c238cfa80fef49a0bb01d4f73457359fd26296d98fc87be4b21e59f1","sha512":"fa89caae4e76c9ec345897f418b305ff53b3f7b06a88a79a3eca5209d429d8a0145a2551fadf75012a597dc97de510739fc522020a0d0ed32e5cd860e4d57adc","ssdeep":"1536:GHf+Gvb3i6PboqXte5zSU2k7r5NTvHleb1fpm5wr:GHf+yb/tIzSU2k7r5NTvHleb1fpm5wr","tlshash":"46a3be6ca691043b2d6388f9e148ec6dd52ba1c4fe3aa7fbec51171197e46e3ad43240","first_seen":"2025-09-08T16:47:02.79034Z","last_seen":"2026-02-09T13:46:14.142172Z","times_seen":24,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/webpack-eef9b65c224c311c.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/chunks/webpack-eef9b65c224c311c.js HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"d54-19b9bc25117\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3412,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3412), with no line terminators","md5":"323dcc70a43c45ac02a0be34d99a3aa5","sha1":"a1d342e1b813f014a840fb2e9276101d14cc1ac6","sha256":"96eb73e292ab470d24d1f7607f52bf4808208ac48fc8d84c5cb546e8f17adda2","sha512":"5a1f58a6c9ce656afb3fa838173c8b8f884b6d703d6c113328e9de28f0d004e0a5f30e7d41d09335ca6bd5fbc4edd7d047556c015ed951b7df005f23fa231420","ssdeep":"","tlshash":"4e61c4a93625f9b156f108c5887fc142f619203b052afca0e717dcb9b468aa10562ff3","first_seen":"2025-07-19T07:53:22.752827Z","last_seen":"2026-06-01T01:00:40.27407Z","times_seen":64,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/image?url=%2Fdashboard.png\u0026w=640\u0026q=75","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/image?url=%2Fdashboard.png\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15462\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: VoVMb8h01wI9pOb5JACXJWV1Z8RG1ljkmJOhGWj4RNo\r\ncontent-disposition: attachment; filename=\"dashboard.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6513f33c2f4d1659cc6dead3ed76eb39","sha1":"16e3f25b37e2271081656b6e9993dd1aacd51c99","sha256":"56854c6fc874d7023da4e6f924009725657567c446d658e49893a11968f844da","sha512":"0ff7307391294d72db48eba9d32925ef1d9b87f61627bda9f3e756a5fba56dd759be990fe22d4a18055fa8e07f3222014a0d5dcc7891194591f254b5a9d9de7f","ssdeep":"384:UdMTvTkxW2hHnxx3WpW2FEg98MyDObba+a:UdMveWsxwprFn83OU","tlshash":"9562d053dc47695ebec8a705ae3cae40a91e3304e063917263bdf4f3b16cae12635b04","first_seen":"2025-09-08T16:47:02.815387Z","last_seen":"2026-02-09T13:46:14.132389Z","times_seen":22,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/173-adb53e817c3964da.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/chunks/173-adb53e817c3964da.js HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"2632-19b9bc25117\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9778,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9778), with no line terminators","md5":"8fde46c3910390f1492cc14232b56df8","sha1":"d7f3f246c4b0b0606a0741ca97dcd48b343b18fd","sha256":"4ba43cc8a05d48289be794023d624a82e292dd0d0505ddbd4add97522e6f54c9","sha512":"2c69700d374a2b5bd7a8fcc17fc18f772137bfcd77544a9bba4659d51787c4ce9282738cc05f1e0eb6e9e46b30889b888010eb647a3f901ad8e6d54c0beed789","ssdeep":"192:3UeVAZ+zmvA2t139v6QCO4W8lZIIaM0opd2KL6ImJY1w3c3YXwV9GWx:3lummv/3k2GM13bMIXwV9GWx","tlshash":"e112b996b1d2f8a2c3bf0061443b100bb2791d79285e7154f7f49ce7b9b046da1a3f59","first_seen":"2024-12-24T08:04:24.058682Z","last_seen":"2026-08-01T13:08:08.722328Z","times_seen":254,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/app/(check-wallet)/page-bd2d9b9cc202bc2d.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/chunks/app/(check-wallet)/page-bd2d9b9cc202bc2d.js HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 245\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"f5-19b9bc25117\"\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"16d7d1a78a99bd6c108eac67bd053bcf","sha1":"1af5557184cd37745c95c354c1629ff6958186ac","sha256":"1affe9ba8973c2a2492d2187d35f5f9804e40fa46c3cfd04004051c2225b4f37","sha512":"e0d48575300edd86739fe6f9816b4e07fafba68f48f8b277318019905d8c52a146e725bf648a9e18d06626104a10ddaa9689797a91602850da5b9876095ac1b4","ssdeep":"","tlshash":"3dd05b861549741d6d166968f89158a2295a1475346f8ad06701dd601853a3c8361846","first_seen":"2025-09-08T16:47:02.826788Z","last_seen":"2026-02-07T09:12:17.406428Z","times_seen":19,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-20T21:14:16.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 4294967294\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000,\r\netag: \"angw1awkqb1lty\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":74950,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"8a19dbd1159a83771d3c2b7adeb2ac1b","sha1":"76baf3a4fc236fa4e28b4a65c05eb9523955f9d9","sha256":"53967e5c20c7685aef3a25eecf3010f393eed905fbb803c1ede78a149b452995","sha512":"b1f8f6b33c980b3c08cd931b735c6e0ba194807b9a822e550e73c8c7b953b5cba872935829e55bee29d897a12e4467c17a4f07908cdcdcb7836a6c6757b01686","ssdeep":"1536:ehBJr3JgH2tbCr4XRSEw4XLSQR4XUS52vINp798+698AP98//:ezk7","tlshash":"27736379b205da9dfc8f2d55243ead39604ed25bc677cd6482ecdd2142c3879ea83ac0","first_seen":"2026-01-12T21:14:58.564464Z","last_seen":"2026-01-20T21:14:43.423081Z","times_seen":3,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":56,"dns":5,"connect":21,"send":0,"wait":33,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/css/de70bee13400563f.css","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/css/de70bee13400563f.css HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"946-19b9bc2511a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2374,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2374), with no line terminators","md5":"4e75888d2100f3d284ac2177277d1603","sha1":"894793a0dc45bde5d4bd845adb8b9dcbcc687556","sha256":"8a5acff3bcec2d9bd3416e2a6e353114e8fd87af53d36be3dcfa20926aaf5371","sha512":"4610cf9d4036f3c42fe3efada095513536512990ad500083af258000ef0147b3febff7eeb27cb7735179e30079d32b490f6a0ec7f9e4744a31e26b631141f524","ssdeep":"","tlshash":"3741dd20c01e944fd5b1fc8230ca3f73253e641ad5981966ae3d49794edb86e33f0ba8","first_seen":"2025-09-16T11:17:50.343746Z","last_seen":"2026-08-01T10:26:36.221167Z","times_seen":4127,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/main-app-4fd1e584785caac0.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/chunks/main-app-4fd1e584785caac0.js HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 463\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"1cf-19b9bc25111\"\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":463,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (463), with no line terminators","md5":"cdae2f13c548dd74334b710ff8e72381","sha1":"81bc8e0263b99fe345282ff19c84028285956951","sha256":"68d13047aa2e2bf8aa40e67be85ef039857b5b2639e973b6dab9905acd1abc98","sha512":"ebfef3d8f049ae9b2a5c229c35456a4faeea4a223a74a2003864eb9ba7035d94a212b929f19bdb2bfe7cba4aaacb8eb0a146409bf526a3fea0bc2570064c64c3","ssdeep":"","tlshash":"aff0375a4f5cf42f1c266d24fda36ce2245f4135302b4e646901eeb12c27bacd261419","first_seen":"2025-09-08T16:47:02.799234Z","last_seen":"2026-02-07T09:12:17.395096Z","times_seen":19,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/970-769979ef21074360.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/chunks/970-769979ef21074360.js HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"34da-19b9bc25118\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13530,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13530), with no line terminators","md5":"02712a9faa10174461b00e3ddd982927","sha1":"becbeffffcf8ac7b036b87bd1325067a1ecc6bd7","sha256":"235776f3434300a9a1437507cdaf61e38eb8e66bcf2c9a060893d92c84531622","sha512":"ce00061afc5940f63f3e471f109bdfbe845598ca6d343187e8f0556405ce28557dc6337b2241cf39046041c0f63465e946022b4fa3cbebbacf67732e79d4b175","ssdeep":"192:i9WdYcTZpYzm7y2BjTwwfQnd58IdMavNEz+66fRFxYiC4BMqCJ:i85Tn7njw1dD36yu46qQ","tlshash":"095209b73690fcd6278b80d5883f000df3655d76632ab04873a5ccd9a6e0595f1a2fba","first_seen":"2025-03-27T22:07:13.889189Z","last_seen":"2026-08-01T13:08:08.723896Z","times_seen":99,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/image?url=%2Freport.png\u0026w=640\u0026q=75","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/image?url=%2Freport.png\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 98304\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: Vy8iMTgwMDAtMTliOWJiZmI1MTIi\r\ncontent-disposition: attachment; filename=\"report.png\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1512 x 2130, 8-bit/color RGBA, non-interlaced","md5":"7e87ec94d9ab390047a92e6d18e45442","sha1":"ab2c8fd4a0cfbd573b2ddb15af09bb7f968715f6","sha256":"b1a4d28a6f36d3d0a89b66ccd26a04a64923f72dddfce2c9bfbff43eb00c465d","sha512":"223b09042900b26473f1b61d0314ac0c418c7d25c0d76bbf98fc83d86796d6b53b27cb356993680fb42b1cc260763a9724e5815650c45fe544388fb10835834d","ssdeep":"1536:GaqjG1wMP5LdibJtSWNF9BYMyqByuONdl64D9nfYMCdL1cVO4VTpDefRqi52mO4g:GaDBLdkD1Y5RW69+1cVOA0gi52BytVMR","tlshash":"00a3e098210badaacc4d8774cabf4fa4b768ceaa4584dc031bb416777cf6705dd834a4","first_seen":"2025-12-23T22:14:22.438844Z","last_seen":"2026-02-07T09:12:17.407285Z","times_seen":13,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/media/4cf2300e9c8272f7-s.p.woff2","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/media/4cf2300e9c8272f7-s.p.woff2 HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sync-aml.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28388\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"6ee4-19b9bc25110\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28388, version 1.0","md5":"18bae71b1e1b2bb25321090a3b563103","sha1":"a636827d1fb47f9fddf94d55ed8f25e85155d1ea","sha256":"a29f900a6d603e989449327956e7ac61ea3e6b26ca7426f64e7cccf2cd4aed37","sha512":"e6560e1f68d236883884afa1fa4c2de5ddd6c75e69ddf1057c97f525015aa4306a14fb56c1526141bf2067d24b2ca72ea78e0e518b2bcbaf162056ee4a2b327a","ssdeep":"768:KD+2Y2za0bgeumM+doeWITKGOgUT3CbeZq:KDFzfKJ+SHIGGOh3CbeZq","tlshash":"9dd2e1a0bb98461d35fe1ba096ed42bf4a1d7f4ded7c1a65093b2b80174d4df20d8c68","first_seen":"2025-09-14T11:55:19.751418Z","last_seen":"2026-08-02T03:01:02.189919Z","times_seen":24452,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/media/93f479601ee12b01-s.p.woff2","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/media/93f479601ee12b01-s.p.woff2 HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sync-aml.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31288\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"7a38-19b9bc25110\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31288, version 1.0","md5":"da83d5f06d825c5ae65b7cca706cb312","sha1":"3820bcdc2e187ff5332ab0d5dc8529f8e10fd574","sha256":"b7ac144b394cbd81052d6397ec0c33397977b1d7e9bc095e744e652a378c6fb3","sha512":"c8b02f1655b30d6fd6e0b3ee92280d175fb0410938a71f625354fe79e009fb2928ed55b45d0000db9e527a388e8f3eb42875c6965c80eb4b03046c50f49ed187","ssdeep":"768:N4C8ya3ZZij3h4s0iIfv/x/tV3167X/27IwwlsUxCkegAeyTrJD7/kX:Z8Pzf3JF67eqlsZXLTrJcX","tlshash":"47e2f1e7f5578489abb26e7102e105d5c5ed4aa105bfd1fb642c70660d3aa0e0fc0b27","first_seen":"2024-12-09T15:40:29.87187Z","last_seen":"2026-08-02T03:01:02.177884Z","times_seen":25825,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/4bd1b696-dc53661a9e7a1ea0.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-dc53661a9e7a1ea0.js HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"28cb2-19b9bc25117\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167090,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"134c96f899922d29279b675e9fbee451","sha1":"81a49edacad8533e4a1dc0953c3c41707429645b","sha256":"c03ea96e1936ca94440d2f2b1db6105027ac80129374e2738ec2332769dc2183","sha512":"15c10d98073cae3ca5f670b137ae0218ccb8a6d6c86179233751a58e987efc8de8a8aae5420f3e771f3fa921e0f0bc8a52dac3383895a12a109b785fb50c51f9","ssdeep":"1536:6WSSc/OtXTZdmomUsjbmLCbLcL56jtP3VfHPqmH1c59zhFcavz12smlh77eP9AH1:tc/OjDImScLOTD1sFc0Olhe2WX+","tlshash":"71f3f9ec3999e651aeb302a700df28037378262b240d4d60a614fd9db57845bb17bfde","first_seen":"2024-12-23T17:43:51.448446Z","last_seen":"2026-08-01T21:27:55.669996Z","times_seen":1058,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/_next/static/chunks/517-44e799f43aba42ae.js","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /_next/static/chunks/517-44e799f43aba42ae.js HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Jan 2026 03:59:21 GMT\r\netag: W/\"30fc8-19b9bc25117\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":200648,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e8ea5bca79b0fcb341018376e7406e36","sha1":"cf0acdb9b4b5249af6ee521861576c41e23ac805","sha256":"129bb8964cecfaa860eac2fa0fab9e179076895af006adc84739a58d236a7e9e","sha512":"2d50085ff79bd717133fff96a820aeb6093873a775e654ec3df5444583b5031bbfbcadff50fe54c80b1f9e446594dda9f499549ddcdb76a20bb0129ec46af9f2","ssdeep":"1536:q/5gIJct9xrxIT7hL5JJ/KcMZpa9dEwJMxsS+VSMprNizTP8B6XIhnKb:ec9+hLflS09WwJMxsSDP8oXIq","tlshash":"8114d9f676d0f8a107a740e5843b4006f3391c7a146e74a0a3a5ccda75644eee1b7faa","first_seen":"2025-12-19T22:57:06.929937Z","last_seen":"2026-07-19T05:20:55.761432Z","times_seen":79,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-aml.one/favicon.ico","fqdn":"sync-aml.one","domain":"sync-aml.one","tld":"one"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-aml.one/","date":"2026-01-20T21:14:16.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-aml.one","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:01:43 GMT","end":"Wed, 08 Apr 2026 03:01:42 GMT"},"fingerprint":{"sha1":"65:21:92:80:BA:8F:C5:C5:21:A2:DA:0B:76:C4:18:34:76:2F:AC:B5","sha256":"54:52:4D:39:FC:75:24:45:E1:1D:E0:F8:55:C2:FF:59:EB:A6:65:0B:19:1E:B3:33:BD:EA:7D:38:D1:8B:75:22"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sync-aml.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-aml.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 20 Jan 2026 21:14:16 GMT\r\ncontent-type: image/x-icon\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\ncache-control: public, max-age=0, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5694,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 8 bits/pixel","md5":"5b42ce36721d13c5676aa379a6cdfdee","sha1":"264793e6c814ad28bf3326c17a720a3b7227a890","sha256":"31d020d6e5c5b767f2bda935099176f9c16ee1b56939d7a01a2813055f9aaa5c","sha512":"5a00466d7e493f2703ca79e48c192f5105e9d2ef9021a881225919735ee53e48be7276bfa4b40327a56e22f95547946f1d2a6888d214919fb05129a61080be6c","ssdeep":"48:Sl7lilMlAlMlMlOliPlLcaif/gFopd7Rja8r63WIzAMBC7qPOxWOgYi3gWhq3:WhGkAkkKuq/rTs33tzAMEC5OXaq3","tlshash":"5fc174717512d278da8d25790e14f332222e6f88ac446d0ff9103b9f77f12bb5c28258","first_seen":"2025-05-06T17:59:56.687786Z","last_seen":"2026-06-01T01:00:40.276302Z","times_seen":79,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-20","alert":"Phishing Block","trigger":"sync-aml.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"sync-aml.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}