{"report_id":"b0e5a753-5993-4376-a18a-b70d603f4f5d","version":6,"status":"done","tags":[],"date":"2025-08-26T20:16:43Z","url":{"schema":"https","addr":"amlbot.help/","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amlbot.help/","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"title":"Beware of AMLBot: Risks in Using AMLBot DEX Services"},"submit":{"url":{"schema":"https","addr":"amlbot.help/","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-30T20:16:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"amlbot.help","ip":{"addr":"172.67.162.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-19","domain_rank":0,"first_seen":"2025-08-26T20:16:43.859884Z","last_seen":"2025-08-26T20:16:43.859884Z","alert_count":0,"request_count":6,"received_data":3026710,"sent_data":2842,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amlbot.help/75a0a77b","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3398fac05b24e8b4dbff54816767208","sha1":"4242480e7c0424d7066007d9b67d1bcbfb81cb72","sha256":"dcdb448fc9bffebd8d09adaf848c5de51454b1093c7ff406936432fdde23cd89","sha512":"ec368db9fb9b915ce5f5943b9f7de2fb3c6e42289097c59d174d76b5667af5e2bca343050f518c7fadfc4533f6829fbb92d05083f5890d11017b1c2b70f5929a","ssdeep":"3072:E2cf8Mwj+6FWXWKteYeLBROxhHwwsQdahrCC8o01jEBXsvr6+MSH3HQEduPH3ShW:QxRhHwwDdahrth06uufShPLA2u","tlshash":"85b4ebd34b92580de0bed852ad395cbc80b1a7613c867587bb53f8dee61c7a14f48788","size":499740,"data":"","first_seen":"2025-06-09T11:07:43.641536Z","last_seen":"2026-02-06T02:00:20.273995Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.help/","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8e14de9d84a21090dd46c97b8879bc56","sha1":"973b9b5eb2412ba2d952f211b164980d4269d12f","sha256":"ecb551e01393b39076ab02613c97d795dbceb21cffc25bcdd622e3349362a0d9","sha512":"bfa5b1930c6ad694ac7a6b3650f873bb6d8fee08f8c888b739ee9f64d473d78158f3db68e6224483d2eefb119612553b08062e64e082b1dd10415a8ac56fd190","ssdeep":"3072:62oz6TmMjgIdGBOKP2AktBHOthZ4wMEHuHrsU6O81r+BDsvr6+MSH3HQCduPnYbN:S3JhZ4w5HuHrTx8YgufYbt9kK2i1","tlshash":"93a463e153ab9d1fc8be8903ad357d4d50b12f72048ab52bba27b5ccc66c1838b5c794","size":457195,"data":"","first_seen":"2025-06-09T11:07:43.685268Z","last_seen":"2026-02-06T02:00:20.343997Z","times_seen":429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.help/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T09:55:37.111326Z","times_seen":409234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amlbot.help/favicon.ico","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlbot.help/","date":"2025-08-26T20:16:20.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 21:37:31 GMT","end":"Thu, 13 Nov 2025 22:36:13 GMT"},"fingerprint":{"sha1":"BF:E1:F6:C6:06:7F:80:54:3E:14:6D:2C:43:FE:19:BD:A7:E6:6B:78","sha256":"BC:B3:82:84:A7:E5:6C:46:2C:CB:08:B5:10:5D:66:7F:AE:58:0A:F0:0C:E9:D9:BA:31:2A:A1:31:BC:57:DB:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amlbot.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlbot.help/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 Aug 2025 20:16:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2F0Fc91qJltPpD45EUJe%2B2Z4XholNuRK0ufLPqV7JyQxhHmTOv7mn3DtFeZFECMTDFT01ntVVR94zJ0yn3QO61jdJIhpCu4BDw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncf-ray: 975601a2cf2170b3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":993,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"e76c3f9ff8ac7382b1e516fb381c8c54","sha1":"cbd13db714478e029b8d2fdd3e6624d8a9c6e634","sha256":"ba88a7e1ca007379c41d7bd2bff783ca044391bf08bc216d98d26b20b09e83a0","sha512":"9e736cd3816bb4b13e60eb7e881e56d6625a1979313ba92fe33f38c1340a6f0f224dd80c6666dc938368fe8da242a699e433122d6cbebb6408048b3f082d5e0d","ssdeep":"","tlshash":"2211e1621c631012a51329883ef4572526caa643860fda767bc2b1d8cfc4aacdd9b39c","first_seen":"2025-08-26T20:16:46.454259Z","last_seen":"2025-08-26T20:16:46.454259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.help/75a0a77b","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlbot.help/","date":"2025-08-26T20:16:22.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 21:37:31 GMT","end":"Thu, 13 Nov 2025 22:36:13 GMT"},"fingerprint":{"sha1":"BF:E1:F6:C6:06:7F:80:54:3E:14:6D:2C:43:FE:19:BD:A7:E6:6B:78","sha256":"BC:B3:82:84:A7:E5:6C:46:2C:CB:08:B5:10:5D:66:7F:AE:58:0A:F0:0C:E9:D9:BA:31:2A:A1:31:BC:57:DB:F4"}}},"request":{"raw":"POST /75a0a77b HTTP/1.1\r\nHost: amlbot.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlbot.help/\r\nContent-Type: application/json\r\nContent-Length: 7949\r\nOrigin: https://amlbot.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 Aug 2025 20:16:22 GMT\r\ncontent-length: 46\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcxks4SgxU79cDQhzDwEIHlYsunfWbopxe0ju0vYKM%2Bwz5Ree443GInuKbCEYPvlt1veih9ql0K80ifJkoPp955rtCaGwt5QDQ%3D%3D\"}]}\r\ncf-ray: 975601ae685d70b3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"57b8b0b252767c802c718d5101a319cb","sha1":"48ae75169df2e6a9e5e4fd91efaa75bf68e73c53","sha256":"230b75a4c78aba73866625f817a1cf245dcb2e0461b42f03a7c1a10e79ab200d","sha512":"f77ff6536ef74e33333e1aeaac8751c673044131efb69966491e458017afb0ed51175907cf00b2d76640747a5aba2054a31c386a68c7ad722ada8cdc901da5f2","ssdeep":"","tlshash":"01900205a274101a65850481163a40481518474590b4493e6d50a054808109d040044b","first_seen":"2025-08-26T20:16:46.457967Z","last_seen":"2025-08-26T20:16:46.457967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.help/","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-26T20:16:22.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 21:37:31 GMT","end":"Thu, 13 Nov 2025 22:36:13 GMT"},"fingerprint":{"sha1":"BF:E1:F6:C6:06:7F:80:54:3E:14:6D:2C:43:FE:19:BD:A7:E6:6B:78","sha256":"BC:B3:82:84:A7:E5:6C:46:2C:CB:08:B5:10:5D:66:7F:AE:58:0A:F0:0C:E9:D9:BA:31:2A:A1:31:BC:57:DB:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlbot.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _abck=3eae38e9-2f14-47e3-a56f-499f5a693745\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 Aug 2025 20:16:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4JN8rPhQ7o8u2ebavAw9mI0W%2BpmzzLweUsXZpUXnZzbUVrWZhtMfRVJGOcotpW9CXwfFj0N4DoLsJhT3KfQR2yRoujEMX5Ld1A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 975601af9f3070d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519962,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (57202)","md5":"442ed8e739aca7862b4977907b72a370","sha1":"ae024b44723154dbca121456d7193da0855552eb","sha256":"c02a1dd8587713a792f8607ab4caeee6a08d5646f44a94b8fdaaba2546298fef","sha512":"c5388d05750d41bef1b3adb758ef2a0979acb7d4b8a4453e96b966dc577bd066fcda12661233548865c15b3698bb3e8924bcc088d139d35f1d54fc7cf9220b94","ssdeep":"24576:EEdLdw1/rMakE4Lfwq/rMakHZLJw7/rMak6OLvwP:ESWqM96ccP","tlshash":"f22512b2602a4851c12704abb1cf23d6af78b45764589e24bedcbd814f88de0797d7f8","first_seen":"2025-08-26T20:16:46.460901Z","last_seen":"2025-08-26T20:16:46.460901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":36,"dns":3,"connect":8,"send":0,"wait":142,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.help/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlbot.help/","date":"2025-08-26T20:16:23.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 21:37:31 GMT","end":"Thu, 13 Nov 2025 22:36:13 GMT"},"fingerprint":{"sha1":"BF:E1:F6:C6:06:7F:80:54:3E:14:6D:2C:43:FE:19:BD:A7:E6:6B:78","sha256":"BC:B3:82:84:A7:E5:6C:46:2C:CB:08:B5:10:5D:66:7F:AE:58:0A:F0:0C:E9:D9:BA:31:2A:A1:31:BC:57:DB:F4"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: amlbot.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlbot.help/\r\nCookie: _abck=3eae38e9-2f14-47e3-a56f-499f5a693745\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Tue, 26 Aug 2025 21:04:23 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TNYJspNkYvg9QNGm8zNYoFdiesgXLmNENvq84Esms4u09sR6sLYDtqNY1gdRrrh3Llvpz%2BPWTYCDDf1dTJ%2BbpICnalov%2F4pIGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Tue, 26 Aug 2025 20:16:23 GMT\r\ncf-ray: 975601b2986c98ee-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T09:55:37.111326Z","times_seen":409234,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.help/","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-26T20:16:20.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 21:37:31 GMT","end":"Thu, 13 Nov 2025 22:36:13 GMT"},"fingerprint":{"sha1":"BF:E1:F6:C6:06:7F:80:54:3E:14:6D:2C:43:FE:19:BD:A7:E6:6B:78","sha256":"BC:B3:82:84:A7:E5:6C:46:2C:CB:08:B5:10:5D:66:7F:AE:58:0A:F0:0C:E9:D9:BA:31:2A:A1:31:BC:57:DB:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlbot.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 Aug 2025 20:16:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2FtG9UFJ9%2Fh7tpdTS8hcqxSLRv1iykoW35Bdtk28MvQCzHprW%2F2qbbpbctkYIetP%2B7hGwRUtAkkfoklIghb4EQr%2Fo2BCYnp8aQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9756019efe4482bb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":993,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"e76c3f9ff8ac7382b1e516fb381c8c54","sha1":"cbd13db714478e029b8d2fdd3e6624d8a9c6e634","sha256":"ba88a7e1ca007379c41d7bd2bff783ca044391bf08bc216d98d26b20b09e83a0","sha512":"9e736cd3816bb4b13e60eb7e881e56d6625a1979313ba92fe33f38c1340a6f0f224dd80c6666dc938368fe8da242a699e433122d6cbebb6408048b3f082d5e0d","ssdeep":"","tlshash":"2211e1621c631012a51329883ef4572526caa643860fda767bc2b1d8cfc4aacdd9b39c","first_seen":"2025-08-26T20:16:46.454259Z","last_seen":"2025-08-26T20:16:46.454259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":102,"dns":66,"connect":9,"send":0,"wait":115,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.help/75a0a77b","fqdn":"amlbot.help","domain":"amlbot.help","tld":"help"},"ip":{"addr":"172.67.162.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlbot.help/","date":"2025-08-26T20:16:20.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 21:37:31 GMT","end":"Thu, 13 Nov 2025 22:36:13 GMT"},"fingerprint":{"sha1":"BF:E1:F6:C6:06:7F:80:54:3E:14:6D:2C:43:FE:19:BD:A7:E6:6B:78","sha256":"BC:B3:82:84:A7:E5:6C:46:2C:CB:08:B5:10:5D:66:7F:AE:58:0A:F0:0C:E9:D9:BA:31:2A:A1:31:BC:57:DB:F4"}}},"request":{"raw":"GET /75a0a77b HTTP/1.1\r\nHost: amlbot.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlbot.help/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 Aug 2025 20:16:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cr5Moi%2BNi1LJUD%2FaMK27OoZiLs%2B8E12n7EsEdedu1K4FgoiRR23E3JCIozRRPu8VK8YCXGBuTcoyZujVVx3eHzwJPqS5Lvc%2BDw%3D%3D\"}]}\r\ncf-ray: 975601a0df2d82bb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":499740,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65519)","md5":"b3398fac05b24e8b4dbff54816767208","sha1":"4242480e7c0424d7066007d9b67d1bcbfb81cb72","sha256":"dcdb448fc9bffebd8d09adaf848c5de51454b1093c7ff406936432fdde23cd89","sha512":"ec368db9fb9b915ce5f5943b9f7de2fb3c6e42289097c59d174d76b5667af5e2bca343050f518c7fadfc4533f6829fbb92d05083f5890d11017b1c2b70f5929a","ssdeep":"3072:E2cf8Mwj+6FWXWKteYeLBROxhHwwsQdahrCC8o01jEBXsvr6+MSH3HQEduPH3ShW:QxRhHwwDdahrth06uufShPLA2u","tlshash":"85b4ebd34b92580de0bed852ad395cbc80b1a7613c867587bb53f8dee61c7a14f48788","first_seen":"2025-06-09T11:07:43.641536Z","last_seen":"2026-02-06T02:00:20.273995Z","times_seen":430,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}