{"report_id":"895b32ae-f161-46d4-8b52-be2ce985ddd4","version":0,"status":"done","tags":[],"date":"2026-08-08T19:27:57Z","url":{"schema":"https","addr":"amldoc.com/products.html","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":0,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"final":{"url":{"schema":"https","addr":"amldoc.com/products.html","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"title":"AMLBot - The full-fledged crypto compliance solution","dom":{"size":37613,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (428)","md5":"2c016fd528efc92f440112df3b704b9d","sha1":"711a0662f7e4883530c8e59e2c984ac05b9919a0","sha256":"ffa1ad056c926e4b8d7f6797cb53ac48cfd737bc90b44e04d4540d7f59200e11","sha512":"a42af2f1183436ce51fe83c7539dea5ff5cab9c355ad800f113f67773b281a0cf8fe4d406275b24b001f2f709444a5245f7273a153ebb2fca4f2392ea6ddfc2c","ssdeep":"384:NBOQyJOeX09IYSYykOaSMOqlO3YKzkoHahssqLtbyIOFYIOaYIOHlIOUcthvKage:NE09PKtG0XhOF4hbVBcA9","tlshash":"6cf2839022df1d7b421601db697677ce62af8e30d357a4d0fabb826973cad84dd53022","dom_hash":"domhashce7e309c8882ec6583bca0bc9da27e3d","first_seen":"2026-08-08T19:27:59.422455Z","last_seen":"2026-08-08T19:27:59.422455Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amldoc.com/products.html","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":0,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-12T19:27:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"amldoc.com","ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-08T19:26:11.229301Z","last_seen":"2026-08-08T19:26:11.229301Z","alert_count":228,"request_count":76,"received_data":807062,"sent_data":39464,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-03T07:56:26.149753Z","alert_count":0,"request_count":2,"received_data":42026,"sent_data":957,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":7,"received_data":304826,"sent_data":3981,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":2,"received_data":41454,"sent_data":1097,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.7","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-08-07T03:45:15.17525Z","alert_count":0,"request_count":2,"received_data":92965,"sent_data":1072,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-02T22:44:21.067894Z","alert_count":0,"request_count":1,"received_data":102779,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-08-03T00:11:28.989538Z","alert_count":0,"request_count":1,"received_data":88174,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-08T21:41:31.970012Z","times_seen":184586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/products.html","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7684cf0b95d7b995bbd0cf997f9ee8fb","sha1":"deca8627b606053b7c8690e0fc0db94f0447535b","sha256":"8b03de0c2c343db105c5e7c9656e244a9d888bc55f6c70ce61b8e1b2976731f8","sha512":"1852311f5a4e5695db05f0b1d0aa907a9d8a753d5b3047fae2b1768e5b27d380717ae6275bee3712eaab2c04b660aed6dd194f95976d1e399ae91a353e7acbe3","ssdeep":"","tlshash":"8ce03005e16a279b106f60bd0b1fe58aa12a0d074b1fb595b5f260171858cc775cbd28","size":433,"data":"","first_seen":"2026-07-07T12:36:49.734294Z","last_seen":"2026-08-08T19:27:59.511748Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/products.html","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ceb759592075783cfde83aff611f453","sha1":"32afb1255d76c641e72b5cd6653b7ed072011daa","sha256":"414490e838dba8780cc42cc29937fb0e1cde886bac18c6d6f782fae9fc165a8a","sha512":"7e4509dfa10a7b70837b46edfe0f5ed0abfeadabc6eb90a98e12cb5a027b8a519ee84bc3f12cee9297930a49ad60d2cbea99e6b688f301a752ae456dce90f54b","ssdeep":"","tlshash":"39f0f424736c422ae714cd658f681fae363434475048209d39dcd81d33899b01ef36e4","size":651,"data":"","first_seen":"2026-07-07T12:36:49.735461Z","last_seen":"2026-08-08T19:27:59.512443Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/products.html","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d68493d76370a47738b59cca70ef463","sha1":"ac18ea7ea86e6855b1d86ff0601536e10faf7f9a","sha256":"bba4e9c012c1b958e8b25a5f7830d5e122bfe0bed911a60b2444aba39fba709d","sha512":"a32c9988a8f2d19d4923da33bcb1e772e3294d0a30711737a38ea7930af15c255088c6e26ae9b9334e8069502d226bdc4be706b63b70cb9e5de0b08b2e874a23","ssdeep":"","tlshash":"fe213a96f7fc366690be70b60d2b64c9232e4076c6035daafcf416940ac8b5925d7f28","size":1368,"data":"","first_seen":"2026-07-07T12:36:49.73635Z","last_seen":"2026-08-08T19:27:59.51456Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/js/ohsnap.js","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa356bad1aec5e2261db4017179b01f1","sha1":"10484b8bb6923e049e9fe402e4998d0bff02f3b9","sha256":"02357807b2693a98e85b647753cc2921229ac6672de33ebad7f9086821ee0973","sha512":"e698c5e3917e70785623a480d5f5daea91c4e5c9919c6c9b4618a432fbde21ab4ef05b1445d30a0fb5a73a54c582d5067aa8d77c6f9b3cb6660d407494db7674","ssdeep":"","tlshash":"1e51ef886506973217f323aa825e6498e730963fa4535d05b88fc3c80fb1c65dbe3ed9","size":2790,"data":"","first_seen":"2025-07-07T04:43:25.052004Z","last_seen":"2026-08-08T19:27:59.472949Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-08T19:27:59.459119Z","times_seen":22223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b73682ce3bdbddfda55507f0ba4267ed","sha1":"582bc437d1f0aec4caaebc712b865f54672edd95","sha256":"d204b348da7cf13557eb140061b8579f3e09db8df65975a0b35f46893704dca5","sha512":"68e256c164e930e4b035fafd027bed303c755135ede761702ed31635581f127c36d5931c8b2d4aec569ee2ad9e5108badca181e2b44c3c880b4756de0a7a3bc0","ssdeep":"","tlshash":"4a21d5743a18107e226a0133e56f66cee5f23715fd17e440408ad89566e4fe5063fed9","size":1240,"data":"","first_seen":"2023-03-12T15:08:29Z","last_seen":"2026-08-08T19:27:59.431215Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amldoc.com/app/img/slide3.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.362Z","timestamp":1786217249362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide3.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 6186\r\ncontent-disposition: inline; filename=\"slide3.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.687655-6186-3282504649\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6186,"size_decoded":6775,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"bb7ad1ccc1c268e0cbe83e30660f007a","sha1":"3e27ebb92b3ba395fb468aba901830a566fe91a8","sha256":"13977a88413e28eea22d7e6a04f3bb6c4a1ee7ca0bbe669a1ef6d4be37603226","sha512":"e0c576ea5970ece59e25d4d8e0d7437fc8265bf9ffb35064a1a566092905c7914f7745a77615cd06937ec4dc9e6a1301ab2a8d14ef34c7590c366fe03159a85e","ssdeep":"192:zSlFSi+fXfpU0H+O9XPgqesCLEn9rykfC01SxYEVSnZ19QHc:miG0eOFgCCLEnRfx1YVSZ19Gc","tlshash":"eed18ff84f25a4e508cc5f84993a2d0be73e493c44fdd42a6da15bd889f481edb126d2","first_seen":"2025-06-01T13:01:52.429335Z","last_seen":"2026-08-08T19:27:59.423724Z","times_seen":77,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/arrow-right-b.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.379Z","timestamp":1786217249379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/arrow-right-b.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 260\r\ncontent-disposition: inline; filename=\"arrow-right-b.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6824622-260-587468426\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":260,"size_decoded":854,"mime_type":"image/png","magic":"PNG image data, 17 x 9, 8-bit/color RGBA, non-interlaced","md5":"bdfb0f13d0e593968b2673df39def568","sha1":"051a8de8ff550b2e1aebd64e3a877e71b71974c9","sha256":"2b4226d4e8295b0b50f3c897d63a0a70a617f01edbcf8a848aec8d31de2768ba","sha512":"07c4efb0e7de372c677d2ab148aaebb86001a45a3c09d841f1d7247fc44ca59049484b547eae15a26ee6e54c358f735d28a07632c884a8acb23ac7657dab3c78","ssdeep":"","tlshash":"d7d02bde3a65a1addd2507b345e6a2143d3f70291042950d7800919a9d1cc48e285fa3","first_seen":"2025-06-01T13:01:52.410936Z","last_seen":"2026-08-08T19:27:59.424326Z","times_seen":76,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/shield.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.351Z","timestamp":1786217249351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/shield.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 684\r\ncontent-disposition: inline; filename=\"shield.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-684-3299412990\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":684,"size_decoded":1271,"mime_type":"image/png","magic":"PNG image data, 31 x 30, 8-bit/color RGBA, non-interlaced","md5":"d61f1be61fd72d2fd74a0e0be9e1bd26","sha1":"ae25d0a6254c08adb998328a53cabaa2be1d8c7f","sha256":"574daae295145dcfcc088057fe691891ef18512afd4382ff302bf25f67d51021","sha512":"c9963c9423adf63d4fab097da28048f5639e4dc30caecfa64b4b0a4ac525765296584797a1d8041303908cac025e7cd0ec3d3a0accf6ff9f670f1cc1007276e3","ssdeep":"","tlshash":"af01d3e827c420632b28283d364f93427d23ff8ee090030d8c53c8ac9403c090d45f6b","first_seen":"2025-06-01T13:01:52.391787Z","last_seen":"2026-08-08T19:27:59.424856Z","times_seen":75,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/team3.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.416Z","timestamp":1786217249416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/team3.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 26040\r\ncontent-disposition: inline; filename=\"team3.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6886551-26040-3076131679\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26040,"size_decoded":26631,"mime_type":"image/png","magic":"PNG image data, 270 x 210, 8-bit/color RGBA, non-interlaced","md5":"971b01cbc79e251ecdd4327f2d96d4eb","sha1":"e23887a2c76c4a4ec4e0b18f4c2249eb9b4b4c9f","sha256":"e30a5bed53a2ab87569aad447ec256b64e41d166aa617f61a69e042bf0a2e4dc","sha512":"b23c8d2038148c6daf4991daf863f1ac147099fd68ea06f41913e75f2da5bd2bd6a1e8e338c1db74b09fc6a7cf6ffa5d1125ebb54dc77d182910cb68624ec9a9","ssdeep":"768:sqNAwDGtouwX97AmzkkerwGC6TtmlV6+Y:T/DeouwX97vokQa6+Y","tlshash":"aec2f1f5467d34203f605e821bdf29f62fe0c99a012ca46b1b10eed5548f7db4c9ad4a","first_seen":"2025-06-01T13:01:52.382485Z","last_seen":"2026-08-08T19:27:59.425484Z","times_seen":33,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/icon-login.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.340Z","timestamp":1786217249340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/icon-login.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 304\r\ncontent-disposition: inline; filename=\"icon-login.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-304-4150922612\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":304,"size_decoded":896,"mime_type":"image/png","magic":"PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced","md5":"eb0c50b250e1cae284b3a625aba26c74","sha1":"c2125af73e88658d72e1645cb89f6d4fdaab00f5","sha256":"be59152dcf3fc367f92b6e48f153c77d542df43eb1c9d177efa90a8e2df95a0c","sha512":"1b47590622e67b2a8db09fefa69261abcfe5ef8602bafd2e887b4dde8b4edaa7e6f6171ef80f6fff56be0fc619b9ecd370dd76ba0a75c08b5511daede5c20c8a","ssdeep":"","tlshash":"fae07dcb6662ec6e4d29899390a11595e931a9d846001e09346a9405a81ec8852de5cb","first_seen":"2025-06-01T13:01:52.421468Z","last_seen":"2026-08-08T19:27:59.427045Z","times_seen":73,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/huobi.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.378Z","timestamp":1786217249378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/huobi.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1002\r\ncontent-disposition: inline; filename=\"huobi.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-1002-3097234332\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1002,"size_decoded":1591,"mime_type":"image/png","magic":"PNG image data, 88 x 29, 8-bit/color RGBA, non-interlaced","md5":"b8f143eb5efce356e4ea3366945b9494","sha1":"03b6cd5f7d482b45490f3a2ad2b610a000b3bd90","sha256":"89d8d864487aa7751969ae761722946c73d21f2fd5deb2c5dafc3d68981159c1","sha512":"760e43d7f9fb7cb06c08a21c3587df8bf04c5071a771554260987717001ad2ece9160ee187c8689087f648cb76919a6aa5388ba25aea8ed922d750c7f0e334c4","ssdeep":"","tlshash":"1c11c8f1703065a495d888ed4b3d003068fb7a6c38518844abd53c59d029145b1f9e17","first_seen":"2025-06-01T13:01:52.42575Z","last_seen":"2026-08-08T19:27:59.427611Z","times_seen":77,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives5-partners.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.391Z","timestamp":1786217249391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives5-partners.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2680\r\ncontent-disposition: inline; filename=\"initiatives5-partners.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.684655-2680-2858619391\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2680,"size_decoded":3284,"mime_type":"image/png","magic":"PNG image data, 103 x 52, 8-bit/color RGBA, non-interlaced","md5":"50c957f18d10f9c20e40333088782475","sha1":"37fd855bac0e97aaa7d0daebb5d12744fe950b44","sha256":"f8384d85334caa5c6390ce8d1493b9bf9369792edc49ce42f27a1caf50559787","sha512":"524da8a684579bbb278f6dec6b07a2a74ec3050260e18fcebf1e10513f4602f990eb5788b3ab45d25c72a838529c825580cd69dbf5596f2e390993583d0bd05d","ssdeep":"","tlshash":"29511b987aab083db06795c5711d55e1eaa2db89de458fcc0686b252801d3dc0e7d941","first_seen":"2025-07-07T04:36:09.448143Z","last_seen":"2026-08-08T19:27:59.428133Z","times_seen":4,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide5.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.364Z","timestamp":1786217249364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide5.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 10148\r\ncontent-disposition: inline; filename=\"slide5.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6886551-10148-3283160011\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10148,"size_decoded":10740,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"03df1faee9acb7dce2fb5b3c063b8294","sha1":"b4e91703c0e07aee0b93c36431d14651101fb70c","sha256":"1ec389614a6dac80ed3342001e9d81432579260aec767c4164be9645688cbf5e","sha512":"b4b9b0bc5a44ec6d031a65df0ed4470a72668cd5a54403abe868676c9b32e911ba3b33172be11e7fdcad9db8fde3df24469e01151a73bbf50ba9bd240e961619","ssdeep":"192:zSMYelaGnppnMRaVBAPOaQpOLIhAlsdrYf3HFIO2B+l0yzGSS13nw0HD:m/elbppQaHCOELflsdrYf3Hv2glASwnR","tlshash":"ed22bf4b0c0dfc20e7f9b6dca6067bfa68ab15c8d8e75f116a4b816299986c3c743021","first_seen":"2025-06-01T13:01:52.430202Z","last_seen":"2026-08-08T19:27:59.429246Z","times_seen":77,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/css/ohsnap.css","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.052Z","timestamp":1786217249052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/css/ohsnap.css HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-disposition: inline; filename=\"ohsnap.css\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: W/\"1782989988.6806548-831-3313699870\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":831,"size_decoded":1012,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"e3dc3b6be853d2eee7ed42d22a0e439b","sha1":"ab03161141d3d03d3908fc4d3cf0d064b4851f25","sha256":"1a5bccc97d410ab9f6f977a5e3b3c5941a25cdb926004a1c2aee2eeadcc7024b","sha512":"697e63527a618c38159e88e5872eb2a999671fc71962891ad656866ea202e59370255c283b25d6e5c72977c750c3cbb3099899d9635c42d616e2ab8515052f09","ssdeep":"","tlshash":"8f016669f908104a373197ad8ba26653fb7a00bbcb0a07483aa0a697ffb50785485dc4","first_seen":"2025-07-07T04:43:25.090069Z","last_seen":"2026-08-08T19:27:59.430628Z","times_seen":24,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.319Z","timestamp":1786217249319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-disposition: inline; filename=\"email-decode.min.js\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: W/\"1782989988.710254-1240-649141169\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1240,"size_decoded":1303,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1238), with CRLF line terminators","md5":"b73682ce3bdbddfda55507f0ba4267ed","sha1":"582bc437d1f0aec4caaebc712b865f54672edd95","sha256":"d204b348da7cf13557eb140061b8579f3e09db8df65975a0b35f46893704dca5","sha512":"68e256c164e930e4b035fafd027bed303c755135ede761702ed31635581f127c36d5931c8b2d4aec569ee2ad9e5108badca181e2b44c3c880b4756de0a7a3bc0","ssdeep":"","tlshash":"4a21d5743a18107e226a0133e56f66cee5f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-12T15:08:29Z","last_seen":"2026-08-08T19:27:59.431215Z","times_seen":80,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/INATBA.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.352Z","timestamp":1786217249352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/INATBA.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2301\r\ncontent-disposition: inline; filename=\"INATBA.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6824622-2301-3199798068\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2301,"size_decoded":2891,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"14193b2b45b89bd5e114982bcfc4ebb0","sha1":"d4a32c4d21307c39a8606dbc1ab2fc3f61e9593c","sha256":"6631d2e8c567a7a95f7a84c73a27de51bbb6c9517765a9e5dd34c4d205a9472f","sha512":"456997455e23c4a8165db2a5b6381aadea3939502bd779124f2e2bb21d63b89bda8dd3320bbc7361747f6405af6217f058ddf37700af017d46622c2f31a9994c","ssdeep":"","tlshash":"4f414bc49e3dae3daac8535802e521e0cacd0c82b4847126ea351bbe66d06c6f80a901","first_seen":"2025-06-01T13:01:52.43208Z","last_seen":"2026-08-08T19:27:59.431704Z","times_seen":75,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.298Z","timestamp":1786217249298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: text/css\r\ncf-ray: a280eb304a6349c5-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 80789\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 08 Aug 2027 19:27:29 GMT\r\nlast-modified: Sat, 30 May 2026 01:45:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:GqiEX9BuR1rv5zPU5Vs2qS/NSHl1BJyBcjQYJ6ycwD4=:\r\nfly-request-id: 01KSBSK7KH697J56JW8R5G2NYD-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":26053,"size_decoded":3054,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-08T21:31:16.069657Z","times_seen":43022,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":4,"connect":18,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/services-icon.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.397Z","timestamp":1786217249397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/services-icon.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3493\r\ncontent-disposition: inline; filename=\"services-icon.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-3493-616435391\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3493,"size_decoded":4088,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"9d0d2c7e02081b3f637d3e90a0fdc56e","sha1":"4178020e899c48f9e6169ae8e5822b47eb97d8b8","sha256":"afd7d95d9a9de5a8cbb0d6afac20d048cfe002d4d066031e8dfe96c650b82f51","sha512":"7fb95943398f91a552aa47309eeab60377a30923383bbccc5703e98c07526c3de32ad2ef2a549aaf9f76d10d6d6c4a0b051970ef1cfd3cc388469fedfaa6163d","ssdeep":"","tlshash":"55714ad31e5fb85e80697a83620b4cd5ce9dbe8c0a0d2ac75d7b9ae05147d82e210a77","first_seen":"2025-06-01T13:01:52.417823Z","last_seen":"2026-08-08T19:27:59.432806Z","times_seen":75,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/twitter.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.413Z","timestamp":1786217249413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/twitter.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 328\r\ncontent-disposition: inline; filename=\"twitter.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.689655-328-3536129176\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328,"size_decoded":916,"mime_type":"image/png","magic":"PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced","md5":"f21ac5c86670628a29ce63eb6cedc33e","sha1":"96fa3a3dbec8a46cf5c68eb8b13a66f46f0cbb75","sha256":"eb07752c89d734eed9f2721ac3e313af97abee0a6fadfe0b708be48beda81d96","sha512":"1c204a95c4779dd34efcd7144585dcb4db5c16f7540d6baf70d4ba46a0631df36a7a09938ab50b785f4ba8bc69f29e5e54c67369d59d5213083f6619dec50797","ssdeep":"","tlshash":"02e0c6d0bd8584b3a66a8aaa81762a03ea032e3f3002982e8d031ce0102ed16cc602b0","first_seen":"2025-06-01T13:01:52.36841Z","last_seen":"2026-08-08T19:27:59.433365Z","times_seen":33,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.804Z","timestamp":1786217249804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amldoc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:12:22 GMT\r\nexpires: Thu, 05 Aug 2027 13:12:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 281707\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18720,"size_decoded":19533,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-08-08T21:41:37.806296Z","times_seen":11352,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/products.html","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-08T19:27:28.711Z","timestamp":1786217248711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /products.html HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-disposition: inline; filename=\"products.html\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:52 GMT\r\netag: W/\"1782989992.5168128-38925-261033611\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":38925,"size_decoded":9867,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (543), with CRLF line terminators","md5":"f7a8926b3119bbeecb444cf2272e1b2d","sha1":"aebcd254b83e582980450781fb3720015dbb24d0","sha256":"4138169808db41b4e60234091ca1d25305452a08828047e1ed51be0fab0726bc","sha512":"1de295629df5e666b5537835a2c17937de5cd65e1f0a1e9950514e0c9ecdad35fe853a0a13b86aa97c418d2d780fc38ab80f63868abab0c98cd141c1b0c0e846","ssdeep":"384:GDwE+RLsXqTpr2Pxuggkj6L8CXQ970R9Q7WJGI7OynlLLKlLKKlLHrlLEZthaDeH:GbqTiLsFPx5/nV4rNHBXFyIK","tlshash":"e0032da0329ea1bb425302db4536778ae29fce30c316b451f6f8637b63cad549d531a2","first_seen":"2026-08-08T19:27:59.434856Z","last_seen":"2026-08-08T19:27:59.434856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":55,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/CDA.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.354Z","timestamp":1786217249354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/CDA.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1346\r\ncontent-disposition: inline; filename=\"CDA.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6824622-1346-2658667085\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1346,"size_decoded":1933,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"97cb21b561bf5b0a810da7ad718f7c06","sha1":"ead1067a15ca8383c9e2f5105b9d9bfd9b57d033","sha256":"76f498f7cf6bcbb6fc7bde525d04e5bea37caf39c785df1cbf4027d5ebbd073c","sha512":"ffa2b15a9504a99ac4a0bf6448583f7788d9f7100104d32852938d3ca47ca10865d6e37ef82aa0bf1d25cd04c4a22409c2ef337b97910d79696707248a60fedd","ssdeep":"","tlshash":"4a2108ef765baf1ff8980f1e828541007eb83f4ac516a10d5ac3d831440aa7d448cf86","first_seen":"2025-06-01T13:01:52.400655Z","last_seen":"2026-08-08T19:27:59.435877Z","times_seen":75,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/ATII.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.355Z","timestamp":1786217249355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/ATII.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2407\r\ncontent-disposition: inline; filename=\"ATII.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6816547-2407-2840529580\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2407,"size_decoded":2995,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"a7a9b783d08a19f326618b173f7863aa","sha1":"0af54edb11c7b22cec7cd541e30afdece2e07b30","sha256":"9bdb5795f1e50b472d72f2d995096c955f3ce55e6e9357077fbbd968bc31b528","sha512":"f444f091742eab86806d3f3b279f3dac442014c622368df21771dcfb3b7f60866b3e30fe26897f2a101f0e7b21f332c293e2f7d3dbfeb050fcb210e5b62c15f5","ssdeep":"","tlshash":"d3412ad46781904e85c8fa3d0a61b7fbe31649e2aca412427ed5cfc087444f142d59d4","first_seen":"2025-06-01T13:01:52.375171Z","last_seen":"2026-08-08T19:27:59.436838Z","times_seen":75,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/services-icon2.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.399Z","timestamp":1786217249399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/services-icon2.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3710\r\ncontent-disposition: inline; filename=\"services-icon2.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-3710-855903985\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3710,"size_decoded":4306,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"645a117700784560ed6213280eeb94b2","sha1":"587c97c6919344463d475f5633eb4ba7b95b82f0","sha256":"f3a4e6a09e09a8b0c967cf6ab0683f293f99bf5fb8bd276d4c4e23b567f8a7e6","sha512":"5f23fe8a74797f5bcf2ad549d276c929c978c38a6876169dba0c1c59f33aa30267691c1914adf9f70e78ecedb8756d0c9f997c1736133f61c8398250b533b22d","ssdeep":"","tlshash":"e9716edbf9f410e72918a6c7888138e5097231652aa32ae5f8517c0418376dfd19fde7","first_seen":"2025-06-01T13:01:52.404972Z","last_seen":"2026-08-08T19:27:59.437724Z","times_seen":76,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/media2.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.424Z","timestamp":1786217249424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/media2.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 905\r\ncontent-disposition: inline; filename=\"media2.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6856549-905-3272215479\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":905,"size_decoded":1493,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"28cf7274dd64ab1f947406c32cf75ba2","sha1":"c4d49c61424101d7fb9f6fac7a9a0fcf8cb27bf1","sha256":"ed83705b2d3d12e1f68580283ba691cf9e46678601e30ee123e765c156feced6","sha512":"dac0a358c34c9c45bb212c8cdb4c21e6824832b756deb48e2429b1f14dbde0e662e3967f25b4dda6169603aef1c645db4ad53c9810c58ee8e12fb4c46780bc45","ssdeep":"","tlshash":"c911b7c4e95c144afacd802366951b9c88fa8d7a2d1b501bed14001d8c26a746b56487","first_seen":"2025-06-01T13:01:52.420476Z","last_seen":"2026-08-08T19:27:59.438311Z","times_seen":31,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide7.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.365Z","timestamp":1786217249365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide7.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5132\r\ncontent-disposition: inline; filename=\"slide7.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6886551-5132-3283815373\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5132,"size_decoded":5722,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"69e7abaac1a6955c81251c41c16c114e","sha1":"ca60c5e6ffb3287a6abab9e419245842c9e3a24d","sha256":"41acd2ca1bd77f21d2bbd1071f3df406f101f3b11002951a1e27d7a6df3e4773","sha512":"c1861bf70aa6a40e5380df3562a8f636e57dcc9a9c6b1e8e558f87feefbfa90ab936262410a9866cdc3d2c6a1ad55f0dd097ee2c4900014aa2965134b1943586","ssdeep":"96:zSspL9i7R5qmgHK12pt16fAJibKH+j/fDM4diQLZkC3MfWV+j:zSs677qtosTobuHyDM4g+ZkMuWgj","tlshash":"41b16de687455b8078ac46b0ef624c84beb21e104d81786d7cdf67f18c2eb0ea943c79","first_seen":"2025-06-01T13:01:52.386586Z","last_seen":"2026-08-08T19:27:59.439185Z","times_seen":77,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/arrow-right-w.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.398Z","timestamp":1786217249398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/arrow-right-w.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 187\r\ncontent-disposition: inline; filename=\"arrow-right-w.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-187-594349727\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187,"size_decoded":781,"mime_type":"image/png","magic":"PNG image data, 17 x 9, 8-bit/color RGBA, non-interlaced","md5":"0707a64d1119dd2252923d16c1195be0","sha1":"2b40dc4d5e70410b376096f19d62c0100090b71a","sha256":"329096dcd4314eb90aba8f34b33a65b18e6752878d9a0f8b171eb63bf2464ed8","sha512":"cc63185d22b22427d76dc4560d5a0ce19e99c72b58070c97c27b2f45399ae95abc1f7bc7710bdb0622fc93630aa62ce0f28650a5ddc79f084c59a6d7d273ee0d","ssdeep":"","tlshash":"d5c0c0df5799adfec31c0dfd12ab5230e03b0c492b518045e810543e1637545a78c71e","first_seen":"2025-06-01T13:01:52.376989Z","last_seen":"2026-08-08T19:27:59.440134Z","times_seen":75,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/media7.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.431Z","timestamp":1786217249431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/media7.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 860\r\ncontent-disposition: inline; filename=\"media7.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6856549-860-3273853884\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":860,"size_decoded":1448,"mime_type":"image/png","magic":"PNG image data, 28 x 29, 8-bit/color RGBA, non-interlaced","md5":"13ad29e01905424a9c6a6d63f3e2ba5f","sha1":"1fa9f4b67c75c808327bde6e220a82a71b7cc693","sha256":"16ef84aefc11aa07a81637f01c1963e75e7ea633d6e3b5483a965db0967b84a5","sha512":"ae9a8be786479f265d461959b86b04ab71fd04d382ba87ebe62cc697f50b2c24c12a495f7a3bde58804c2e5ecbe5990af9d93b957928ece24a10f6ef53895753","ssdeep":"","tlshash":"221186cab39ff8db58bd0374a549e310f97f745ad593000c5dcb4a0836876116a671ec","first_seen":"2025-06-01T13:01:52.394048Z","last_seen":"2026-08-08T19:27:59.441098Z","times_seen":31,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.802Z","timestamp":1786217249802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amldoc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 281817\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T21:41:37.847136Z","times_seen":255048,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":48,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/bene3.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.409Z","timestamp":1786217249409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/bene3.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 11029\r\ncontent-disposition: inline; filename=\"bene3.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-11029-3068332882\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11029,"size_decoded":11620,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"4db9b994b387b4a3fcdbb48d50e47d45","sha1":"4a80e01ce39f793599c9338b0b5b513a67212968","sha256":"8bdf2416ad5bdc66cf5aeb9ba9bf4f608c5572716be67fb35dbaaa45d5612743","sha512":"82a46648891abdd26daae7a73d3cfae931c01ab1b1a7cb97c05354ef00fef81de9c8f132942eb19a83f19cda77011fd5b5e5b6b7232985ebbe2082174e02a879","ssdeep":"192:3SnV8JhUHOSobrZS5XhFPqqpYVB7zzmbzQSpuQO3fFtAN:ineyOSobrZKXPPqqMZCbzQSA3NtC","tlshash":"4732aedd25e9ed3a34e428ff83686418ac20b0375c8d7c5a3a906e995c07404997f1fa","first_seen":"2025-06-01T13:01:52.367403Z","last_seen":"2026-08-08T19:27:59.442441Z","times_seen":73,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/media6.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.430Z","timestamp":1786217249430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/media6.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 804\r\ncontent-disposition: inline; filename=\"media6.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6856549-804-3273526203\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":804,"size_decoded":1392,"mime_type":"image/png","magic":"PNG image data, 28 x 29, 8-bit/color RGBA, non-interlaced","md5":"c7582cce0efe9fcf59053a9083283990","sha1":"c8eade42623e51666ad98d3ee688b087ce354bf7","sha256":"74596e152f59f2300abb87562b12732391a0d5be44e312a8aef9c0f2d163569b","sha512":"5a4b3641bdf948bad5cc428c7f9a3ed5f211dbcd14334e3f57bf2a00d8aa545bb2774c0f9693408cea08fef2a6fb5b429aeeea03e6637197ca4a086a5f189fd3","ssdeep":"","tlshash":"e60112dc4d18e0fe954b4739111a111060092b6d46da114e89fe1c4aeaa5f6e225cf24","first_seen":"2025-06-01T13:01:52.383414Z","last_seen":"2026-08-08T19:27:59.443548Z","times_seen":31,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.803Z","timestamp":1786217249803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amldoc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 281817\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T21:41:37.847136Z","times_seen":255048,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":51,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives2.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.381Z","timestamp":1786217249381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives2.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 19181\r\ncontent-disposition: inline; filename=\"initiatives2.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6836548-19181-378146400\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19181,"size_decoded":19778,"mime_type":"image/png","magic":"PNG image data, 334 x 187, 8-bit/color RGBA, non-interlaced","md5":"1510122c5f3c164936635efb5488dc86","sha1":"2ec73468f71f9dc9af191b5ebde86c287f28b1a4","sha256":"c7e1731f3247de0c891bd553170e77cc1da557439f35cb83e3a85e1da84f4ce1","sha512":"2b1c146cd72e79513fa6b6ed04f2f4985ee27253f322e967aae513e37e5fc397dac1741fc72c02e2bcf8f8ad49d703f22febbbd9bf21f8915262a14136e6bde1","ssdeep":"384:LiSbrWLYKdmUVhh0HmtFLVnW/xKDF/4XG9NkpybtBjNetyekwtJr3xJb:mS3WsKth2HmfVnlF//xbtB9ekw73xJb","tlshash":"d182cf807723832b239f42c183be6ee4b6e1254a1a9ded851b9ec078294fcd375b3195","first_seen":"2025-07-07T04:36:09.41503Z","last_seen":"2026-08-08T19:27:59.445154Z","times_seen":4,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/navbar-img.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.346Z","timestamp":1786217249346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/navbar-img.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 98172\r\ncontent-disposition: inline; filename=\"navbar-img.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-98172-4153871721\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98172,"size_decoded":98767,"mime_type":"image/png","magic":"PNG image data, 840 x 520, 8-bit/color RGBA, non-interlaced","md5":"bb60165383a5edd986e842fba84cadf1","sha1":"da8b01be32e9ea40d0a4f56f79dd4bf78c293645","sha256":"ea364226bb2428fb2b15205eb59cad8eff37c01490dd8e86d58d472a1660efc3","sha512":"e7998b01f9c4af21d18990bc8908741424b588e59cd651f14c513c88b2af6710746f1ac99fca94efcc26dd06833f11270b5a4a693c856b1154eaef866c0b6924","ssdeep":"1536:hQ88siBceemoQ1z31NRQvkE4H23JYOQXpo5SdEiwKnWS4sUEFRqEv:hYsiBce6QxDRQvT5OJiibnL75rv","tlshash":"bfa3022132c7c782dbaf347a9bd1370e2f7666086336fc4021bdb2ab7c9252d5918765","first_seen":"2025-06-01T13:01:52.374211Z","last_seen":"2026-08-08T19:27:59.446567Z","times_seen":77,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.535Z","timestamp":1786217249535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 08 Aug 2026 19:27:29 GMT\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17343,"size_decoded":1474,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8099fd2908b8ff98a6fa32c13b3c27a4","sha1":"46fb2e3603399fb539bb43d472601b2c22644511","sha256":"f6ec0c0b2c87c966c56dd4a1622440388bf0da1ca5574d266d1994010a78ea10","sha512":"5d35d28aeb01a832abcf499a571a4e8e3f4e41ac214eedb2e4631e7a81352148c5a1ee172a933b22df8dacc01b0af6d1343c22a5e90506ce93e21de72671a2c2","ssdeep":"192:NpRdp7opQpOPpu9R27hpOYu+RV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu6RB7D:Nnd1oWQIOrRPQPTzajdfMfPE","tlshash":"a872ac91105be500e6472cc923cf7e26dd4e21627494c57a7ffe2ca8adeac225325b3d","first_seen":"2025-09-05T06:25:47.318539Z","last_seen":"2026-08-08T21:45:23.486174Z","times_seen":3783,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":47,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/%D0%95%D0%92%D0%90.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.358Z","timestamp":1786217249358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/%D0%95%D0%92%D0%90.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2868\r\ncontent-disposition: inline; filename*=utf-8''%D0%95%D0%92%D0%90.png\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.689655-2868-3515289004\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2868,"size_decoded":3475,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"45c0a3262c1608b6c9949f3c5548ea36","sha1":"fc85bd8f0ae9cb4d11266af90acb1c800dc45fef","sha256":"1dc30a7712808af615f6ec331ffc1851b54a4cea627e34bc2d4b3793383628f5","sha512":"6de57cce6471c626045d46b16493100c1a5f3f49f9340c338bd82675dfd6d479ee00b74fe72528bfb88ed9aeada4c9a7e9a8bf423db5268e85d66bf33ed3b256","ssdeep":"","tlshash":"5d514dcd786c79ce8a1cf0a215e91ae922953f715022f9441de12ab83803fb6da553e6","first_seen":"2025-06-01T13:01:52.408266Z","last_seen":"2026-08-08T19:27:59.447679Z","times_seen":68,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide2.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.361Z","timestamp":1786217249361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide2.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 4300\r\ncontent-disposition: inline; filename=\"slide2.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.687655-4300-3282176968\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4300,"size_decoded":4889,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"0802e74f434a3a521bfb626ba70d6f63","sha1":"a775f060e993fad9337c21d445405ce303f24c86","sha256":"78c765062655f1b4bab88312fb09c4fc958d38d7561dbf0d0314abf66894f8e1","sha512":"8931288f13b77c249cf0811315051fce3e51b037d02bdf78fa1568d2319533efc4c96a95d61f2621076be2c0d2d081510f9a3f031a93adfde3df673c7f3ee617","ssdeep":"96:zS4SwaFFFFFFFFFwOXBB7WdTSubQzt66OYQJ4F5xiW3S85aLNS2:zS4V+xBKIeQzZQqFPsL","tlshash":"b2915c37db53015b76993d3acb8ab4791dad3b93dc3318d42ce95acc8a5c0e52aa0321","first_seen":"2025-06-01T13:01:52.436411Z","last_seen":"2026-08-08T19:27:59.448605Z","times_seen":77,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.528Z","timestamp":1786217249528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 08 Aug 2026 19:27:29 GMT\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22743,"size_decoded":1639,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"03d386d3d51356518f1c932bd7d1f021","sha1":"f20bdaa14bb1dba0ae6b28e1c455976bcc6e0081","sha256":"e833d17f31411e640714d4c41bd3d264b7c2b48b4740ce7ea6d7988f50e58d69","sha512":"dcbd99af933cbe40c84ba846643ac9e9e5b070e391a04d2d608a0f89f470b31aea8bee06ba7048fb2e7140eaeb75ce1c990d32444736469826bee4c96ffb2dc5","ssdeep":"192:WpNmp9pKpO3tp3pxYp5NnWjO3GAxRKNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NP:WLmXoKtZIB1OKYXuM0p2+g7GQK","tlshash":"d5a28992002ba400ab971dc233cf7f3aaece10856085d1b96ffd0dc59cead66436876d","first_seen":"2025-09-10T18:54:49.359958Z","last_seen":"2026-08-08T19:27:59.449637Z","times_seen":9183,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":35,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/logo-trustpilot.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.348Z","timestamp":1786217249348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/logo-trustpilot.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1864\r\ncontent-disposition: inline; filename=\"logo-trustpilot.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6856549-1864-1158287309\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1864,"size_decoded":2463,"mime_type":"image/png","magic":"PNG image data, 117 x 30, 8-bit/color RGBA, non-interlaced","md5":"87ac191111810f4917347d918de5ab81","sha1":"5c9f9de5c9ddf72f58b9ff833f7a945d45c60a6c","sha256":"817668b6f09724724028aeff54f579ece3df2f0a3e8c83aa5e8aafda58418500","sha512":"f88d2eaecf2b99100063aac90059d31669d61545c5ab76b4266c3dcd13ed8833fb9cf050d5f4fcb5acc1229059ebe548779080852c57ed2d410ed2604dfed7fe","ssdeep":"","tlshash":"7731f98cedb1d4fd524458c7da5ff084a50eeb02628166af353074304460a0c49c6567","first_seen":"2025-06-01T13:01:52.378809Z","last_seen":"2026-08-08T19:27:59.45021Z","times_seen":74,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide4.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.363Z","timestamp":1786217249363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide4.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 9148\r\ncontent-disposition: inline; filename=\"slide4.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.687655-9148-3282832330\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9148,"size_decoded":9737,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"d89b5f1ccded5985095b82249ea18c90","sha1":"e591f720f3e456544e69a6c7c760c88cb33875ba","sha256":"00646d20ef57bd7dddd046946b9733f5d7dae1f73def79a2691b9bb47abe7329","sha512":"579caac269e871812667e4e73eb113d7ed4658130362e3b65e5ec86b3257650fc2182fd5643da1d79fc1344aa1bdaccc88f8fb17f39b9016bc2dba01965bde24","ssdeep":"192:zS4qR+GD7hqPhZdt8u+2M912EGFUy0WydxfYopa2sc77wSnhT4cev8nM:mTf7hqPvj8u+2s1KUy0WynffbX5/nM","tlshash":"9b12a068826b4d5e573d86b637055743e043eb3dc3a700e6b82fb2b0e1dd80bc128a60","first_seen":"2025-06-01T13:01:52.376016Z","last_seen":"2026-08-08T19:27:59.450733Z","times_seen":77,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/media3.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.426Z","timestamp":1786217249426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/media3.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 793\r\ncontent-disposition: inline; filename=\"media3.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6856549-793-3272543160\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":793,"size_decoded":1381,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"f7e2e16466d585dc637e28033832de39","sha1":"e1a8b4bdc1cbbd65418412c14ae59b4329a52e42","sha256":"e45d45bc2d25ccafb4da48aa57b09e6cf4834dabb10135d7973bfee7556990af","sha512":"67cb792007f20d08145e3c3b6c75424ed48f9edbb0464ef9442a116964e068438cf7377f36b2e5f360cae40b3d1c8f7bc60e4b3431cd280ffb4094616b55c25d","ssdeep":"","tlshash":"4101cafd9f09f45ee21552a04ec5ff412c63472cc678b01f34454492410984131c7543","first_seen":"2025-06-01T13:01:52.390908Z","last_seen":"2026-08-08T19:27:59.45218Z","times_seen":31,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/Nt9kMbc/bg-2.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.7","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.740Z","timestamp":1786217249740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /Nt9kMbc/bg-2.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sat, 08 Aug 2026 19:27:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 60396\r\nlast-modified: Fri, 09 Feb 2024 00:29:47 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60396,"size_decoded":60761,"mime_type":"image/png","magic":"PNG image data, 352 x 502, 8-bit/color RGBA, non-interlaced","md5":"bb29d047afa4888ffcd42ac121944e11","sha1":"3cebc5d2e3672f3de53010bfe2db486634e70ca3","sha256":"fc56b4108c9ad46a4a22386e44f8f1fab029396644eaa022671e10e39f4a463f","sha512":"012eafa933d01158cc570c370f40235215899b432f633c479299c98db454e5f7c9edf75c00731d97ff5bf3c2944dd655b13bf71bd9206cfed47a19f1b0479b5f","ssdeep":"1536:5Z5vZFdGAQ8LBgNhuTWDxv6z+20BBms6KWy0/AGTA:75vxLWS+xv6zH0BBmH3U","tlshash":"7843020a13499fcfbb1631544a5f2d80639a3d3ab84d9a785f9a6376b731e034d13d0d","first_seen":"2025-06-01T13:01:52.406806Z","last_seen":"2026-08-08T19:27:59.454107Z","times_seen":76,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":6,"connect":20,"send":0,"wait":21,"receive":45,"ssl":739},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide1.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.360Z","timestamp":1786217249360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide1.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 6625\r\ncontent-disposition: inline; filename=\"slide1.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-6625-3281849287\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6625,"size_decoded":7214,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"6c95d3ec9cd8e271b2478fe45922f26b","sha1":"d1ac1d941c66cdf41625c158aed080feb666f2c8","sha256":"908cdcf51c5c8ee033bef41d259ac6c0abb3d07fdd2c6fa99af4f4da6f68b5d9","sha512":"036015d2a7dad12cc8ab5b554f5c3ca19aacc0818c753c455e19ba5b2b5ac5059df151f6f57542fe6fdcd6c9b8ad14fcea17fe24adb57cb4d87924c07195f152","ssdeep":"96:zStYIa1atapHBP732vmwK8/1mqbnM5sqtxtQKCaLf3FtNa3mXQSC8P9NrmJ8KTvK:zStY+tapHFANKsjbIDrConNWSCK7rCTy","tlshash":"16d18fa76c78188dc4dda7bac0b8be581e52cb1580621b96bfd692f70e830b01df5835","first_seen":"2025-06-01T13:01:52.39012Z","last_seen":"2026-08-08T19:27:59.454669Z","times_seen":77,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives2-partners.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.386Z","timestamp":1786217249386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives2-partners.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1642\r\ncontent-disposition: inline; filename=\"initiatives2-partners.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6836548-1642-2855866876\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1642,"size_decoded":2247,"mime_type":"image/png","magic":"PNG image data, 102 x 52, 8-bit/color RGBA, non-interlaced","md5":"7fcb2b609eb3d0713a079f5808d35086","sha1":"14dcfbfccb90f0cc5868f7c18ee81c33061a4bca","sha256":"7f68dd2f4f9c0c3017513703f69dafe5b6a14f7be280496f8641d04984932743","sha512":"165013eb6ad0ca31ef632f8ea926e69ecd3168f9189be8ca02a961dc831a198466e87cc0c9cb382b80d483cfafed5b671b47a968c626819da0d53f5c3ab13861","ssdeep":"","tlshash":"9e31c8ea4338de3d79c456b746ebb5983a346e171072dd5f405a30d22116130a36846b","first_seen":"2025-07-07T04:36:09.419006Z","last_seen":"2026-08-08T19:27:59.455807Z","times_seen":4,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/team2.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.415Z","timestamp":1786217249415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/team2.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 27546\r\ncontent-disposition: inline; filename=\"team2.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6886551-27546-3075803998\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27546,"size_decoded":28137,"mime_type":"image/png","magic":"PNG image data, 270 x 210, 8-bit/color RGBA, non-interlaced","md5":"8d6a610d21b88f896dde278e781711c1","sha1":"da965611e454f72e18dbfcab033840a4e9b045af","sha256":"a0a66b24c37d53012035f90ee67a502022dc1de5a4d2bb82ccecc9b89c50f226","sha512":"b590089cd50902f0d999c06568eae1ccb5f452ce7a7f504c2ae9a2096c4baa9d575deb50f52f9dceaecabf2565a2f003bf35e9cfb0367b1bbef8697c5366d0de","ssdeep":"768:G8wlJtQdb4ThvmuQJGe4i42DzlEPGRhovAGlwl1dQtvC:GZvzQJGeAPG0HSl1dQM","tlshash":"e2c2f12fe79c1c36a0ab98d729aa60f223d2707405177d7198a4fd0b849ba30fd57353","first_seen":"2025-06-01T13:01:52.413322Z","last_seen":"2026-08-08T19:27:59.456765Z","times_seen":33,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.296Z","timestamp":1786217249296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.2.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18688\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 30 Aug 2022 20:09:06 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7TwZJfHo%2BlqLqVN4ZMyPsDEoIIu0yZi4KoMefUT3wSWm48UyaKsu64CxKzcZf%2Bd1krKkzDSWjbYo59lnAi99775Wm2%2Ba4kRsgrhKK039C9edxLvvLddElibObkTGFJ%2Bupp7zD%2F2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a280eb303db90b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101784,"size_decoded":19683,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"6cb5a85b30082e3d59d7e371e002ce8d","sha1":"0c639634f474b4601a7937f440096185f3a9d8d3","sha256":"01b035efb5dfa529c512f82962ed633328222da6f33c224244806d4798c67349","sha512":"c61e8efc2910a0f3960dd6130ea79174f0957754a9bc203d5d77149d94b616624da75728005cefb4237d0666a613ee1a1caf32c941d44827091e05e5a13c93d8","ssdeep":"1536:4fMCMPMCMjMCM4MCMwMCM3spL70pgbPMfjSFbTyMGu3prfZCC:070pgMGFvyMGu3pfZCC","tlshash":"23a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T20:32:18Z","last_seen":"2026-08-08T19:27:59.457717Z","times_seen":5643,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/in-icon.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.412Z","timestamp":1786217249412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/in-icon.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 345\r\ncontent-disposition: inline; filename=\"in-icon.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6836548-345-3475967026\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":345,"size_decoded":934,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"3814898ca0f0b3b8eefe16f619c4ebe3","sha1":"8917d31077138a4b599ba1d6af74c652f67c5d73","sha256":"785486ed08df5f7c706d12427d6697c577f72c1725ff0850c371ee1288bc0991","sha512":"a653bb8b3f6c3dfc047ed27b16aee97d368b5be3c861f5c32a8fa97dd4f1a46dfddd8ce8601325954589c9690580ba823ab0255cdb70b4d9e6590f5e5cddf4bf","ssdeep":"","tlshash":"f4e028d1d7803430c22ab4e503dd50789c3663de03075418cee5d935014ccd4c70a2f3","first_seen":"2025-06-01T13:01:52.432972Z","last_seen":"2026-08-08T19:27:59.458257Z","times_seen":33,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.299Z","timestamp":1786217249299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a280eb304a6949c5-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 11389\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 08 Aug 2027 19:27:29 GMT\r\nlast-modified: Fri, 07 Aug 2026 06:32:01 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8mhhK6WerRskNTu3fWZ4O8xDWv8cIr5fk8QLrDhplo4=:\r\nfly-request-id: 01KTHMJH9YDDH2T4ZH9FJV0B83-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":14239,"size_decoded":5380,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-08T19:27:59.459119Z","times_seen":22223,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide9.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.368Z","timestamp":1786217249368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide9.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 8406\r\ncontent-disposition: inline; filename=\"slide9.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6886551-8406-3284470735\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8406,"size_decoded":8996,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"7926e740f7ebac0ab7abd9f4d09af5e9","sha1":"fc53bfe7aa91f3bfc3e5ca25b2b2bff63841ee41","sha256":"64db5dc0b8d39186ab90dedf50e3c5971d7a4cc53015c0742046feb2b0f73d0f","sha512":"f8baacb4382891ef901a9428953725ad61cdc7a01ca3261d7e839da1071ba8bb157016dcb3005063ea1c3157fc5bc270a32d0aa46c52df5ded5eabb762471a27","ssdeep":"192:zSfq5TLNhkxKTuVkR49skUbGBa9/mOVmDtvZR170Ghi:mfUuxKMivbGBMmd170Ghi","tlshash":"10028e7cc760746fdccf253a688a52f211b3c7abba50ee255f1b019a21f62185241ee2","first_seen":"2025-06-01T13:01:52.41506Z","last_seen":"2026-08-08T19:27:59.459637Z","times_seen":77,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives6-partners.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.392Z","timestamp":1786217249392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives6-partners.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2642\r\ncontent-disposition: inline; filename=\"initiatives6-partners.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.684655-2642-2859536896\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2642,"size_decoded":3246,"mime_type":"image/png","magic":"PNG image data, 101 x 52, 8-bit/color RGBA, non-interlaced","md5":"b7e0485bae2bef10fdb1d367f4a8c095","sha1":"11bda1b96e8adc77288e2f7e5ba662fb8cc7d54c","sha256":"454f2db9867df48914dd050cc2e05ec1b4b2378ccab8b94a0f8ccb294655f06f","sha512":"09153841a236de03e83d752adf212b2b353973e9797d811fb3ac471ae636fe94cf48f4fbddb6b74ba040f7fd840750f4c8d4210e18d55db4a12efa9cdbe4983b","ssdeep":"","tlshash":"88514ccb01068f7d02acf2bd98828a2591870a2db544b92479416544d110acdd7f4ffc","first_seen":"2025-07-07T04:36:09.432879Z","last_seen":"2026-08-08T19:27:59.460163Z","times_seen":4,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/team4.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.418Z","timestamp":1786217249418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/team4.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 41573\r\ncontent-disposition: inline; filename=\"team4.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.689655-41573-3076459360\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41573,"size_decoded":42163,"mime_type":"image/png","magic":"PNG image data, 270 x 210, 8-bit/color RGBA, non-interlaced","md5":"d8745492b91305f41dff7e7c048bfe58","sha1":"426d2db9ba8ab806b93c4913d4b9e92fec65864a","sha256":"4a7f002e9a5a99388a00b73bfa687d36dca9a10bf4ea91c1b1d82885092b0c9e","sha512":"8f9c483e9a1640471c57af494b57fc91382db84599e0d9885c3d0d44ffe61eb4513024c7fcba0ae5acafe8fb642ff58bab65fbc3794d931983f71a60217d8c69","ssdeep":"768:3gxbA8Vp73je3ZLk0WF9N1daYKEbnh93o1Ys:ubAwLj0ZLkPF9NzPF94f","tlshash":"a21302b7b0910d222f92bdd070061d5cb512deede31d9175c1ffae1882816ed92a22cf","first_seen":"2025-06-01T13:01:52.427569Z","last_seen":"2026-08-08T19:27:59.461086Z","times_seen":33,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/LSW3.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.356Z","timestamp":1786217249356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/LSW3.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1545\r\ncontent-disposition: inline; filename=\"LSW3.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6824622-1545-2844134062\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1545,"size_decoded":2133,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"754f316a6b2d4ccb5c9a50c4540e2ef0","sha1":"58c71c1f6950177e9aa0dc8ce3e34daa89fa4adc","sha256":"7f7fcf0d2f06440b99811706d96fa4d8722b95961565024231e4d84ffb3caa81","sha512":"759b1d7ef5a957bd5c36a2b005aa53f3dd571bf5a53bed682ed4e84c05693b452b943b6ac1bc3f0d487af48c0ba77416c492875dd8c9db0bbd1dee9358e5502b","ssdeep":"","tlshash":"ac312c8df243d4f5cc77ad7b00584b2c884685c64f5878152515d3170d537ce4f65767","first_seen":"2025-06-01T13:01:52.396786Z","last_seen":"2026-08-08T19:27:59.462364Z","times_seen":75,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide8.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.366Z","timestamp":1786217249366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide8.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 8649\r\ncontent-disposition: inline; filename=\"slide8.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6886551-8649-3284143054\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8649,"size_decoded":9239,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"f73013855ccde4d3c144d8530cec3d1a","sha1":"3648f9205b5eac29542a3d76b72d092831382a1d","sha256":"a24a8365b1f826d70ff497de45334240e430af3eabeaf85b8f724ae5f67159d2","sha512":"9404b0e7ee8ae29f08e6a099842bca12b9101a8c573b03683d7b05087fe33db38871fbc56592a479367ef923149bcc5d39d90c198cf1837105b26365f870ad6a","ssdeep":"192:zSrJxxWnHbDDJoAGZs4M84tmX1LDUvOHARVSE1zquJwCVK9hPOo6Tz:mNzWnHfXH4N00pQAARDqawCVAFOo6Tz","tlshash":"4f029ea6680ede46e8d5044aa427a26260fd395c4d20eb32a2af2bf0d9d1134c561fed","first_seen":"2025-06-01T13:01:52.424008Z","last_seen":"2026-08-08T19:27:59.462877Z","times_seen":77,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/okx.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.376Z","timestamp":1786217249376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/okx.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 391\r\ncontent-disposition: inline; filename=\"okx.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-391-2712210135\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":391,"size_decoded":975,"mime_type":"image/png","magic":"PNG image data, 72 x 21, 8-bit/color RGBA, non-interlaced","md5":"407cc8edc023a59938b48b84702241e6","sha1":"9bbdffb0a7592cdc27af353108a3e69153d30448","sha256":"f1f6560268230bad18794ccd48be54d8739f6986ef58399c19b24421a74c4e70","sha512":"c0ddccda6e1048ffad3a1b6288cbaf29460963ccbc9abf33f8e4bf8be1136a2d9c89819d7079593d16d320a8e72181d1b68aa54fca883298e518372247a1e0a7","ssdeep":"","tlshash":"39e0f1e12d00107d806d1e5f70f564e1f13f2a2b84411c0d1eb533243121824df12211","first_seen":"2025-06-01T13:01:52.372397Z","last_seen":"2026-08-08T19:27:59.463843Z","times_seen":77,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide10.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.369Z","timestamp":1786217249369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide10.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 11554\r\ncontent-disposition: inline; filename=\"slide10.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.687655-11554-3470855159\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11554,"size_decoded":12146,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"a9bb7b778f36bf5566e1790a135f9d49","sha1":"ce95149fcdf402c289f92c14fe30e13349ca784d","sha256":"ce77aaf2e13c1a1a29f763855dbd69d67e20b82fe3ba274336e7fc6599ad891d","sha512":"2edb3a871b6d15f745aa627e5bfd48d8b1d4267422183ff4001ed728e730385129fcfec5d89f195dd121dd35058fb5d2e242c1191b10e804406f77f33d9a5901","ssdeep":"192:zSqMAX44c3KkgwRNz+PXkXTsBy6bOwlfASRafMPD16hxR5I6hzNcDQRs2vd:mOXsaKU0XYrOwkfex695I6hiesid","tlshash":"6732bf03e769acb764079364b5363070fb0dadf66aa21611e50939dc8b1072f0f5ec9a","first_seen":"2025-06-01T13:01:52.393141Z","last_seen":"2026-08-08T19:27:59.464914Z","times_seen":77,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives4-partners.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.389Z","timestamp":1786217249389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives4-partners.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1902\r\ncontent-disposition: inline; filename=\"initiatives4-partners.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.684655-1902-2857701886\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1902,"size_decoded":2506,"mime_type":"image/png","magic":"PNG image data, 132 x 52, 8-bit/color RGBA, non-interlaced","md5":"9af7108818783bf78196ceaca6674c3e","sha1":"01aa6d9dae55adc7a01267e273f20e144596032d","sha256":"c639109f4166822dbd20a628e54064ee46539ef606e183660d148172bc143317","sha512":"b9de837d74f79046873fca163122df264e0c94e97105d5d784b1b6b881f024c1d3fcb67336c7f141e6b6aefdca8d81b34940373cc111bfcb6e527f191958e198","ssdeep":"","tlshash":"8841e89fc2e2503fcd5659030e0a68269f599c2949077e0f056dffb41c1b4fca991a0d","first_seen":"2025-07-07T04:36:09.439029Z","last_seen":"2026-08-08T19:27:59.465841Z","times_seen":4,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/price-img.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.405Z","timestamp":1786217249405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/price-img.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 9537\r\ncontent-disposition: inline; filename=\"price-img.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-9537-3925871874\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9537,"size_decoded":10129,"mime_type":"image/png","magic":"PNG image data, 173 x 74, 8-bit/color RGBA, non-interlaced","md5":"e0de2a46b4b5aa39ce3956e003845de8","sha1":"861d24052c07520a81663bbe201b5c6f8c413ce4","sha256":"1500d81ed8904523c21b50017da0000bceb3406c6f34163401611abec6a68812","sha512":"5c87306b447de7350b02d7129989a1b7fc4e8d3acea2503d41ce2cfd801d06749b3de389e514506cf337522a66d2deda4154a3baf998e3f633e8a193feb76bdd","ssdeep":"192:ASvIUbA/Gt4X9AvvAFnPLsZ+1fSkV3xc9MDbF1XMU3opN0t1:nvIjGeX9Avmnzs+h20Fto0r","tlshash":"6112a0d8724a6b3157c34430f9c297c49841aa8bfa1e18fd2676df3a54e92360ddb381","first_seen":"2025-07-07T04:36:09.399975Z","last_seen":"2026-08-08T19:27:59.467064Z","times_seen":6,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/bene1.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.406Z","timestamp":1786217249406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/bene1.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 35110\r\ncontent-disposition: inline; filename=\"bene1.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-35110-3067677520\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35110,"size_decoded":35701,"mime_type":"image/png","magic":"PNG image data, 277 x 277, 8-bit/color RGBA, non-interlaced","md5":"8301fbc396ed3e0cf88f1c620d70455c","sha1":"21fc668df0a248b130f2323b6ef65cf34c711ddb","sha256":"2cdca3cb0bc0853666b0e32bb0ee3ac37965a2811dac301d301c50f7b2b39592","sha512":"d8618ab3fa734b738f2612b567072d7fc1b20b6355e72222dfda618c65cd91af0bbb798ed0c29f0029a6d02bd0d7a09f1091c6655a969f492cb9b87006183a20","ssdeep":"768:UsJsY3GSZL81+Wvcpc5pyGaAPr33nqInmKazXPS8:UsCY3GUm/kc5sq73n5mKazq8","tlshash":"33f2e1fb57601307527508eb666f9c8fe1f9d800526b3cb868d58dc82c99a5c9ef121b","first_seen":"2025-06-01T13:01:52.41948Z","last_seen":"2026-08-08T19:27:59.468041Z","times_seen":73,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/bene2.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.408Z","timestamp":1786217249408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/bene2.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 13449\r\ncontent-disposition: inline; filename=\"bene2.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-13449-3068005201\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13449,"size_decoded":14040,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"5b20293786c426da26f33d03397d2877","sha1":"dc840b4ce271704507c8a5f8922dd56e6e5b4b3e","sha256":"1a86a9ab3ebc91211b6edad8c3ca497bd1cf25f73aa7d7d591d3b8f456812f2f","sha512":"a753e6be7d3d52a8b6b5883bedc548c836167924d9cd1a71a87bafb5b96dfcd9d92e24b580c3b051dca69c68d2bf81674bb7554ad55b550c5ea2c3e9927b0aea","ssdeep":"384:iCpcGPYmb1dD1h4VGcIMkB03Yk6Dqz9+4m7XDJyIE:hCp01t1WbIez91m7XDJyIE","tlshash":"c452c01e46c47aa78d2bb7109abbf1783dad1f28cd998d27d3105502484f06dcace4f8","first_seen":"2025-06-01T13:01:52.377825Z","last_seen":"2026-08-08T19:27:59.469038Z","times_seen":73,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/favicon.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:30.110Z","timestamp":1786217250110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 842\r\ncontent-disposition: inline; filename=\"favicon.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.7516577-842-2054031759\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":842,"size_decoded":1431,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"476eed806d70bf9f1bfdecf4baf2e309","sha1":"97e7c78720573a83268c59ca94c2cd3f4509b87d","sha256":"5f5e527b934604aca616122cb13de8a844caa057dc72d8e9310086998f6c61a7","sha512":"e424a2d6608c004c7f8b4d122c9855d5148ed4d8ad6cbfed40e14f647b8ecc50b1c46c2d5c5357f6b30ec8b75f6aa332e8fa8698dd6599c4f9b0e5b5a3874721","ssdeep":"","tlshash":"870170afa2392807d0f80e99eb12528edc91934c611abe14cc280703867fcb3f2a1d03","first_seen":"2024-10-04T11:01:22.290979Z","last_seen":"2026-08-08T19:27:59.470099Z","times_seen":324,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/rate.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.349Z","timestamp":1786217249349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/rate.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1367\r\ncontent-disposition: inline; filename=\"rate.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-1367-2898266929\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1367,"size_decoded":1954,"mime_type":"image/png","magic":"PNG image data, 232 x 41, 8-bit/color RGBA, non-interlaced","md5":"f3d911e76880a5fc8bd508341ef315ef","sha1":"7191657b54fe43b511a8b89cdbd7e7806f9d1c05","sha256":"854092d9142763d9eb8b4bd2f2bab9211590aeccbf11b7de27d95210373ca02e","sha512":"1c1708a24d2e40eddb6e685a6281c8a4996a0b5ce26fec95ae5e4cbea7665df1dd97716190d89980df0012bfb93d144d2eda3c2b2bdd7afdb9634b3f96ad889a","ssdeep":"","tlshash":"5f2108c45dc5a5b3811cce87bbe572519a1d3406e3a7c17dbbc51718261c10bc687119","first_seen":"2025-06-01T13:01:52.433808Z","last_seen":"2026-08-08T19:27:59.470597Z","times_seen":75,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/services-icon4.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.402Z","timestamp":1786217249402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/services-icon4.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3086\r\ncontent-disposition: inline; filename=\"services-icon4.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-3086-856559347\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3086,"size_decoded":3682,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"6cfe46d382e7be5a375d3a5abe22e9f8","sha1":"314d9d4e8498ba69e904013ec969bd82dd3b21dd","sha256":"2b1185803fd5232a93f6bce7e427e49739ff7c9395eb69818201de0d709b4b26","sha512":"9b8212f1e63bce1bf34fc253265316e83c1564bd9584e156307750fb73b7819967aed1060e1f296a3ed32c291f3a9239396d31517f1699650ec30cb7c38efbfa","ssdeep":"","tlshash":"51515db2b39d153f6ff917298cdce001140a76c341d5e85e2eb337a914865d28b12841","first_seen":"2025-06-01T13:01:52.416944Z","last_seen":"2026-08-08T19:27:59.471515Z","times_seen":76,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/media5.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.428Z","timestamp":1786217249428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/media5.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 858\r\ncontent-disposition: inline; filename=\"media5.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6856549-858-3273198522\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":858,"size_decoded":1446,"mime_type":"image/png","magic":"PNG image data, 28 x 29, 8-bit/color RGBA, non-interlaced","md5":"f2fbb4abf1373b63eb6d72994686e646","sha1":"f4fd09f96abc58f5ab2ff65f59a6c45e5a8290cd","sha256":"7a9102bbdf13648d20812604a24895fd7cbc20d61ffe6d2ff041b01dfca4a834","sha512":"07d78df9716f0cccadc03fe97e031f6d714226a2f6043fd3d17458c76ffbea0587d29837df5fe08d4c042a879f2c4d34dac728fb323628cd7b129f081070bcad","ssdeep":"","tlshash":"a11186df7341d8dbb686c7cf91288769d2aa452bd44d223a38643c264dd96c40fc22de","first_seen":"2025-06-01T13:01:52.403188Z","last_seen":"2026-08-08T19:27:59.472037Z","times_seen":31,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.799Z","timestamp":1786217249799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amldoc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 281817\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T21:41:37.847136Z","times_seen":255048,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":44,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/js/ohsnap.js","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.294Z","timestamp":1786217249294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/js/ohsnap.js HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-disposition: inline; filename=\"ohsnap.js\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: W/\"1782989988.689655-2790-2908359494\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2790,"size_decoded":1690,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"aa356bad1aec5e2261db4017179b01f1","sha1":"10484b8bb6923e049e9fe402e4998d0bff02f3b9","sha256":"02357807b2693a98e85b647753cc2921229ac6672de33ebad7f9086821ee0973","sha512":"e698c5e3917e70785623a480d5f5daea91c4e5c9919c6c9b4618a432fbde21ab4ef05b1445d30a0fb5a73a54c582d5067aa8d77c6f9b3cb6660d407494db7674","ssdeep":"","tlshash":"1e51ef886506973217f323aa825e6498e730963fa4535d05b88fc3c80fb1c65dbe3ed9","first_seen":"2025-07-07T04:43:25.052004Z","last_seen":"2026-08-08T19:27:59.472949Z","times_seen":24,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/team1.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.410Z","timestamp":1786217249410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/team1.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 19479\r\ncontent-disposition: inline; filename=\"team1.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6886551-19479-3075476317\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19479,"size_decoded":20070,"mime_type":"image/png","magic":"PNG image data, 270 x 210, 8-bit/color RGBA, non-interlaced","md5":"6ec572198935171d89898a1daa8aa9a4","sha1":"359512dc89420856210cbd5f3c724c4997a66c0a","sha256":"fc40c9208819d1cec6f2c8b36a271c97b18becff834cea07207b959dd9bbb730","sha512":"efe15aa8e95dce553c02d5039fbcebc3e90557e8d369388e160fb6d06d543b615f1dcf244619166dad339fdf664f570afce99ea4057527f135646946b318e34a","ssdeep":"384:n90y6xF2lIsf/q4+VKz1P1QzkzIa3bhyyCr10t/:uyyF1sf/7+V4hqz7a31yVr1u/","tlshash":"a792d00ad46d349b20f4189996c27b19ea81b28a4f17b99e01dd58eb83231d199df38f","first_seen":"2025-06-01T13:01:52.384182Z","last_seen":"2026-08-08T19:27:59.474096Z","times_seen":33,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/faq.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.419Z","timestamp":1786217249419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/faq.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1738\r\ncontent-disposition: inline; filename=\"faq.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-1738-2701855421\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1738,"size_decoded":2325,"mime_type":"image/png","magic":"PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced","md5":"5d24b460799ddff1b0c5f23adf110469","sha1":"cf6778469e56d44617dbe9a8300750bda5e9672e","sha256":"9edf7e20a7dea0508861ce6962f0405b2deeb8ac0053da384674a8f288d5127c","sha512":"3cea1c4ab719bfdcdee8555ca63f560f82d1d22ba8fa6a8b8ab8cbfa033a7b0708fc252a23ca6768fcfaf6a696d3141440c1569a5f4d7b7bd94a7c31a344026e","ssdeep":"","tlshash":"b231e9dabb3575ff40c932fa71494611ac9b462e4724401a5d054beb3f940c88e3446f","first_seen":"2025-06-01T13:01:52.379687Z","last_seen":"2026-08-08T19:27:59.475429Z","times_seen":74,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/logo-header.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.333Z","timestamp":1786217249333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/logo-header.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1845\r\ncontent-disposition: inline; filename=\"logo-header.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6856549-1845-86117836\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1845,"size_decoded":2438,"mime_type":"image/png","magic":"PNG image data, 160 x 33, 8-bit/color RGBA, non-interlaced","md5":"dfe49a2decae2a2e8f65993b03884bf6","sha1":"43dc2b294190d3b21aa9415b3998ff783d9b09ef","sha256":"39fe3412bbdd2ba4e3d09027516bb28ab5a647716ddb1c943c3b5747e44d4357","sha512":"0bf1ed4029f5b5f428e852e419e7b4d8722683ffe35f8a78ff14e03e4231d069664b7108a95cdac452493b2712241fec10008ad8cf36670c330f5758ca830c59","ssdeep":"","tlshash":"cd31f767ce70e8be6659c7602422e42533bda711580f89ae9d995802c2ffb3d14ca982","first_seen":"2025-07-07T04:36:09.421586Z","last_seen":"2026-08-08T19:27:59.476564Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/burger-menu.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.343Z","timestamp":1786217249343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/burger-menu.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 181\r\ncontent-disposition: inline; filename=\"burger-menu.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-181-110038510\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181,"size_decoded":773,"mime_type":"image/png","magic":"PNG image data, 24 x 15, 8-bit/color RGBA, non-interlaced","md5":"0a8ab6524d52e897a8038c831cff2e2f","sha1":"2cef072df1f6c0b952a97c72089d444a9ee1f2d7","sha256":"182284a82ab91c11fba9b3aa982f85450d3cce477e77c414f180fd120e7c5dca","sha512":"6722883607369c2ff37e9060ee249b69e36c4f219fad44e64402ed839c007cd6e8988b031ca6006fa2fa3d311ad21ddc8eaa2ef574781c6561efdf64416cafcc","ssdeep":"","tlshash":"93c0c0e205009c75992f89fa108f13f4ac331fda0441100849cae0393c0dcc0c1943c2","first_seen":"2025-06-01T13:01:52.416085Z","last_seen":"2026-08-08T19:27:59.477573Z","times_seen":79,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide14.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.373Z","timestamp":1786217249373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide14.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5827\r\ncontent-disposition: inline; filename=\"slide14.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.687655-5827-3472165883\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5827,"size_decoded":6417,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"da12b2c4e30f0e22720dcf919ff9166c","sha1":"92e6d5a70342929a4228156f85ecb5dba228f7eb","sha256":"e79169df2ee12e4a49d50f188f404b5b92dd968d730518ab22bbccb73f34e557","sha512":"3fffbe0cd839a965889630bdcbe002f7d03324af8e7dfb15e40b82e9b083c5cb8a77f1074d088b8a023bd6c1c24b4fdf69bd6c25e1466cc6660e280c1a8756f3","ssdeep":"96:zS++0uONYMJu1dADcJgu6o5VQoVgE7kImz9DL31vtCI4JCvLmt8j0vs+TNgyosiz:zS++0uDMJm4IguhjJi9D7BtC9JCvP0vO","tlshash":"aac18ee9c061086d4d094b291d3e6524b45c5f8fc5b9f34eea51883fed0dac6e52cab0","first_seen":"2025-06-01T13:01:52.409134Z","last_seen":"2026-08-08T19:27:59.478436Z","times_seen":77,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives1.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.380Z","timestamp":1786217249380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives1.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 87638\r\ncontent-disposition: inline; filename=\"initiatives1.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6836548-87638-377818719\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87638,"size_decoded":88235,"mime_type":"image/png","magic":"PNG image data, 333 x 187, 8-bit/color RGBA, non-interlaced","md5":"7a8f9cce66447bc1b9c2e28b23fe1b5f","sha1":"e267baf7256e0eefc262c596a818c2ade2afe50e","sha256":"a2af692a179e9ed299c8801d553c4e3949658272d33175e995e96b26e1b3ae65","sha512":"ffe2c9aad789e63b044d115e0bb12f6c76133a3910bb2c6245d252208fb0cb16a8067277841cd02ee092a39242569d2d28fefec2d8199d101052c92c1828134b","ssdeep":"1536:9DaoQcuNKcicRSpYu8vu+zJSExA9w0kJ2+OVN3B+VyUuTNMWZFtzQvtrvOOFXOPE:9WJNKcCYTm+zgGsw12+OVNG2z5Atb8PE","tlshash":"0f830225ecd1028b7db1d7130e28db12ec3acb254dcfc8bd4994b84a6d3327ed956164","first_seen":"2025-07-07T04:36:09.392936Z","last_seen":"2026-08-08T19:27:59.479664Z","times_seen":4,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.794Z","timestamp":1786217249794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amldoc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 281817\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T21:41:37.847136Z","times_seen":255048,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":24,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide12.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.371Z","timestamp":1786217249371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide12.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3361\r\ncontent-disposition: inline; filename=\"slide12.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.687655-3361-3471510521\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3361,"size_decoded":3951,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"e19b83669b9d4aced614ba8b899994a9","sha1":"3736260229cd30d4cb8ae806850d2d7184f001e2","sha256":"a9a590991c30d808b615d3ec1903e6db2122615cc7eb266a273cb8180fba2af7","sha512":"0744bf340a2f7369d9eda816c29510b11d3e3e7260a3b47aef029cf110e4a5d675b47ed8d6d940fb8954f1243f2d36f08bba27197a41f3570dac79339ca5b69f","ssdeep":"","tlshash":"2d614baa4951606f360daa9fc4dadaae144e084e6499ad74a9a63030f4da71220bc7d3","first_seen":"2025-06-01T13:01:52.410152Z","last_seen":"2026-08-08T19:27:59.480973Z","times_seen":77,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives7-partners.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.393Z","timestamp":1786217249393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives7-partners.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2957\r\ncontent-disposition: inline; filename=\"initiatives7-partners.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.684655-2957-2860454401\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2957,"size_decoded":3561,"mime_type":"image/png","magic":"PNG image data, 139 x 52, 8-bit/color RGBA, non-interlaced","md5":"4bc58a706be0ffb6c6399e4e9727288f","sha1":"fba73076f127662093c5c008e7123c3578d4703f","sha256":"8d67ea29cfc97248f7fcda69cd8cc6f318dd35f2a01e89e870c93c7168dd90ae","sha512":"dd42f69e8f78b7a7ed8d0254f1c5d41e560aeeb9efb81f2a463e72a499cf02cf929e0148a8149520a70457e1d2f59bd122d2e119d84b3bc5ffab87c067a62971","ssdeep":"","tlshash":"72512af7f053b8adc1845affc70056bd05698b37db76882c50b266c22d36a80482e5fd","first_seen":"2025-07-07T04:36:09.384906Z","last_seen":"2026-08-08T19:27:59.481992Z","times_seen":4,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives8-partners.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.394Z","timestamp":1786217249394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives8-partners.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1768\r\ncontent-disposition: inline; filename=\"initiatives8-partners.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.684655-1768-2861371906\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1768,"size_decoded":2372,"mime_type":"image/png","magic":"PNG image data, 110 x 52, 8-bit/color RGBA, non-interlaced","md5":"3df08702bc364ceb4bfef82e20e1e145","sha1":"2d47f625d481f156cb764ca0623f5ff4fce47aec","sha256":"542239b95f5a2ff3ee2f62e0b0e837480f0ed9c720e5cb43a92bdc084aec8c28","sha512":"27cdf463209ccebda2b85b550206e7fed4c5060f9f39160169b071ebb88b8540f8faf81454e459bc050fbb34bb0d4abe2014d00a8efab4c6584dd60a81fff3ea","ssdeep":"","tlshash":"bc314d38975de52c4e16e81a0e6ef8992913070bad1d41c5b58e4c399f333d006f0b4c","first_seen":"2025-07-07T04:36:09.366583Z","last_seen":"2026-08-08T19:27:59.483365Z","times_seen":4,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/media1.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.423Z","timestamp":1786217249423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/media1.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 875\r\ncontent-disposition: inline; filename=\"media1.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6856549-875-3271887798\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":875,"size_decoded":1463,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"9e78983658f8a17b135ae44d854ba985","sha1":"b2789ae08bd9199e8e1e52d46434aba0645b7a8a","sha256":"e53dcb27c46bffe6f50a642672f3aca45a29960175e4ec7e74af2042cb121485","sha512":"00f2b8f66b04c3e8308a56e5bbffc549a215153bf1793caf168329d8532fd400ebbcbf6fc949f987407283a2d9eefbe6b9af89dae92180e45c1587316899d662","ssdeep":"","tlshash":"d5116387012c74fe594c3ab7a3c14b4540eb327d9ba48d8a9584f094256ad25651e73a","first_seen":"2025-06-01T13:01:52.370383Z","last_seen":"2026-08-08T19:27:59.484834Z","times_seen":31,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/hx6rHJ1/Frame-72-2.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.7","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.743Z","timestamp":1786217249743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /hx6rHJ1/Frame-72-2.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sat, 08 Aug 2026 19:27:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 31839\r\nlast-modified: Thu, 15 Feb 2024 20:57:18 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31839,"size_decoded":32204,"mime_type":"image/png","magic":"PNG image data, 394 x 324, 8-bit/color RGBA, non-interlaced","md5":"1a0e982997d9c0f0eae07293ef8709c3","sha1":"08bc0f77d313454ebcf2e5bebd42892285058914","sha256":"e9978fc92b5d7631964d753acefce73eb085dd7d0be15c8bdddc49f1f358169d","sha512":"9f8cb973475ca94cf2d2833d3b14f403d029701d86897ee8ee9c10ccffec36b7b49ab56db10bffc0569441760ca1273cc5e78d435ac580d19c2e94340b7e5c27","ssdeep":"768:VUNyba6j/Ou9Iah4vgoYppLMBTIlz5yg75bZl5Q:2NyeMV9h6gPppL0Ilz5yOZl5Q","tlshash":"e3e2d0dafa4fd2c9e01605248a3f4edd0fc50588c9876125e9ab06f9dcafd1ceb57086","first_seen":"2025-06-01T13:01:52.387624Z","last_seen":"2026-08-08T19:27:59.485412Z","times_seen":74,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":0,"dns":3,"connect":21,"send":0,"wait":43,"receive":5,"ssl":510},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide13.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.372Z","timestamp":1786217249372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide13.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5319\r\ncontent-disposition: inline; filename=\"slide13.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.687655-5319-3471838202\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5319,"size_decoded":5909,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"aea70862b5742c027509c09e402a07a7","sha1":"51199b1bfa3d268b5036f1b74f11a2182f19cb32","sha256":"eaa91b1c073b10ddc95c3c13a7b7696c6beaa91afe37574df0403ef83c7dea27","sha512":"270bc56da40075dad0a847659eabffa785d8f288023bce76a3406b17867fd56375b977c3b74ed68468273bfe6bcd8592772e308397c0a98c4faf2da60a96461f","ssdeep":"96:zSu+SFfnzCpQeLiEhf1aorlfVt7T8Gpqpy32OKXPGqHphNL4PyWpEWuYsda:zSu+ybuOEjTfj4yLK/GqHfNOyWpgHda","tlshash":"8fb15bef2206ac1f5ce6c15637ad6cfb7888509ee2859b09be3d08c152b3cc2750c788","first_seen":"2025-06-01T13:01:52.424837Z","last_seen":"2026-08-08T19:27:59.486618Z","times_seen":77,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives3.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.383Z","timestamp":1786217249383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives3.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 87766\r\ncontent-disposition: inline; filename=\"initiatives3.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.684655-87766-378474081\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87766,"size_decoded":88362,"mime_type":"image/png","magic":"PNG image data, 334 x 187, 8-bit/color RGBA, non-interlaced","md5":"0b50706f1eec7f4f7aa7aaf5f69c63e9","sha1":"091fa5b88294bc12fb687f7c128b585d7eda7ab2","sha256":"2943d4a561200c1bc15e15a3e6c2f877beaa359c343f9a3f3dd6344b7d2c50c8","sha512":"4a247c6118981a3dcb07086a648a1690f349220ecadf1369e84653f0faaaba6f235b50f29dde27397b0937f365aa5b820d14abfe3cc48b3264c7288f201f24fd","ssdeep":"1536:s7oS/M5Z92SYl5rTYQ698NHYkmL3WvuLHl6M/FYv7eZ:i/wZ9FYl5Q/uHJmTpLR/FYv7eZ","tlshash":"348313cd311049c856631c96aaa8b0bdf11462947b39cdadccd618e133af293b65ebf1","first_seen":"2025-07-07T04:36:09.406601Z","last_seen":"2026-08-08T19:27:59.487665Z","times_seen":4,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives1-partners.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.385Z","timestamp":1786217249385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives1-partners.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3206\r\ncontent-disposition: inline; filename=\"initiatives1-partners.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6836548-3206-2854949371\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3206,"size_decoded":3811,"mime_type":"image/png","magic":"PNG image data, 139 x 52, 8-bit/color RGBA, non-interlaced","md5":"fe0cbf09c51e7b96779d39ec00cd24f4","sha1":"ef6c8e06561190892eb7981426b1c5902ce29c73","sha256":"c4347237b596864f6608b9c3d98e6d28dd989d67ece6140311b82ab96fdbd1c3","sha512":"e9db93f598274735c66591ae25c47ae454bfdef3640d7c0278a5d075bcf43642af78ceeae7d8e8300ccc7c93f5956c070e84b15af4d6189f387b913fe4f35a50","ssdeep":"","tlshash":"6f616de9fca720fae58e8b950d4bf539f34364dd1162358146816fc6b6560d04c504b3","first_seen":"2025-07-07T04:36:09.381408Z","last_seen":"2026-08-08T19:27:59.489241Z","times_seen":4,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/logo-footer.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.420Z","timestamp":1786217249420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/logo-footer.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2525\r\ncontent-disposition: inline; filename=\"logo-footer.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6856549-2525-105385458\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2525,"size_decoded":3119,"mime_type":"image/png","magic":"PNG image data, 240 x 50, 8-bit/color RGBA, non-interlaced","md5":"b0eeeda481b0eeddec6c6005d8f5e317","sha1":"c19c0a2efdcdb865d50bec53c0e9ec57a393c96d","sha256":"e69cbe309f35fd79430a644e075664da82a742dd08114fa2df1bc209b160df8f","sha512":"70fe602894d35bade9b724ea4fd29185d2b7beca5206a46bb8c66afa544ad5b8605ddc38f24d12f5d3a892a5ce5c51960f29731a0341cc2e11fd6abbcb464413","ssdeep":"","tlshash":"1c514c7873b51c3eb061ac52563d5af304a6a8b662e82e0074f7de114dcc5f81c17607","first_seen":"2025-07-07T04:36:09.405507Z","last_seen":"2026-08-08T19:27:59.490591Z","times_seen":4,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/rate-footer.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.421Z","timestamp":1786217249421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/rate-footer.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3553\r\ncontent-disposition: inline; filename=\"rate-footer.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-3553-101649901\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3553,"size_decoded":4146,"mime_type":"image/png","magic":"PNG image data, 390 x 109, 8-bit/color RGBA, non-interlaced","md5":"18e85765593b87c42fc68b388e98908d","sha1":"c9152ee787b998d391e8f21785f06208bf10a7ac","sha256":"2b1b7db6a65e4a641b205858b2b90bc6b0c1dbc4ab2d1aa0bc89b22d139faa3c","sha512":"664ccf89f1f60bab130b5e3b8b417d0710f43b97b286195f0910f90f019af90e2eaea07e896ffb6e05c86ea2fb93549d688da3b311d45787ef1f4920690e605a","ssdeep":"","tlshash":"a6715cf603bd685ee48cb535c62b4debc9ee18be15144c44c3624898f6da68095fc27b","first_seen":"2025-06-01T13:01:52.385107Z","last_seen":"2026-08-08T19:27:59.49166Z","times_seen":31,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/media4.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.427Z","timestamp":1786217249427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/media4.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 866\r\ncontent-disposition: inline; filename=\"media4.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6856549-866-3272870841\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":866,"size_decoded":1454,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"f83b12f65e4c5d7e4405741c2b53e2b4","sha1":"8e0dd07346895e02a7165d444e474b8aded417bd","sha256":"702fa0ac2e5e43e6c09b03e3e2f276fd1314ff7de0c0698a25000fe62959d666","sha512":"6d8138352a3376f2a1bb055cfc413f09ae7ddce67d7d687ae0515596942b09dc221e4f2773625135a2d23419af92c6000ed0cdc984af18e52e9050fd8b37e1c9","ssdeep":"","tlshash":"a11192a3244c99eaf2dc4673006e9bc683b70174030e18ac8cc2998415999093cbaaa6","first_seen":"2025-06-01T13:01:52.435634Z","last_seen":"2026-08-08T19:27:59.495689Z","times_seen":31,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.795Z","timestamp":1786217249795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amldoc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 281817\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T21:41:37.847136Z","times_seen":255048,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":39,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.321Z","timestamp":1786217249321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\nage: 387039\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270065-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 581778, 52181\r\nx-timer: S1786217249.355206,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":30977,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-08T21:41:31.970012Z","times_seen":184586,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":5,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/FTAHK.webp","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.360Z","timestamp":1786217249360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/FTAHK.webp HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5216\r\ncontent-disposition: inline; filename=\"FTAHK.webp\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6824622-5216-3209169756\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5216,"size_decoded":5807,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3566bf48385350d928e338894b58b5c","sha1":"a6a52b5878861b65147325f20fa5b907b341c7e1","sha256":"8a93feab169ff81033fc22627c52b3aa06a8da399a5d437e08556a3274958b51","sha512":"e4a7e595192141f1f565827b7825926d980ec8246c8a3ce43f55459a52c5f6ad8baf40ed2abe2d40b6fae66fa075d6052ed102a76bb075ad6cce4addd3ef73f5","ssdeep":"96:N6ZcRs6wgRgLLaZpKsa3jmvAFaJvq8eZoOFk1BMHnxUGJuOydfOkxZLz:N6ZcRsNLq3a3jpaoFPS1BQxUGEOAdxZX","tlshash":"3db17d82d7d2be62d20c8c220bd8153955c8f11b54ba6ef78f554202e276e3a5c4abb2","first_seen":"2025-05-30T09:05:59.233731Z","last_seen":"2026-08-08T19:27:59.49747Z","times_seen":96,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives4.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.384Z","timestamp":1786217249384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives4.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 44695\r\ncontent-disposition: inline; filename=\"initiatives4.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.684655-44695-378801762\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44695,"size_decoded":45291,"mime_type":"image/png","magic":"PNG image data, 334 x 187, 8-bit/color RGBA, non-interlaced","md5":"c6dbae00eca6b68e72e4b7d7d6b5ef47","sha1":"42291fac4f1b6544fb45684dd56104036ed37eb4","sha256":"ed92499f9f5ca9dcea2e9a13fe730e819603ac23ec5cc7ecc009af2c1cb932fc","sha512":"b136ca4fe7334215f26683abdf74e935b2e83463da3754b812ccd567661c12b10d03a1fd504c93230ff9e5316894b8c187179c5cd510abd101e8e4d623b933b7","ssdeep":"768:qD83XLRzjU2O9I9C4Edku3a5f9jtqEsMWdgmSl4M/qTK8hGewBSD:USRzQ2O9I95EXEhtqEsFDSlbRewsD","tlshash":"6913f299bd43503800925043493d1b5b35d09a8eec6e35ae85ef9f23ce962f9eb0e5c7","first_seen":"2025-07-07T04:36:09.442397Z","last_seen":"2026-08-08T19:27:59.498019Z","times_seen":4,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/initiatives3-partners.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.388Z","timestamp":1786217249388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/initiatives3-partners.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2460\r\ncontent-disposition: inline; filename=\"initiatives3-partners.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6836548-2460-2856784381\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2460,"size_decoded":3065,"mime_type":"image/png","magic":"PNG image data, 141 x 28, 8-bit/color RGBA, non-interlaced","md5":"0c7625ab5b458f5b900a1259927d9108","sha1":"d756995a05c6391fd60652aaa0057f21478d56fd","sha256":"5cc647862e79ec418261f86e471b54ace7224c816f594b3e060a0ff79bfea884","sha512":"a46fbf686cc0611f81e355828af50d3508728ca44c41444647ee5d2d54415d2e580b38deb52de5dd535897586ec4395654922e0db56a21300dda332e1e80f879","ssdeep":"","tlshash":"f2513b492f36da39ef6d5020011d02a78d4e3b642af690daa70b038a1a2b405c3d9560","first_seen":"2025-07-07T04:36:09.370142Z","last_seen":"2026-08-08T19:27:59.501805Z","times_seen":4,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/services-icon3.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.401Z","timestamp":1786217249401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/services-icon3.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3334\r\ncontent-disposition: inline; filename=\"services-icon3.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-3334-856231666\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3334,"size_decoded":3930,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"cbae04b86c7f6a06f5331aa2eca22851","sha1":"083ff93ec13bce58d8df18e194e1d4342425651f","sha256":"9b58c846e8e719b14eff18a59a763ff2aff939971cc91d9d0b8234169244309f","sha512":"c3d95372b6cf4c587f2161e01b11ad41f466d5d5b036195e8e382600085ac74399e780ecc80c2751ce6446f3fd597dc5fc8f31af2b0e2a478bfb879285223290","ssdeep":"","tlshash":"c4616ce59840118548f882d80e730ba235b79c6d32bdfb74abcfd1aa1e5c228d617266","first_seen":"2025-06-01T13:01:52.405909Z","last_seen":"2026-08-08T19:27:59.502727Z","times_seen":76,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.805Z","timestamp":1786217249805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amldoc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 91220\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-08T21:34:39.229669Z","times_seen":547572,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":32,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/css/style.css@dfc128f04972529fcc6f525bbff47b28.css","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.050Z","timestamp":1786217249050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/css/style.css@dfc128f04972529fcc6f525bbff47b28.css HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-disposition: inline; filename*=utf-8''style.css%40dfc128f04972529fcc6f525bbff47b28.css\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: W/\"1782989988.6816547-27708-840570492\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27708,"size_decoded":5411,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"f8adec5dbf0607b975a8261cc9785aa7","sha1":"e611caa416c7ce514bcd8d3e82c39b852f004275","sha256":"b73378caf59b1a00341ba75c2914bf98674e31be4c0624aad8b0bf156db0941b","sha512":"1ed6c931a187cb802be7e04176908af60ad1ed2fc2bef010a7eed0e982d37479e0afb3dcd71b2b236b0d310852d6fbce50f52b9aca3689b30ac6ea6a2869d40b","ssdeep":"192:DXLFOyQOGTE/ah0nGlIoTlSUBQFEs2D8LUOCF0XPKEpWSBHNl5IQ/po/PWIQYCCa:LZOyQOGt6YQFEl/Os0fFpWSlGFR/esfi","tlshash":"00c2e059a51e204b9327a9943fb02f46ce95c022e70b51ee75f2a24c92cd06d2ef27dd","first_seen":"2025-07-07T04:43:25.036219Z","last_seen":"2026-08-08T19:27:59.503691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/arrow.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.338Z","timestamp":1786217249338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/arrow.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 259\r\ncontent-disposition: inline; filename=\"arrow.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-259-3102608304\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":259,"size_decoded":846,"mime_type":"image/png","magic":"PNG image data, 11 x 11, 8-bit/color RGBA, non-interlaced","md5":"02c19c707ae63f6dfa5abe53bebaf12f","sha1":"779043cd03f1ff763da18fc933cb8d2821618f5b","sha256":"b1d044356dc272d874eca278f83baee4e17072f2dd03af9c8ce27b9615326945","sha512":"cf116f7793ac72690fa32688305c9e0b5a655f24f2e8284055a00daba82006b878f3b5e85f7e07596b559d79e3c7b2caa9259fea07bf8c3f6d92a9f066fb70b2","ssdeep":"","tlshash":"9ad097fe1329ebbf9a2c0dbd01ba0351b8e75c4c16830e88b190d460406f5e8d6d2782","first_seen":"2025-07-07T04:36:09.429587Z","last_seen":"2026-08-08T19:27:59.504647Z","times_seen":4,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/arrow-right.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.345Z","timestamp":1786217249345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/arrow-right.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 202\r\ncontent-disposition: inline; filename=\"arrow-right.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-202-117181947\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202,"size_decoded":794,"mime_type":"image/png","magic":"PNG image data, 19 x 10, 8-bit/color RGBA, non-interlaced","md5":"231bf83cbede808189d68502fdabc5f1","sha1":"d28953386094736182e749d9cc48e3a3536a7e9e","sha256":"7231bebd7cf77f64ac9dd01db76f3735ab5f77906456d824da42408782d818e7","sha512":"01030ef4728d04eb790ed8624904241a2b05492ebcb81528b28eaed60352e3f654b9734bed28f93fb0c6015b5ece41c252347d4e5350431b0c5197be039e42ac","ssdeep":"","tlshash":"edd022cda619dc3bc7ae093b239a1861a9bb04260115a2c83d96b838702ac8891483a1","first_seen":"2025-06-01T13:01:52.434672Z","last_seen":"2026-08-08T19:27:59.509178Z","times_seen":75,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/slide11.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.370Z","timestamp":1786217249370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/slide11.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 6959\r\ncontent-disposition: inline; filename=\"slide11.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.687655-6959-3471182840\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6959,"size_decoded":7549,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"6833041996e2d09491450a18bea7f847","sha1":"22827836fa52264703d9e0a8853ede372e508db3","sha256":"00bcfae08441ac946c039a1e9cc462c4f81ed4aa992ca40d63c01ac551400e96","sha512":"421fdf0c06873eba2156e45f1137ce84d33d82b1eb96cd4f91f123f8e2f4a2ca74812353b26d40f00bea4314a227f456a2322e4dc60233f92f5e1c61a507619e","ssdeep":"96:zSR+yGTg4LvZ/No5M1A01vOPLpTvCFZIyDaalTOJRI82ESYwqcxG78ZGwyLwIznH:zSYogh/D1J2PdTvAIyvYRSENKAUGfbj","tlshash":"96e19d15096c1c88d3f8d953669a0992b4efb06dee832e8c0b5499b5372b0df88de4d7","first_seen":"2025-06-01T13:01:52.401457Z","last_seen":"2026-08-08T19:27:59.509704Z","times_seen":77,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/binance.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.375Z","timestamp":1786217249375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/binance.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1298\r\ncontent-disposition: inline; filename=\"binance.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.6826549-1298-3499166805\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1298,"size_decoded":1889,"mime_type":"image/png","magic":"PNG image data, 140 x 29, 8-bit/color RGBA, non-interlaced","md5":"c04f9a2b330c9b720caf32bfb5654adc","sha1":"a9ff9b5da0e20626b28f642aec9e4644795149a8","sha256":"5239fa19f2816d305e7f7024057b5dbc3fb535eb06b5203be71b566aca75480c","sha512":"bf4345eb584ca6a8d6eab95841a9525499760d4d3e1caa181a9cbd3672e911f0bead2e04d30c5eb8d7dd1d82ce403c5cd6c0fd3ead935e2a819e9a3dd367dd03","ssdeep":"","tlshash":"f521f8907be5666f63520c3c4a925840ba21538ed76b539648c42078cf01fe80130d2e","first_seen":"2025-06-01T13:01:52.381186Z","last_seen":"2026-08-08T19:27:59.510237Z","times_seen":77,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amldoc.com/app/img/services-icon5.png","fqdn":"amldoc.com","domain":"amldoc.com","tld":"com"},"ip":{"addr":"87.199.206.211","port":443,"asn":41201,"as":"DOLSAT sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amldoc.com/products.html","date":"2026-08-08T19:27:29.403Z","timestamp":1786217249403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminkaworkk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 12:02:01 GMT","end":"Wed, 30 Sep 2026 12:02:00 GMT"},"fingerprint":{"sha1":"E3:63:CD:2C:5C:79:0F:15:BA:EB:BD:17:6D:04:D1:CD:18:FC:E0:D4","sha256":"4D:9C:D3:B2:D5:8E:12:D9:E7:E4:EB:8F:97:5B:5F:B4:A5:1A:01:B4:6C:E0:A3:4E:A4:50:1C:43:39:6E:56:B1"}}},"request":{"raw":"GET /app/img/services-icon5.png HTTP/1.1\r\nHost: amldoc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amldoc.com/products.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.3\r\ndate: Sat, 08 Aug 2026 19:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3738\r\ncontent-disposition: inline; filename=\"services-icon5.png\"\r\nlast-modified: Thu, 02 Jul 2026 10:59:48 GMT\r\netag: \"1782989988.686655-3738-856887028\"\r\naccess-control-allow-methods: GET,POST,OPTIONS,DELETE,PATCH\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,Accept,X-Api-Key\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3738,"size_decoded":4334,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"8ccbd3299d3e36f2427e948ad5e5fd07","sha1":"73f65e96c5b79c28979475c3d59c355e1d421cd7","sha256":"4f19cb57f2ed06e5a6d93ab039ea698bc7c8359706a9bae21b20b4e8e727cfb2","sha512":"28204b4238702bd82123c992ba3e24843d9642141d7b1135db19b1b02e75ce3679dc52caf4eb6ca32a5227c295a03eea8544c9fac62e3794f51da2ad57c78e25","ssdeep":"","tlshash":"51716de5a48928f454aa4c37d03dd757600582ad3f4e78ed6bd31e20f01c3d7916b46c","first_seen":"2025-06-01T13:01:52.42666Z","last_seen":"2026-08-08T19:27:59.510736Z","times_seen":75,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"amldoc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"amldoc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}