{"report_id":"c39306fa-d78d-4794-bcd4-f0a2304462c6","version":6,"status":"done","tags":[],"date":"2026-05-25T18:43:53Z","url":{"schema":"https","addr":"amlnode.icu","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amlnode.icu/","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"title":"AML Bot","dom":{"size":18372,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13635)","md5":"37ad71ad454c24cebabe562891ff4b6d","sha1":"8a0918fe2aa98c2997f1b7d7110a5e4e9f82b49c","sha256":"de231b384485a87b125881e9d052f56e060d2d93179ef23262c522a2a5308f8b","sha512":"184c493f0dc26eceb7f6459dea98ee7705465ffea8af74dad4be1a9f2ed49686bc2ee9bf55230d4764c9e400c23199d659e95649696c9d7419f5c73b54a7ae5e","ssdeep":"192:P7sGgSPn032upfZZPGsbwoK9aeoBtvOZLOWZ697zZxJG1Pk+cPuhBWky5QfZc:PwZanNupfZZFwPE97GqGFdW5QfZc","tlshash":"228284396b4829bdb25747e4f2e1bb386159d38ae327885cf3ec01b15783ca5c863294","dom_hash":"domhash842df4a19d41658b16ee60a359d7c283","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amlnode.icu","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-29T18:43:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T18:43:31Z","timestamp":1779734611,"ip_dst":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44974,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-05-25T18:43:31.158703+0000\",\"flow_id\":1597137684217640,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":44974,\"dest_ip\":\"172.67.178.33\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"amlnode.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":913,\"bytes_toclient\":2683,\"start\":\"2026-05-25T18:43:31.147240+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T18:43:32Z","timestamp":1779734612,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44834,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-05-25T18:43:32.682144+0000\",\"flow_id\":952815280474136,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":44834,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3436,\"start\":\"2026-05-25T18:43:32.673816+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-05-25T13:19:56.122118Z","alert_count":0,"request_count":1,"received_data":269,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":2,"received_data":24147,"sent_data":981,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"techcryptoai.pro","ip":{"addr":"185.82.73.80","port":443,"asn":49127,"as":"Asimo Networks B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-07T08:02:29.109044Z","last_seen":"2026-02-01T03:33:40.3252Z","alert_count":0,"request_count":1,"received_data":645,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"amlnode.icu","ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-15","domain_rank":0,"first_seen":"2026-05-25T18:43:58.733186Z","last_seen":"2026-05-25T18:43:58.733187Z","alert_count":23,"request_count":23,"received_data":4509143,"sent_data":9981,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":7,"received_data":298657,"sent_data":3890,"comment":"","tags":null,"fingerprints":null},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-05-24T05:38:03.554199Z","alert_count":0,"request_count":17,"received_data":53092,"sent_data":11141,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"amlbot.com","ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-31","domain_rank":653759,"first_seen":"2017-04-19T06:25:05Z","last_seen":"2026-05-03T18:06:07.854248Z","alert_count":0,"request_count":1,"received_data":1525,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amlnode.icu/assets/index-ChFKj-SI.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a29d86ee849100ff9bc10afc738530ee","sha1":"98c82c7e3b9ec86aff239a37dca8123ab9641ab2","sha256":"47b3247ddf7dca8e9adb318bce46b61d40db7a51ab449145b0e6934e0d2528c7","sha512":"fbccc7bff68cbf989edbc2a4f01d9da92d898313eeeea32e64fe60589e24508ff9214dab4110347fd94b56b64950f3a2edc4c8a21de7e20b450d4fbcd839f552","ssdeep":"3072:gOWv+wyCpTwaIFm6+TDJzcjbg04jeiBJ8Y:gOWv+spTwhF5+TF6iBJn","tlshash":"dbb36dd4b3b4f17d725383ad867609e5f3282400b925c0a8f2fc86da54c3e96c9b667d","size":113082,"data":"","first_seen":"2026-05-25T18:44:02.993073Z","last_seen":"2026-05-25T18:44:02.993073Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/Layout-BtCoZmwK.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4eca63561d0240e5696b009f6ac57a3","sha1":"c42c163be51939526ef79746dc75a8de511c5249","sha256":"3846bc778a45df4af1fa7acdbee9cfeda04f402c15d16dea0b090717546ce3f8","sha512":"b7f9162d74307874c9b6dfc1992c476087853b3124b11e3d401b2a6f1ea5085f2ce26f58251ab5aed796e6976644d3c2bedfc68e6faad651120da965af71ec62","ssdeep":"768:2FRhnmbs7/IKP0grh/Xltyf6FWZGb3KRcWQDYn9n/ANjEianLLrolybyS/tZ:EYbs7/VP0oBXve6YZxWkLicbh","tlshash":"00e23a80f061a63ddfab01c954bf8118701d6e99e52e8890f27c143e1fad548b7abbcd","size":34125,"data":"","first_seen":"2026-05-25T18:44:03.008644Z","last_seen":"2026-05-25T18:44:03.008644Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/lit-html-DkOANEsa.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7e1f17db02dae07c4427954c0d4d5474","sha1":"fb159296079d0a1380fcdefde9241c8077e938f9","sha256":"80887817a61126a1781b3eb6c14ea0fc360d9c3c98c6f205a5204ec5934392fc","sha512":"a123fcc11d102ce12877eba0baf9383d855ce6edc4200f147ed9d3a64e93eb7ba68e70560faeffac828190d3a2d0d4174ee74956e83c5c79da8529c10f3cabbe","ssdeep":"192:sdnSKqO1aurVVi9wkaRII6/zhM5+7fwmG24NbC:eSKqOUuR09wkCII6/8+bwmG24NG","tlshash":"31e1735432f955a26ae18ad1dc77141fe3507094383a646cb1ac7eef682cf42b0f9b78","size":7148,"data":"","first_seen":"2025-10-20T21:27:42.364614Z","last_seen":"2026-05-25T18:44:03.001877Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/browser-oTl4QaM2.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2ba24a989a8b89351c4894165a4306ce","sha1":"6d928ada5fc09f22868e1e246d7c9fae9e5f9964","sha256":"6a8cc913518e46d16974cb26fff8b4c2463a5d0c843e950989ebff0c7e43cb96","sha512":"83acddbec4780782c37a1702ca1d434e85b56faaea94cb09095ba4f296c469269d866b4a8eeffacf958b364cd7dd609da391bec2982f1ef36c05c56801744868","ssdeep":"768:NN7PJx4iof7k5aKT72ozRCmrO1/h2YZ0qoNOoNejyjP5aSTI04q1yQl9RrK:1T0YOoNQEDs","tlshash":"9ac2f8e933d271ab439351ea007f1809e2fe6c60342d586cea59a4d37d749ba81b7f1c","size":25924,"data":"","first_seen":"2025-10-20T21:27:42.379379Z","last_seen":"2026-05-25T18:44:03.000403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a8a19b7e09530a0d8b0af8e4717fbde","sha1":"156ab234a36cc2d183aa274fa828bde8ea37e452","sha256":"c1bef95d4dbf01ba3927b3588bd130be5d1fbd3ca19cfe8796df68464f082c0f","sha512":"7df535e1fea614a93ec623803cdefdcd6623a4bea6f9e14c5a6215949722f169868ef56ef91953df2b91fdce558384684e53070724373f9a399182f5c57ace56","ssdeep":"","tlshash":"04d0223809b2a030030b04753079c3b0792061b3202848897a8cce2d0fc0faf07a2e10","size":218,"data":"","first_seen":"2025-08-08T03:15:30.770293Z","last_seen":"2026-05-25T18:44:03.027035Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/lodash-D4buZeE3.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4e47d31ca68a6629fe0da60610660fce","sha1":"42f9a90197131981bc2e7a62d725e9dca10f3cca","sha256":"a6adc0d0e90c40eb9de81f9e3f94d412a433b11a0d6f6fa27aef2d8c0204ebb2","sha512":"c952ad244c5926745dad93784c971bdece9903bc31fe5f5165bcf4b139b02f5aabf59c70e700a813b90d05cabc218062a5cd461c94bfed7d894edf7be3ba6937","ssdeep":"","tlshash":"7351dcc8b5c7f5d103a34974803f640bf13d687504adb090e26bd0f1be790aea623e6a","size":2465,"data":"","first_seen":"2025-08-08T03:15:30.692349Z","last_seen":"2026-05-25T18:44:02.997015Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/index-DmmKE1ZL.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db98f4140e9c85348e6614a748daf7a0","sha1":"b9782f43a75599f4f33a48305242c749bf29839f","sha256":"501131b7fcbeb8987838b9b094931f9ff0da01e5061d4164e9f90d4e2f53b5a4","sha512":"f45fc0d41fcad96f2eaf35fc6af446e43bc70554016d7dbbd81734db952e61404e9602fdfad38c11fdbc46f4fe844eb5241ad02e68955533aa3a9d7fbb09fb9f","ssdeep":"24576:Qob8/T4LnFJxWAsq2da0mhJ3Jz+QpUi7bsttg2EeLXhw623Dw+OhhrEnZgpik:Qob8/TQFJxWAsq2da0mhJ3Jz+QpUi7bI","tlshash":"e745198832d6f662439220e0153b540eb23d6a5dd01ca5a9f388e8e77ef55c6427ff78","size":1176472,"data":"","first_seen":"2026-05-25T18:44:03.028071Z","last_seen":"2026-05-25T18:44:03.028071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/Button-Df7kpX0I.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7950bdca4c84182364de30010efd0c88","sha1":"fd576330888909a7ba38143ada15f3a0d3f5800d","sha256":"54631878cfc40ab76de2492d2b7b6322707100a3b5f46d009829bc4aaba0867b","sha512":"4337fe6474ce83e20cda05bb3cb01ad23e5142fcf682314a09b7ca9b32a13968be7de0adfa0fb1715653cb87ecc04872c733a0e9fcf9b038e3b4d37208aa6229","ssdeep":"12288:tZULEvdooPqJjJmFO5jTsMrq4y16ocnjNg:jZvdooyJtmFO5/tq4yoo+g","tlshash":"24e45c807396b07103aa55e5903b1102f3399864300d84acf7acedef7ea954a967ff79","size":665439,"data":"","first_seen":"2026-05-25T18:44:02.991209Z","last_seen":"2026-05-25T18:44:02.991209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/StatsSection-BHTjIIJ0.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3595b97f59d0b2e977c3447bafbcbac9","sha1":"a4548b364721cb261cb5f346f2cdd5367e2d702e","sha256":"e7c0bf8b7e5b52d07044289c7b2fc7b28210fdc86d07f1c0c05356865acbcacc","sha512":"ad34599c38bbe5bfee00f895009bd39143cac1474681ca9a1a1d37139e3da792253b1f1fc1df4bd54ed25ded54644f2183ee6b90a3a3588642aaae2e4e3b32f1","ssdeep":"3072:X5lZRENbGbQh4I3sLnu97KegdZ3eY6O4RqiCG6H09:X59YbcQB3+yKegdT6O4UiCGY09","tlshash":"21c319c97290756683e789e5d06f0640b33a19c8341dc0bcb67dadcb6d2140aa7bbb7d","size":129825,"data":"","first_seen":"2026-05-25T18:44:03.013935Z","last_seen":"2026-05-25T18:44:03.013935Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amlnode.icu/assets/Button-Df7kpX0I.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/Button-Df7kpX0I.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mrbwzOkkXS9PSXF%2BF%2F3t%2BF9eLxiiZ1mU0EYn8UTyhQfJl%2F5s3pcLUkfdENAJtIqXc4pMiwbKruHNVQwssoVZ2TUhM8NwRsGhnhAikFDd5rGGlrZLNSQUiAXF1D9waQ%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:09 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:32 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a1421a5-a275f\"\r\ncf-ray: a016afae0ce132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":665439,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37020)","md5":"7950bdca4c84182364de30010efd0c88","sha1":"fd576330888909a7ba38143ada15f3a0d3f5800d","sha256":"54631878cfc40ab76de2492d2b7b6322707100a3b5f46d009829bc4aaba0867b","sha512":"4337fe6474ce83e20cda05bb3cb01ad23e5142fcf682314a09b7ca9b32a13968be7de0adfa0fb1715653cb87ecc04872c733a0e9fcf9b038e3b4d37208aa6229","ssdeep":"12288:tZULEvdooPqJjJmFO5jTsMrq4y16ocnjNg:jZvdooyJtmFO5/tq4yoo+g","tlshash":"24e45c807396b07103aa55e5903b1102f3399864300d84acf7acedef7ea954a967ff79","first_seen":"2026-05-25T18:44:02.991209Z","last_seen":"2026-05-25T18:44:02.991209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 19 May 2026 13:29:53 GMT\r\nexpires: Wed, 19 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 537219\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-26T10:24:37.05866Z","times_seen":246624,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":226,"dns":32,"connect":20,"send":0,"wait":8,"receive":2,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/index-ChFKj-SI.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:43.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/index-ChFKj-SI.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnBsqae0e8GV4jF4BVQYCo%2BvkAw5sx7z6wXExbNIRstF42F%2FHgEzuZaWOw99JqSFwxAhvYTtEfuXl%2FYLmR5wvpC%2FQinLOvCjwHkrz%2FMftzZrf%2F%2FnzxY55czr7RfEXg%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:24 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:44 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a1421b4-1b9ba\"\r\ncf-ray: a016aff7b88532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113082,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36952)","md5":"a29d86ee849100ff9bc10afc738530ee","sha1":"98c82c7e3b9ec86aff239a37dca8123ab9641ab2","sha256":"47b3247ddf7dca8e9adb318bce46b61d40db7a51ab449145b0e6934e0d2528c7","sha512":"fbccc7bff68cbf989edbc2a4f01d9da92d898313eeeea32e64fe60589e24508ff9214dab4110347fd94b56b64950f3a2edc4c8a21de7e20b450d4fbcd839f552","ssdeep":"3072:gOWv+wyCpTwaIFm6+TDJzcjbg04jeiBJ8Y:gOWv+spTwhF5+TF6iBJn","tlshash":"dbb36dd4b3b4f17d725383ad867609e5f3282400b925c0a8f2fc86da54c3e96c9b667d","first_seen":"2026-05-25T18:44:02.993073Z","last_seen":"2026-05-25T18:44:02.993073Z","times_seen":1,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/e7c6d5d0-b986-4348-de22-fc940e1aee00?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/e7c6d5d0-b986-4348-de22-fc940e1aee00?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2080\r\npriority: u=4,i=?0\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: a016affc082b56ba-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfXQuPORCMBWA2hFgzoPzbkGCZfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=723+9 c=3+6 v=2024.10.6 l=2080 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f73255a94d4220240bff0d40dc12b49d","sha1":"1319c5a69fc6a6c3bc779e21749b17622189c530","sha256":"10e94ea2f9af8d7ac42c5d9f36a5744c4f1588ea8e5138037f8b2372c4691889","sha512":"43bcb4e9bfcbe22993221845e49a0f41ffa1e4be2e8d0560b6b2ecf1798d07ef749ee37eb927da1608905e2449073b9d0021dac00cc02dc0cc2ff4bb2b2b76e2","ssdeep":"","tlshash":"41411a3b1e90b6f05b016c096ea86919e2e13713af90c5611d72e78925ef1a1acb41c8","first_seen":"2025-04-22T03:28:37.723262Z","last_seen":"2026-07-25T06:54:28.800141Z","times_seen":93,"resource_available":false,"data":null}},"time_used":859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":855,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-25T18:43:31.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 18:43:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 10:17:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CqV6M33wvCKI9Bq67wocBYnJz3p7dhvwhtYLiX0cSEgIBN5XQ8YsNuoIWqMFJSdLCA%2B1xsyJhjCXloPRkN%2FfoUHFiKo7zCGjje1ycwbpoY5ueoyD1ONxx0bcnjBLw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a016afa7ca2f568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":682,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3d496698b14b5906b41f9476e0b1f0ac","sha1":"c021d6190590cd67a1e96166838e0e82b1a48357","sha256":"3a0c428a05747c00225add183cd21911dcd06b06ba3509c9e036ea97b455e5cc","sha512":"3a35de261d43018b7d5a9368d134dba652bff09eb556690b69c9d7f4b82087c05475882d2896bc3647497ee1144072ca4f58ea5c17035ab61cc892470df32ff9","ssdeep":"","tlshash":"e301765488f1883602240a1529e1e5687e92f3471108d948b5eed47c0fc0f868f9b838","first_seen":"2026-05-25T18:44:02.996081Z","last_seen":"2026-05-25T18:44:02.996081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":71,"dns":54,"connect":1,"send":0,"wait":102,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/lodash-D4buZeE3.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:31.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/lodash-D4buZeE3.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33LQv4GQ1sCuvo4eL2CZi%2BwqQ9tUkdeXguSrOfFgfwLCb1g6fNdowgczICAsVv4S7cmE0Ife3vXFFGzaaETAnyTQWaNvkbE0ZlsIqcOuIW1%2F0VKuE3vtP18PTbV%2BUA%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:31 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:31 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6a1421bb-9a1\"\r\ncf-ray: a016afac9c8032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2465,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2464)","md5":"4e47d31ca68a6629fe0da60610660fce","sha1":"42f9a90197131981bc2e7a62d725e9dca10f3cca","sha256":"a6adc0d0e90c40eb9de81f9e3f94d412a433b11a0d6f6fa27aef2d8c0204ebb2","sha512":"c952ad244c5926745dad93784c971bdece9903bc31fe5f5165bcf4b139b02f5aabf59c70e700a813b90d05cabc218062a5cd461c94bfed7d894edf7be3ba6937","ssdeep":"","tlshash":"7351dcc8b5c7f5d103a34974803f640bf13d687504adb090e26bd0f1be790aea623e6a","first_seen":"2025-08-08T03:15:30.692349Z","last_seen":"2026-05-25T18:44:02.997015Z","times_seen":12,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/Layout-ZerDBtUO.css","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/Layout-ZerDBtUO.css HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rGu0OWhR27Yi90xRCiauqmVj8KZkLGrQ%2Bg61ksHW2VEN2op4a8lAozkmhV7lPhkalNJ01nZ%2BbwkK5hQnk%2FESuxrm8das8EQrWjgp6P8GJm0P%2BxZejYbGj1W40soDNQ%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:30 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:32 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a1421ba-263c\"\r\ncf-ray: a016afadfcd732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9788,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9787)","md5":"f27e811b1abe733587b4cb5afd792cee","sha1":"f26c4f906bc3c0600763b356f0c0eb460a3ddaf6","sha256":"c2d4bb7611110453f512de4111205198aad17a73d7037fb415498ff638f509ce","sha512":"6c9441a638fa92678530c22cc2228c8cc79d789ff3532feb603b81bf28c09df16d446076f3d502ae375b4dc6d1eeb10e7d9ad2c754d6d7138b31b7ec98ff5e10","ssdeep":"192:x3Cr/2dYAx1iIlLRjIKghAsgzgKgzgygzgDygzgLgzgGgzg1gzgdRCh9RGVY91wL:UqdYs1dPeJoRopo3oYoro0owgTRGVY90","tlshash":"571232f04ec2573ebc27e4162a859fdca3159842d8770a9d6e19336d49c3ef64a3260e","first_seen":"2026-05-25T18:44:02.997905Z","last_seen":"2026-05-25T18:44:02.997905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/Button-Df7kpX0I.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/Button-Df7kpX0I.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/assets/Layout-BtCoZmwK.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02aYw2t%2BaKmACdbplT9VeRnef9FUdArihoI5PwaW5QYysqy0gFPR0RhTgUqtgoZs39dqEbwLQGYhfJw7WvApSsw%2B5UpsA5YZxaOZiW0XDD6KZexdDqDWJuPGBvLM6A%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:09 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:32 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6a1421a5-a275f\"\r\ncf-ray: a016afaf0d5632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":665439,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37020)","md5":"7950bdca4c84182364de30010efd0c88","sha1":"fd576330888909a7ba38143ada15f3a0d3f5800d","sha256":"54631878cfc40ab76de2492d2b7b6322707100a3b5f46d009829bc4aaba0867b","sha512":"4337fe6474ce83e20cda05bb3cb01ad23e5142fcf682314a09b7ca9b32a13968be7de0adfa0fb1715653cb87ecc04872c733a0e9fcf9b038e3b4d37208aa6229","ssdeep":"12288:tZULEvdooPqJjJmFO5jTsMrq4y16ocnjNg:jZvdooyJtmFO5/tq4yoo+g","tlshash":"24e45c807396b07103aa55e5903b1102f3399864300d84acf7acedef7ea954a967ff79","first_seen":"2026-05-25T18:44:02.991209Z","last_seen":"2026-05-25T18:44:02.991209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlbot.com/favicon.png","fqdn":"amlbot.com","domain":"amlbot.com","tld":"com"},"ip":{"addr":"104.26.8.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlbot.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 02:27:38 GMT","end":"Sat, 25 Jul 2026 02:27:37 GMT"},"fingerprint":{"sha1":"FB:90:0C:7A:5B:87:F3:77:90:E7:6B:34:E3:AE:31:2E:9E:8B:68:E4","sha256":"22:55:A3:32:85:93:06:3E:CA:48:BA:E1:8D:9D:E5:D6:BF:2C:59:51:67:EA:CA:2A:07:77:A4:C5:D8:60:39:AE"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: amlbot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 842\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=120\r\nlast-modified: Sat, 23 May 2026 03:07:35 GMT\r\netag: W/\"34a-19e52cd70b7\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 amlbot.com (Apache/2.4.41)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ge6ZvIddRrGkIiSwFidWeP1TZAxmez%2BmVc0%2B1RkT4Fja7KkqhvFnBjgJ11Ukt67o8fpBHU36ZqUt%2FVG9vfNo%2FUizPW1cubEYFOpuJaqecV8gm%2BM88IKiosIUZ60%3D\"}]}\r\ncf-cache-status: EXPIRED\r\ncf-ray: a016afafc91056a5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"476eed806d70bf9f1bfdecf4baf2e309","sha1":"97e7c78720573a83268c59ca94c2cd3f4509b87d","sha256":"5f5e527b934604aca616122cb13de8a844caa057dc72d8e9310086998f6c61a7","sha512":"e424a2d6608c004c7f8b4d122c9855d5148ed4d8ad6cbfed40e14f647b8ecc50b1c46c2d5c5357f6b30ec8b75f6aa332e8fa8698dd6599c4f9b0e5b5a3874721","ssdeep":"","tlshash":"870170afa2392807d0f80e99eb12528edc91934c611abe14cc280703867fcb3f2a1d03","first_seen":"2024-10-04T11:01:22.290979Z","last_seen":"2026-07-08T18:26:51.916662Z","times_seen":319,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":22,"connect":1,"send":0,"wait":353,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 19 May 2026 13:23:57 GMT\r\nexpires: Wed, 19 May 2027 13:23:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 537575\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-07-26T09:32:07.319317Z","times_seen":11070,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/browser-oTl4QaM2.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:43.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/browser-oTl4QaM2.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MRer2YsUspTJFtxZovkJ%2FfOtGPjVvhc0isSUXZTuPDZuffAzvHdWB7GDTu6Zu5dsAszNRnGApl%2FIMi1mcS%2Ba0Ti1mkw8zmbszocK3l2nHEAhQeKzRGQAUNOWd1%2BRQg%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:08 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:44 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a1421a4-6544\"\r\ncf-ray: a016aff7b88732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25924,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8592)","md5":"2ba24a989a8b89351c4894165a4306ce","sha1":"6d928ada5fc09f22868e1e246d7c9fae9e5f9964","sha256":"6a8cc913518e46d16974cb26fff8b4c2463a5d0c843e950989ebff0c7e43cb96","sha512":"83acddbec4780782c37a1702ca1d434e85b56faaea94cb09095ba4f296c469269d866b4a8eeffacf958b364cd7dd609da391bec2982f1ef36c05c56801744868","ssdeep":"768:NN7PJx4iof7k5aKT72ozRCmrO1/h2YZ0qoNOoNejyjP5aSTI04q1yQl9RrK:1T0YOoNQEDs","tlshash":"9ac2f8e933d271ab439351ea007f1809e2fe6c60342d586cea59a4d37d749ba81b7f1c","first_seen":"2025-10-20T21:27:42.379379Z","last_seen":"2026-05-25T18:44:03.000403Z","times_seen":2,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/lit-html-DkOANEsa.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/lit-html-DkOANEsa.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/assets/index-ChFKj-SI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=16u%2B0SJATTCQGLG%2BvCmI51aVzEe7u2qQ1Fj7stdgg5yxlBa1C0J6lcYUVkugSQW47dXEJFWrh63H65OfTAmpUZ7DW4WnN%2FNZ8Rkyuz9LViwV1T9LYzAgzdGqbMRY%2FA%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:30 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:44 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6a1421ba-1bec\"\r\ncf-ray: a016aff8f8bf32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7148,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6592)","md5":"7e1f17db02dae07c4427954c0d4d5474","sha1":"fb159296079d0a1380fcdefde9241c8077e938f9","sha256":"80887817a61126a1781b3eb6c14ea0fc360d9c3c98c6f205a5204ec5934392fc","sha512":"a123fcc11d102ce12877eba0baf9383d855ce6edc4200f147ed9d3a64e93eb7ba68e70560faeffac828190d3a2d0d4174ee74956e83c5c79da8529c10f3cabbe","ssdeep":"192:sdnSKqO1aurVVi9wkaRII6/zhM5+7fwmG24NbC:eSKqOUuR09wkCII6/8+bwmG24NG","tlshash":"31e1735432f955a26ae18ad1dc77141fe3507094383a646cb1ac7eef682cf42b0f9b78","first_seen":"2025-10-20T21:27:42.364614Z","last_seen":"2026-05-25T18:44:03.001877Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/locales/en/translation.json","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:31.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /locales/en/translation.json HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XShBe7r3QgDyrQ7CKCAs69lFxCY73vtKs2UjDbA2jxa6bH%2F%2FLIIcu9weZm8j%2BLE0dIbiu3jan82lx16mCmvp%2Bay%2F%2BIqCPTuGqNHmZXgNbstfAg1VT%2Fgjjl2goRP3aw%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:58 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"6a1421d6-8f3\"\r\ncf-ray: a016afacfc9432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2291,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7886783e3ba6025c37c6cd0bf7681a1c","sha1":"7a0c8955844584f348f0f6578b2183ea71da3be2","sha256":"a3c7393c11cfb65559168fce4df2f86bdd0e85580c63bb759aa79c9a11497619","sha512":"34a2b2ca0e6170e359e95535cf79633415adf2041caea8f31779f375da5781becf82d40efb84c1efc416d58f8a84239354824df54cc85668f8895049f8f3434b","ssdeep":"","tlshash":"4d41be24ca24585743c032656e6682da3635068f27a03c1c3bcc905c1f6ecbbcdfa63e","first_seen":"2026-05-25T18:44:03.002798Z","last_seen":"2026-05-25T18:44:03.002798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/browser-oTl4QaM2.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/browser-oTl4QaM2.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/assets/index-ChFKj-SI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNr8GV0F%2FGHw8nX3lkKtpCqccBhqPiihkp7hfLl2utid6HOaTxHQSH95EMTfvwTYMx8%2BvCyDmiSJ5slUYXCXUxehnDfn%2FxUot8SLEAuQGus0IO9IEzPwzA3WBLW%2BzQ%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:08 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:44 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6a1421a4-6544\"\r\ncf-ray: a016aff8f8c032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25924,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8592)","md5":"2ba24a989a8b89351c4894165a4306ce","sha1":"6d928ada5fc09f22868e1e246d7c9fae9e5f9964","sha256":"6a8cc913518e46d16974cb26fff8b4c2463a5d0c843e950989ebff0c7e43cb96","sha512":"83acddbec4780782c37a1702ca1d434e85b56faaea94cb09095ba4f296c469269d866b4a8eeffacf958b364cd7dd609da391bec2982f1ef36c05c56801744868","ssdeep":"768:NN7PJx4iof7k5aKT72ozRCmrO1/h2YZ0qoNOoNejyjP5aSTI04q1yQl9RrK:1T0YOoNQEDs","tlshash":"9ac2f8e933d271ab439351ea007f1809e2fe6c60342d586cea59a4d37d749ba81b7f1c","first_seen":"2025-10-20T21:27:42.379379Z","last_seen":"2026-05-25T18:44:03.000403Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/a578bd45-b418-4111-2c56-8ddcd1417c00?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/a578bd45-b418-4111-2c56-8ddcd1417c00?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\ncf-ray: a016affbdf8f56a8-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cf8138lwll85CT5YPiKCWS7C-JfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=929+3 c=0+3 v=2025.1.5 l=1572 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b34396e0b368eeb1a959d4097c57ca06","sha1":"794c1c1d46024e7a71eccade699371bf3c2e607c","sha256":"5f4242b7ef757990413f12d98c5da28782e5596b638470794a0d1fc668705ac1","sha512":"4a9d0b25d7f57df7810d69fd0d528508f6255aaa43d23a00499ac93501840010d7304db1eb6c28dfa2fd3d8ec70cc733be8e7f7d762e05ae3bb158602bb4af51","ssdeep":"","tlshash":"f931b71952cb8fdf20518726d2089bdb88974c7fdb70661bc5071a59d9cc12ea5ccca0","first_seen":"2025-03-04T08:48:45.493818Z","last_seen":"2026-07-13T08:20:55.986093Z","times_seen":204,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/04c88bf0-f115-4686-8c29-90a3d018a400?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/04c88bf0-f115-4686-8c29-90a3d018a400?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 406\r\npriority: u=4,i=?0\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: a016affbf82156ba-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cf9qgEBITH7zSvthI56ruj22YhfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1134+3 c=1+1 v=2025.10.7 l=406 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":406,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c7911e7eef3c629e72e4c56873d18c0b","sha1":"ffaab9e441629a085c42315311aed7d7034a14b2","sha256":"01dcb2d46a29c4649e23b9abd191007757fc774cd5a7cfcd153b4ad11d45f7a3","sha512":"e3daf40749d9472cd1b89f08da7be3d7703f4f9785fc91eb50627535d207532a392bf28a7bb21bc39d4e091f43c89ed6ca8f4ad4d53cd44cf314b45584b39fe4","ssdeep":"","tlshash":"f3e02b805e82062eaf812c31f4b10f5223c009a04ac08e0e92d391223930b53be2aa78","first_seen":"2025-10-17T01:54:01.19513Z","last_seen":"2026-07-09T21:10:40.471438Z","times_seen":114,"resource_available":false,"data":null}},"time_used":1159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/26a8f588-3231-4411-60ce-5bb6b805a700?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/26a8f588-3231-4411-60ce-5bb6b805a700?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2280\r\npriority: u=4,i=?0\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: a016affbf82556ba-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfFoBrhiSdXc-5bSBTCH9FBcdMfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1006+5 c=0+5 v=2024.10.6 l=2280 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3a1a4809f2ea713cab7d85c55483e86e","sha1":"fd2ae1b7f69d11c8658773c14427cd80b33e7515","sha256":"cd5e2b5da05148116021dec0e6a091c05a97a8e471db6d1853cbf3c1efa23f69","sha512":"846b36264202e340e8ea01eae2eb5efb2ff5c18e37bac73d59223f3be38e886e744f71a680d52859556df7e5cf868d1c0dba31f854c5563b5f156b15f95b6d0c","ssdeep":"","tlshash":"5541fb73015a7f6cb37c94a96de3b14619447d615022484538c620d913bc49b1b7f9ad","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-07-03T21:59:28.972736Z","times_seen":55,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/7eca0311-abf5-4902-43e9-51858403e200?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/7eca0311-abf5-4902-43e9-51858403e200?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3014\r\npriority: u=4,i=?0\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: a016affbf82656ba-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfJWxIZt1IcxyAO4jn2WoDVo02fmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=19+29 c=22+7 v=2025.2.2 l=3014 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3014,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75d3a002591aa1041d731e21d91d858a","sha1":"ece6b468255c24c5ce41a04637feb44f55635766","sha256":"6d797a42aa08cd4b44453528df5846fbc63653070ae60757e824e64cad243a84","sha512":"e30a0dad6b9e2d9311db6db38c57b47616b07bcf7f5e332a7339936591148454abffa4e22646b5d33e142dc4587507c1aff13280863722587bd6897cc2d2561f","ssdeep":"","tlshash":"64512980677adc68cb58021458d9cb1ff5690be207069bd87b033ca8786ff9915a3c59","first_seen":"2026-04-18T13:33:30.464808Z","last_seen":"2026-07-25T20:24:02.839849Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/80583973-8b44-4bef-0af9-099cfdbed600?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/80583973-8b44-4bef-0af9-099cfdbed600?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-length: 1410\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-content-type-options: nosniff\r\ncf-ray: a016affc082956ba-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfsPiRTin5xk3hp7teen-p5zoyfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\nx-robots-tag: noindex\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=17+0 c=1+5 v=2023.9.8 l=1410\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5d4f61f358214f9e265f3558474239cc","sha1":"89f2838e605cc72ec94968497f208ef810625c01","sha256":"0409458af0c9f972a6657f438742b9dab7ef74d74d8bb666a4aaf9b0cfce1b4a","sha512":"c1113711d74dbcd80edfdbed53e547ea632bc4747c4900ee8934567c5fb145934950b07080f54fff69033ec3df69ba0b74abbcbf998d3c4e2fd43877fe0a2f64","ssdeep":"","tlshash":"0e213b9632fa3312c8680b61f4e157b00a03bcc25032c7123c8203453270320b1c67ff","first_seen":"2026-05-25T18:44:03.007726Z","last_seen":"2026-05-25T18:44:03.007726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/Layout-BtCoZmwK.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/Layout-BtCoZmwK.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WL4QnAdZSlF%2BqR%2BDbb9hpTIIe10PLmEFEAmBPJ%2BJijlJ1v7NJKi5Y22vl14Tyga49yD5Ig7JEMctFNYeTdXfMh3ntjWiZvwIiuJL7ErrCXSxi1t%2Bbazn%2FC7be8uIQ%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:32 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a1421b8-854d\"\r\ncf-ray: a016afae0cdb32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34125,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8616)","md5":"f4eca63561d0240e5696b009f6ac57a3","sha1":"c42c163be51939526ef79746dc75a8de511c5249","sha256":"3846bc778a45df4af1fa7acdbee9cfeda04f402c15d16dea0b090717546ce3f8","sha512":"b7f9162d74307874c9b6dfc1992c476087853b3124b11e3d401b2a6f1ea5085f2ce26f58251ab5aed796e6976644d3c2bedfc68e6faad651120da965af71ec62","ssdeep":"768:2FRhnmbs7/IKP0grh/Xltyf6FWZGb3KRcWQDYn9n/ANjEianLLrolybyS/tZ:EYbs7/VP0oBXve6YZxWkLicbh","tlshash":"00e23a80f061a63ddfab01c954bf8118701d6e99e52e8890f27c143e1fad548b7abbcd","first_seen":"2026-05-25T18:44:03.008644Z","last_seen":"2026-05-25T18:44:03.008644Z","times_seen":1,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 19 May 2026 13:29:53 GMT\r\nexpires: Wed, 19 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 537219\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-26T10:24:37.05866Z","times_seen":246624,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":109,"dns":36,"connect":9,"send":0,"wait":11,"receive":10,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/4c16cad4-cac9-4643-6726-c696efaf5200?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/4c16cad4-cac9-4643-6726-c696efaf5200?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3334\r\ncf-ray: a016affbef9f56a8-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfi8b0hPD3q7U39aV1RkpFFz8RfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=16+0 c=0+5 v=2023.9.8 l=3334\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adb282163d619a97ec44427f12df5d43","sha1":"a1c10417ed604229709795569d570036980334ae","sha256":"1fbbb4ff9c79d6a4c0d0545c410149d1b69fb38eeb25c787af7a91cc385701de","sha512":"cba016d4aa33a2753e9635ac97245e16d05965403d948a7996528f0514645f34b759b5978c4add2fe7adae5b32c7ce6e7ba50bd76cdda04a8f66108ed350b776","ssdeep":"","tlshash":"53614bdb0b0ea0a5147534360548fc1a315b87f07ba4faae2382cc689ea81f5da7c1d4","first_seen":"2024-07-08T23:13:45Z","last_seen":"2026-07-25T06:54:28.756041Z","times_seen":291,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/7c2cee4e-a5bd-4ebd-277d-f496c69fa000?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/7c2cee4e-a5bd-4ebd-277d-f496c69fa000?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1508\r\npriority: u=4,i=?0\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: a016affbe81f56ba-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cf9e6rjyr-bBkWoPuSw_vsUwKifmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=843+2 c=0+1 v=2025.9.5 l=1508 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e8857769972441243d690548cf3e485","sha1":"38328c4d250c38d98763e7b89cfeca1b3b7bb2c2","sha256":"7e7be8edd769cd0ee13580176c51f034867846e592e3434e4b0f30f2cc8b709b","sha512":"121207c756badb363bc86cc8c09ab16965dd26c89d151bc25bdaf3cc106621ab5eed1ef14618394595d80309e2b322e853b20a0f55baada496a60aade841a670","ssdeep":"","tlshash":"7231b59e09441c24511aaaff2ccaa4ab32b5249268afd635c30b5ae6a65454d383f1c8","first_seen":"2025-10-02T02:13:48.566179Z","last_seen":"2026-07-25T14:01:12.66149Z","times_seen":688,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":887,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/4903acdd-6463-44b6-3cf9-f23f4c75ca00?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/4903acdd-6463-44b6-3cf9-f23f4c75ca00?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2170\r\npriority: u=4,i=?0\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: a016affbf82856ba-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfvwc1wxIznoUBL67lMrkSkVcCfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=40+5 c=0+5 v=2024.10.6 l=2170 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f9a08d3a5f43db4916f92c0f38564544","sha1":"91784edf4a3e49aa27620978854d39601462c053","sha256":"17e5bf8faeb7b9fbb0db0690ef12e280710ed38f8a9296012669c22db68fb8af","sha512":"98f0b374602b31b12559ef8f479d8226f3c6f5cd4580f35c1e488910b08bb118aaa9c0557b3a6158c35094dced7b267e0aa2248caeb62357cc17df2f1a1e4ec0","ssdeep":"","tlshash":"5b413a26cc5c2ae0d0169137308722b57f93d54af75eb3a6b801a6b3a1e89c159f7405","first_seen":"2025-03-04T08:48:45.500974Z","last_seen":"2026-07-03T21:59:28.8634Z","times_seen":56,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":925,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 19 May 2026 13:29:53 GMT\r\nexpires: Wed, 19 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 537219\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-26T10:24:37.05866Z","times_seen":246624,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":232,"dns":30,"connect":22,"send":0,"wait":11,"receive":2,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Apr 2026 21:16:17 GMT","end":"Tue, 28 Jul 2026 22:16:15 GMT"},"fingerprint":{"sha1":"6D:CC:48:D6:E1:8C:50:0D:7C:B9:13:15:F0:18:E0:73:56:59:60:F7","sha256":"00:FD:76:18:CB:8D:B6:5A:4C:B7:0A:37:77:28:B1:01:5C:3D:6A:E4:2D:06:02:C1:9D:B8:6B:F8:6F:F8:31:77"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a016afb16da549c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":38,"connect":2,"send":0,"wait":103,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/index-DmmKE1ZL.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:31.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/index-DmmKE1ZL.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WfKpna7Ut5Uj9PYpA7ihgVMhdA476rvIR4VdnBIVGYrUZ0vU1ovl2lSZhbj51%2BUgUHgVPQAEsJVTddrwQDtGa8o26cvdsG5FMKDx8jBKxja6ieGmOasqYQwnrU0uhg%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:31 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a1421b5-11f398\"\r\ncf-ray: a016afa93bc732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1176472,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44792)","md5":"5db4fbb2b9f806cbce9b6f5011cd46ba","sha1":"9e325af1903cc959e46b861803330739a199b1d9","sha256":"2b201358530e94a5ca8ce7299b5de1c6a579cd812eca75a574851a4f15821714","sha512":"6e9ed7b2c38ca12a6542dbc34cd888767c4ea9aba4497eefc75df7a744c0edab055370ab187d54eb13a920c32c090beb85f53eb76b914164ab61f36ec14f9cdd","ssdeep":"24576:Qob8/T4LnFJxWAsq2da0mhJ3Jz+QpUi7bsttg2EeLXhw623Dw+OhhrEc:Qob8/TQFJxWAsq2da0mhJ3Jz+QpUi7b+","tlshash":"8f25088832d6f662439120e0153b480eb23d6a6dd01ca5a5f388e8e77ef55d6427ff78","first_seen":"2026-05-25T18:44:03.013052Z","last_seen":"2026-05-25T18:44:03.013052Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/Layout-BtCoZmwK.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/Layout-BtCoZmwK.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/assets/index-DmmKE1ZL.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QiivVJEEFhW%2BFtsKuYqbP4KwW5J2woxCO0JxSCzzgDxF%2FR0dEwSe40ubDiN2IlnnEWVqAVQABvStqMo%2BL105iWvoV692u6Wb8spLvLkU4SIPPMKyGPkUm94bIMkTlQ%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:32 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6a1421b8-854d\"\r\ncf-ray: a016afaeed4232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34125,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8616)","md5":"f4eca63561d0240e5696b009f6ac57a3","sha1":"c42c163be51939526ef79746dc75a8de511c5249","sha256":"3846bc778a45df4af1fa7acdbee9cfeda04f402c15d16dea0b090717546ce3f8","sha512":"b7f9162d74307874c9b6dfc1992c476087853b3124b11e3d401b2a6f1ea5085f2ce26f58251ab5aed796e6976644d3c2bedfc68e6faad651120da965af71ec62","ssdeep":"768:2FRhnmbs7/IKP0grh/Xltyf6FWZGb3KRcWQDYn9n/ANjEianLLrolybyS/tZ:EYbs7/VP0oBXve6YZxWkLicbh","tlshash":"00e23a80f061a63ddfab01c954bf8118701d6e99e52e8890f27c143e1fad548b7abbcd","first_seen":"2026-05-25T18:44:03.008644Z","last_seen":"2026-05-25T18:44:03.008644Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/StatsSection-BHTjIIJ0.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/StatsSection-BHTjIIJ0.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/assets/Layout-BtCoZmwK.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BRlJiomXiMUQpPBXEZqHc4XagfYJpEJ3GT0dMi9mpXa5FLirJP7IDWvmWvyL5zFno6m5WeUGVJ%2FbtQlJVNvj00KSb2nFbTWp6sL699X%2BtiH9sn8X8xz7FnPuRHaCYA%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:48 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:32 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6a1421cc-1fb21\"\r\ncf-ray: a016afaf0d5532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129825,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"3595b97f59d0b2e977c3447bafbcbac9","sha1":"a4548b364721cb261cb5f346f2cdd5367e2d702e","sha256":"e7c0bf8b7e5b52d07044289c7b2fc7b28210fdc86d07f1c0c05356865acbcacc","sha512":"ad34599c38bbe5bfee00f895009bd39143cac1474681ca9a1a1d37139e3da792253b1f1fc1df4bd54ed25ded54644f2183ee6b90a3a3588642aaae2e4e3b32f1","ssdeep":"3072:X5lZRENbGbQh4I3sLnu97KegdZ3eY6O4RqiCG6H09:X59YbcQB3+yKegdT6O4UiCGY09","tlshash":"21c319c97290756683e789e5d06f0640b33a19c8341dc0bcb67dadcb6d2140aa7bbb7d","first_seen":"2026-05-25T18:44:03.013935Z","last_seen":"2026-05-25T18:44:03.013935Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 19 May 2026 13:29:53 GMT\r\nexpires: Wed, 19 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 537219\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-26T10:24:37.05866Z","times_seen":246624,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":190,"dns":39,"connect":7,"send":0,"wait":8,"receive":2,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 19 May 2026 13:29:53 GMT\r\nexpires: Wed, 19 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 537219\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-26T10:24:37.05866Z","times_seen":246624,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":236,"dns":35,"connect":9,"send":0,"wait":8,"receive":3,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/index-DmmKE1ZL.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:43.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/index-DmmKE1ZL.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVUgDyxoUIeJlHWaKbpMVdQBGK8lPPXTRo15Sm0%2Fr6vngblfspnYrYaQbHVsNiLabNiA5Y6ROgVoQdNcRQmwXO4SwOzBpExMY%2FPBRUGgnpf%2BQ8LF7l3M4ZUHzRrmcw%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:25 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:31 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\nage: 12\r\ncf-cache-status: HIT\r\netag: W/\"6a1421b5-11f398\"\r\ncf-ray: a016aff7b88932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1176472,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44792)","md5":"5db4fbb2b9f806cbce9b6f5011cd46ba","sha1":"9e325af1903cc959e46b861803330739a199b1d9","sha256":"2b201358530e94a5ca8ce7299b5de1c6a579cd812eca75a574851a4f15821714","sha512":"6e9ed7b2c38ca12a6542dbc34cd888767c4ea9aba4497eefc75df7a744c0edab055370ab187d54eb13a920c32c090beb85f53eb76b914164ab61f36ec14f9cdd","ssdeep":"24576:Qob8/T4LnFJxWAsq2da0mhJ3Jz+QpUi7bsttg2EeLXhw623Dw+OhhrEc:Qob8/TQFJxWAsq2da0mhJ3Jz+QpUi7b+","tlshash":"8f25088832d6f662439120e0153b480eb23d6a6dd01ca5a5f388e8e77ef55d6427ff78","first_seen":"2026-05-25T18:44:03.013052Z","last_seen":"2026-05-25T18:44:03.013052Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/index-mvsDpn9f.css","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:31.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/index-mvsDpn9f.css HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2qFuniiMglbWrtdGx84aJm5T81vxglIoOuGJKMIhIrRIv%2Be7qJ6D8or2Wycowskuq%2BUtwNcj%2F4vF485DV%2F6uiU8DonFBtqCbcYqQ6xFNcKb2yFYqNurNTc%2FPwM%2FLg%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:31 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a1421b6-7939\"\r\ncf-ray: a016afa93bc832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31032)","md5":"722e9b017a537d3818fb0633fef6f677","sha1":"5defcddb8945b63eefe25fc427007374288bd158","sha256":"35c76252b5d94f9c11751385d4be8cd2079d3b95bd9b18846ee39a38e755470c","sha512":"2253c54cf707d5ef0ba6b9c781ee3264d6fbd92cb9d1c06f8d78e2244e54037235e5a7038c3902f916f368a334fa4b4b83fcf2f7915a1dc4d6534e1a0ae325c0","ssdeep":"384:FuZRWrR9PKHZGNAz434TyfI/HZNjrnIzi3A22ByIxJMR7jf:kZwrRFK53ZNjrIe6JMJ","tlshash":"26d28615e7c2043b3e07d4e98594f7fca308ec86a66b47eea65713713ec53a9c8e9500","first_seen":"2026-05-25T18:44:03.014868Z","last_seen":"2026-05-25T18:44:03.014868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/lodash-D4buZeE3.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:31.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/lodash-D4buZeE3.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/assets/index-DmmKE1ZL.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apvLAh4F1NICwIRi%2BEAjjcXnoy20ethowJ7TJbcF4l5Ets1sDysUVXD%2FHlqarmrjshSGHjRFfuMgk1l9hgqZwtuCs5ufRDwIo30Lb%2FPdf6YkzXAzD28UsqkTfQ2uog%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:31 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:31 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a1421bb-9a1\"\r\ncf-ray: a016afabfc6232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2465,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2464)","md5":"4e47d31ca68a6629fe0da60610660fce","sha1":"42f9a90197131981bc2e7a62d725e9dca10f3cca","sha256":"a6adc0d0e90c40eb9de81f9e3f94d412a433b11a0d6f6fa27aef2d8c0204ebb2","sha512":"c952ad244c5926745dad93784c971bdece9903bc31fe5f5165bcf4b139b02f5aabf59c70e700a813b90d05cabc218062a5cd461c94bfed7d894edf7be3ba6937","ssdeep":"","tlshash":"7351dcc8b5c7f5d103a34974803f640bf13d687504adb090e26bd0f1be790aea623e6a","first_seen":"2025-08-08T03:15:30.692349Z","last_seen":"2026-05-25T18:44:02.997015Z","times_seen":12,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /css2?family=DM+Sans:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 25 May 2026 18:43:32 GMT\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2661,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"133c49d93c90ee2a37f0bc1925994575","sha1":"dc39271b772db50e087d2df87b05d76d633de31f","sha256":"bef84bf20a597f5dee644e4e04158b2602810fe705906cd0703c02b0338ee821","sha512":"6ab01451653fc35f661f3f25dd0aa026ca9d65e64da13127fb9809c12c0b0519375e424e64e2c0cc29882a73294fc3ac342fa9c3445d9431962da9ddbe54fff8","ssdeep":"","tlshash":"30519981046ba550eb971cc422cdbe62ef1fa15424549c74abfe188cacaac3d5362b8d","first_seen":"2025-09-11T17:08:25.90182Z","last_seen":"2026-07-26T08:34:09.405227Z","times_seen":2843,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=225affb176778569276e484e1b92637ad061b01e13a048b35a9d280c3b58970f%2C1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Ce9ff15be73584489ca4a66f64d32c4537711797e30b6660dbcb71ea72a42b1f4%2Cef333840daf915aafdc4a004525502d6d49d77bd9c65e0642dbaefb3c2893bef%2C20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa%2C63488e0e0679da829dd964a670f2d0bf8643f52aa2d5a8a8539c3a4fcad6a78a%2Cfbea6f68df4e6ce163c144df86da89f24cb244f19b53903e26aea9ab7de6393c%2C7674bb4e353bf52886768a3ddc2a4562ce2f4191c80831291218ebd90f5f5e26%2C380efff687c7d2222d62378c588d45d2e0ff40a0fc4d8f778c4d6fbe58cec5ed%2C67f1ec404dbf3bddc509b5fcf615850e05b28c287ccd7167b4fe81b4293ac9df%2Cf2436c67184f158d1beda5df53298ee84abfc367581e4505134b5bcf5f46697d%2C24fd8104e07aa1802aef51426222f23868013b83655fb6686c8478744dd2fda1%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2C2a3c89040ac3b723a1972a33a125b1db11e258a6975d3a61252cd64e6ea5ea01","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=225affb176778569276e484e1b92637ad061b01e13a048b35a9d280c3b58970f%2C1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Ce9ff15be73584489ca4a66f64d32c4537711797e30b6660dbcb71ea72a42b1f4%2Cef333840daf915aafdc4a004525502d6d49d77bd9c65e0642dbaefb3c2893bef%2C20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa%2C63488e0e0679da829dd964a670f2d0bf8643f52aa2d5a8a8539c3a4fcad6a78a%2Cfbea6f68df4e6ce163c144df86da89f24cb244f19b53903e26aea9ab7de6393c%2C7674bb4e353bf52886768a3ddc2a4562ce2f4191c80831291218ebd90f5f5e26%2C380efff687c7d2222d62378c588d45d2e0ff40a0fc4d8f778c4d6fbe58cec5ed%2C67f1ec404dbf3bddc509b5fcf615850e05b28c287ccd7167b4fe81b4293ac9df%2Cf2436c67184f158d1beda5df53298ee84abfc367581e4505134b5bcf5f46697d%2C24fd8104e07aa1802aef51426222f23868013b83655fb6686c8478744dd2fda1%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2C2a3c89040ac3b723a1972a33a125b1db11e258a6975d3a61252cd64e6ea5ea01 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 18:43:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a016aff97cfc56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13923,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5bd9f5292d30bf97be1f3371403e97de","sha1":"b33538774e588ae650f10934ffd823c5590377ec","sha256":"1f075fdedb17c1f0e8031d0beffc55175a8cc229e21e5e249aec69824ae8833a","sha512":"e78ccf3919ed4a411dd8f52aa222bbf0642e05b05b75c89176b3ffa5dd58a5b51b95eef2cbf387a3b93c118a2866fde8dc732c408418fb34e29a3d81506f53f3","ssdeep":"192:ofvTDbU6XzJxD5wfQ15ArOioXvJLUtrc5fkLc:ofvbJFGg2rRSLYrc5fZ","tlshash":"695244ab8f804f6b1f1407c9612d399c699e254bdac56ce2f180cf6c44f4ef926125a7","first_seen":"2026-05-25T18:44:03.016258Z","last_seen":"2026-05-25T18:44:03.016258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":56,"dns":35,"connect":1,"send":0,"wait":321,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/7a33d7f1-3d12-4b5c-f3ee-5cd83cb1b500?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/7a33d7f1-3d12-4b5c-f3ee-5cd83cb1b500?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1420\r\ncf-ray: a016affbdf9256a8-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfwRKJ_GQ6vp6Uxle7v9sGNjM5fmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1051+0 c=11+18 v=2023.9.8 l=1420\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1420,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cc86f8a6321c0d1bc7c8e6b69518857","sha1":"45d314a09a486669bfc809dbcfae28f820566429","sha256":"e8a9d0ed202eae37d485eaa6703840fd0661261e2802731020c7c1268adafa47","sha512":"c53c08b8b033bfbfdf598970fa5a0417e25aefac1fea6812ad29e3a27f8fd478882eefb06a0f5f969d0066f66e9cc68b230cdce354c44337532a3959525b2bfa","ssdeep":"","tlshash":"93213bf99caf4219b702f4a9e811f4de6e58bc10ff09044280b0e6f314780e119ed4d3","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-07-25T20:24:02.638443Z","times_seen":400,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":855,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/853e6f0a-ccb6-4b7e-e73b-89171a4e0a00?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/853e6f0a-ccb6-4b7e-e73b-89171a4e0a00?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-length: 1712\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-content-type-options: nosniff\r\ncf-ray: a016affbf82256ba-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfBuCtCE26Jgdu2MxhVtLZ_N0SfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\nx-robots-tag: noindex\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=2179+0 c=7+24 v=2023.9.8 l=1712\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e229360dfc53c5c4f4d9b30ba1f2d19a","sha1":"bb1d44a9d1c543df6f63cf3c2b085e2963528460","sha256":"f51424660e3c42320c5e667e4e7ad6c067cc8a763537b0655f24287d29ab727c","sha512":"c9c6f534d1259d911d31f3af1446cc44feb5cfbc6c8470d5f6361c45e1867c59cad130dce06caffb4eb755089f0e59f55a3770560a83a1d075d4ce0974f48b5a","ssdeep":"","tlshash":"0a3108b2cc14ea607199f503f486b54345ac997e37d58a20f48a7ec8856e0409ee0c81","first_seen":"2025-11-27T16:59:39.302096Z","last_seen":"2026-05-25T18:44:03.018405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1035,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/70d8a90b-457b-4c04-4bc3-791e97caab00?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/70d8a90b-457b-4c04-4bc3-791e97caab00?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1328\r\npriority: u=4,i=?0\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: a016affbf82756ba-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEaju-bF8H0xrnAX9M2dafpZcfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=23+3 c=0+2 v=2025.2.4 l=1328 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"096eefb5fde8cf1fa4e3ad67d7078107","sha1":"d99d82d7798e8c063e60259bfe9812835006c4c8","sha256":"3093f239639ab2d96e2073776f24111ac5bfd8af43096bcb70b4b9a19db97d92","sha512":"cdc4911847396015cd472b67f31e87afead3acac3ce9d89d318cd44735d350f2f0bda4edc18004daf86ebc1c25aeb13b8f2c45201abfd39aa3fbe0ee630d7770","ssdeep":"","tlshash":"1c21f827ce713422bf1e2d29edfd32585909c040abbf4f52f03a4d98ab1a5227067766","first_seen":"2025-09-09T19:24:39.839553Z","last_seen":"2026-05-25T18:44:03.019204Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1090,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/favicon.ico","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:31.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJqm4hqKeInsIV64b%2F1oi8t5T4onfAPoImvBr7y65X4LpSE%2BbjJtNXkAXDdsZI027uraVddd5WD%2Bpa4ojhTKi22ipWHjr2Dg7JV%2Fwwgx33AcR9Wvc70qpju9Oy13Xw%3D%3D\"}]}\r\ncf-ray: a016afacdc9132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-07-26T05:35:06.174545Z","times_seen":46564,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/hero-dashboard-T9kf6uDt.png","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/hero-dashboard-T9kf6uDt.png HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T10:24:04.803362Z","times_seen":17543663,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/index-ChFKj-SI.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:43.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/index-ChFKj-SI.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/assets/Button-Df7kpX0I.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p7%2BA5obVzDgo0%2BNWrPYsZZIgSXrtk5VwVYXsuUPa11o1AI%2BQ3ncVuxEXa1XXoONbw3y7VPHFeNtV9FV9Sc%2FdEXIsxJ%2F0aJtitJIseAxEnJoaYboX9Slbh6L0tJxTQQ%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:24 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:44 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6a1421b4-1b9ba\"\r\ncf-ray: a016aff7c88b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113082,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36952)","md5":"a29d86ee849100ff9bc10afc738530ee","sha1":"98c82c7e3b9ec86aff239a37dca8123ab9641ab2","sha256":"47b3247ddf7dca8e9adb318bce46b61d40db7a51ab449145b0e6934e0d2528c7","sha512":"fbccc7bff68cbf989edbc2a4f01d9da92d898313eeeea32e64fe60589e24508ff9214dab4110347fd94b56b64950f3a2edc4c8a21de7e20b450d4fbcd839f552","ssdeep":"3072:gOWv+wyCpTwaIFm6+TDJzcjbg04jeiBJ8Y:gOWv+spTwhF5+TF6iBJn","tlshash":"dbb36dd4b3b4f17d725383ad867609e5f3282400b925c0a8f2fc86da54c3e96c9b667d","first_seen":"2026-05-25T18:44:02.993073Z","last_seen":"2026-05-25T18:44:02.993073Z","times_seen":1,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/67336675-0daa-489b-6885-cb95234bc400?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/67336675-0daa-489b-6885-cb95234bc400?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1872\r\ncf-ray: a016affbefa656a8-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfzPe7jvSa4xP7D5TpKwzld3fWfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=27+5 c=0+4 v=2025.8.2 l=1872 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22e9362b85988b530343c1d1dfbbb03e","sha1":"f13d35d31f007ebab931b4f83941696cf3ae4166","sha256":"62e371133a4d06e6eb548ff6d6a6a7bdedd5f17a1041da6cf90ea6e05032c187","sha512":"9ffac36e9eb91fc250d390572e701764e3c46e458223c7d256236c49b7b051ed5a580f3bc3f0c7a32a3ae933990b9632782343d54ba6eabdfd17c140b4a4353d","ssdeep":"","tlshash":"2a31192f439e05e6644b2cc8334a974ca4b03668f0966f1433755702c22e81ff577c43","first_seen":"2025-03-04T08:48:45.503749Z","last_seen":"2026-07-25T20:24:02.767018Z","times_seen":789,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/4e7d6f52-f663-4fc1-4b88-eebe7fc72800?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/4e7d6f52-f663-4fc1-4b88-eebe7fc72800?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1638\r\npriority: u=4,i=?0\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: a016affc082a56ba-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfwVowhypScApAcmoeznMTkZRzfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=678+6 c=0+5 v=2026.3.3 l=1638 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ccfb2325173637f538577b4cad23f43","sha1":"70060aadb98e9a950fb797ae0105460d184d7236","sha256":"b655ab554ceb7219eb8702f830dc7edd8492194e06eddcf2ccbea5fe180d2518","sha512":"ada7b30dcb5f784d6feb476033ccb6b435aa8c250bcf596b27372354594d7ffeeeb0d2dc9e5f2c322a4da07925dfee2c97239a9dcd0fc227145f8414e5794242","ssdeep":"","tlshash":"1e310a85ed51fd0e6fc02af8a8039d3500b5d802f51f05e9eea53891d7646f2107be98","first_seen":"2025-01-28T05:59:32.012212Z","last_seen":"2026-07-25T14:01:12.66626Z","times_seen":1305,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:31.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 25 May 2026 18:43:31 GMT\r\ndate: Mon, 25 May 2026 18:43:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20134,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8b90d2e664ae69443072a35d05055eb7","sha1":"8a61bcec877da9d243ace1d7c27a484d95854662","sha256":"b563eae7bb2cfa2d12e381a963e35058d63cb6a1983a96bd700827b0172a0d87","sha512":"bdc8dd894d8e281fc7161d3035e921541444ed00ee071d92a08d32bc5e3d44942c1509ee5ef0df95c5b7eed3e0d3b1c9312ab80f2b29dc474946b58d30dde0dc","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kO:8KYXuM0p2+g7rOGCE","tlshash":"99929b92002ba400ab871cc273cf7e3aadce50896085d5b99ffd0d895ceed66537875d","first_seen":"2025-11-16T09:04:45.946421Z","last_seen":"2026-07-26T03:33:24.381045Z","times_seen":154,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":185,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"techcryptoai.pro/api/v1/config","fqdn":"techcryptoai.pro","domain":"techcryptoai.pro","tld":"pro"},"ip":{"addr":"185.82.73.80","port":443,"asn":49127,"as":"Asimo Networks B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:31.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"techcryptoai.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 13:08:20 GMT","end":"Sun, 21 Jun 2026 13:08:19 GMT"},"fingerprint":{"sha1":"83:C9:AE:81:20:A6:52:01:DF:FD:E1:00:83:F9:3A:0A:C0:C9:77:58","sha256":"5C:C7:FD:C2:BD:FA:83:74:48:8D:58:0E:F4:9D:52:60:FB:03:AE:53:BC:B0:1C:D4:AC:F6:82:54:85:0C:D8:3D"}}},"request":{"raw":"GET /api/v1/config HTTP/1.1\r\nHost: techcryptoai.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: application/json\r\ncontent-length: 408\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"81c7325d574657aa150dd9323ff94cc6","sha1":"ce84631a3356f27ce59a90f3ba9df8f535c4c8a6","sha256":"c73cfe71fea6f42d5b90ec585bea5f354a8d49be5b8ad17f7762372ed13ae980","sha512":"2cb487262644dfe71b2fac855c3cd5dcb42230375125b5c0541ab18b65fa13cb0584fb82464711a889e3a86c970a1b6587d4c83a7e722d3ba5fcd82d3e51f752","ssdeep":"","tlshash":"3ae0a35a011075a7b3816648163abd0e442100d1595cccaddeed85444df48b0c415155","first_seen":"2026-05-25T18:44:03.023044Z","last_seen":"2026-05-25T18:44:03.023044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":118,"dns":56,"connect":28,"send":0,"wait":29,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/hero-dashboard-T9kf6uDt.png","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/hero-dashboard-T9kf6uDt.png HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 140463\r\nlast-modified: Mon, 25 May 2026 10:17:19 GMT\r\npriority: u=4,i=?0\r\netag: \"6a1421af-224af\"\r\nexpires: Thu, 28 May 2026 18:43:32 GMT\r\ncache-control: max-age=259200\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTCt1tT%2FX6JFWqQcR023hmdzeV9t10VpUoMWgFYTktaFn%2BgVRIeZKmQl5NLtEA5GGZ382GIOTwjbm5%2FEcqDv2iZPg5F1XdiWiAnabrKU%2Bg8msLy5wwdD5X16YT3R%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a016afb0adb632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 778 x 551, 8-bit/color RGBA, non-interlaced","md5":"bf2fc56e1d2c8302750fd40f65526e9f","sha1":"41a59cef26df491983535680bd8f3f73fd4a1b95","sha256":"f80c10d1cb742fdd6f00036a14ca087f822ad8fa22f3ea457afcba43cd750a89","sha512":"341dee830e069db7bf74778b8549c55879c9a88989d66d0c73e39c24aaeca93f94653ca9faecd82ed2153c45173946459fb19da7d0a96843cbe7182824c9bb83","ssdeep":"3072:E6oasIn4V8aOFFJEFZcPGUV+UoP5Jrr4l6zXAoC0VKj9:vrsc4V4FFoKTovrr4l6zu0VKj9","tlshash":"e5d312c00cebe5868e1516bced8442f6f96a4b73b83ebfbb68392738f1011899153535","first_seen":"2026-05-25T18:44:03.023893Z","last_seen":"2026-05-25T18:44:03.023893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/lit-html-DkOANEsa.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:43.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/lit-html-DkOANEsa.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlgLTC6jZDw8WFhFBn%2FYTpePzPaAB%2BZPHxjGiYAzI1uCtyiTJLx3GVrquw6Zs9PkfROey44b4J04q6zFpSeNUryypFPDFfMuy7UITVZDqOMTQbtnWuBASVo7CvVohQ%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:30 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:44 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a1421ba-1bec\"\r\ncf-ray: a016aff7b88632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7148,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6592)","md5":"7e1f17db02dae07c4427954c0d4d5474","sha1":"fb159296079d0a1380fcdefde9241c8077e938f9","sha256":"80887817a61126a1781b3eb6c14ea0fc360d9c3c98c6f205a5204ec5934392fc","sha512":"a123fcc11d102ce12877eba0baf9383d855ce6edc4200f147ed9d3a64e93eb7ba68e70560faeffac828190d3a2d0d4174ee74956e83c5c79da8529c10f3cabbe","ssdeep":"192:sdnSKqO1aurVVi9wkaRII6/zhM5+7fwmG24NbC:eSKqOUuR09wkCII6/8+bwmG24NG","tlshash":"31e1735432f955a26ae18ad1dc77141fe3507094383a646cb1ac7eef682cf42b0f9b78","first_seen":"2025-10-20T21:27:42.364614Z","last_seen":"2026-05-25T18:44:03.001877Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 18:43:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: a016affbdf9d56a8-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-06-06T21:30:11.571202Z","times_seen":1649,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/2e181ba3-bf6f-4599-5349-f7409bc62100?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:44.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/2e181ba3-bf6f-4599-5349-f7409bc62100?projectId=a6760cf5bf4151d57bc871573b602be7\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlnode.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 520\r\npriority: u=4,i=?0\r\ndate: Mon, 25 May 2026 18:43:45 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: a016affbf82356ba-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfx8sZ_gQjxblo6S9ktOMr7R0BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1519+3 c=1+2 v=2025.2.4 l=520 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"22c97b9c571498a31f52c5b262ba0a8f","sha1":"b28e5ef85b5bfed3fe034611dc208590c6af7d7b","sha256":"aba7699c972ec5e808625798c34ecb0e8017768cfdc5852bd13e94b7664c253c","sha512":"8ffec6e75b574d13b5a3a70ffd27763bf26f024ebb7ed5738015abdf7176f7aebe37442bb8e82177969c72b622e2bbc4e5a9593a85fa59689d0e02ed301d5ed4","ssdeep":"","tlshash":"a1f0059de63d010eda77072c6b53951318d62a65b027924c345d4c02528dfecbbecbd3","first_seen":"2025-12-31T16:29:42.661268Z","last_seen":"2026-07-25T20:24:02.794731Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1068,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1068,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlnode.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:48:29 GMT\r\nexpires: Sun, 23 May 2027 14:48:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 186903\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-07-26T09:02:12.574657Z","times_seen":11010,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":105,"dns":28,"connect":22,"send":0,"wait":20,"receive":4,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlnode.icu/assets/StatsSection-BHTjIIJ0.js","fqdn":"amlnode.icu","domain":"amlnode.icu","tld":"icu"},"ip":{"addr":"172.67.178.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlnode.icu/","date":"2026-05-25T18:43:32.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlnode.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 08:36:39 GMT","end":"Sun, 23 Aug 2026 08:36:38 GMT"},"fingerprint":{"sha1":"BD:D5:D6:42:C2:03:0B:D3:0F:33:77:96:2C:60:A5:4D:12:0E:36:55","sha256":"A5:58:66:DA:B3:7F:02:C2:FE:84:33:DA:A0:A9:8C:CE:DC:CB:79:55:4F:B0:17:A7:49:77:D5:89:88:F9:AB:4C"}}},"request":{"raw":"GET /assets/StatsSection-BHTjIIJ0.js HTTP/1.1\r\nHost: amlnode.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlnode.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 18:43:32 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jrMToovZ51kNjJUqEnAPVYTIQ6zrtUc2x%2FMU2uBG7KuWvIPWXiOlu3jruyOBUv6d54qyblHZd5Kq6doqGOzOo4nEbQcpA4ik%2BdfrCX%2BWzTe9fGZ5W1CL5SM%2BUE9u8Q%3D%3D\"}]}\r\nlast-modified: Mon, 25 May 2026 10:17:48 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 May 2026 18:43:32 GMT\r\ncache-control: max-age=259200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a1421cc-1fb21\"\r\ncf-ray: a016afae0cdd32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129825,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"3595b97f59d0b2e977c3447bafbcbac9","sha1":"a4548b364721cb261cb5f346f2cdd5367e2d702e","sha256":"e7c0bf8b7e5b52d07044289c7b2fc7b28210fdc86d07f1c0c05356865acbcacc","sha512":"ad34599c38bbe5bfee00f895009bd39143cac1474681ca9a1a1d37139e3da792253b1f1fc1df4bd54ed25ded54644f2183ee6b90a3a3588642aaae2e4e3b32f1","ssdeep":"3072:X5lZRENbGbQh4I3sLnu97KegdZ3eY6O4RqiCG6H09:X59YbcQB3+yKegdT6O4UiCGY09","tlshash":"21c319c97290756683e789e5d06f0640b33a19c8341dc0bcb67dadcb6d2140aa7bbb7d","first_seen":"2026-05-25T18:44:03.013935Z","last_seen":"2026-05-25T18:44:03.013935Z","times_seen":1,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"amlnode.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}