{"report_id":"c44f8373-fb9d-4893-9d75-73bb447bf169","version":6,"status":"done","tags":[],"date":"2026-04-21T09:49:05Z","url":{"schema":"https","addr":"amazonitelian.ink","fqdn":"amazonitelian.ink","domain":"amazonitelian.ink","tld":"ink"},"ip":{"addr":"104.21.24.96","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"title":"Amazon Slots","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-08T14:38:56.847605Z","times_seen":1036310,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amazonitelian.ink","fqdn":"amazonitelian.ink","domain":"amazonitelian.ink","tld":"ink"},"ip":{"addr":"104.21.24.96","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T09:49:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amazonitelian.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"amazonitelian.ink","ip":{"addr":"172.67.218.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-22","domain_rank":0,"first_seen":"2026-04-21T09:49:05.722027Z","last_seen":"2026-04-21T09:49:05.722027Z","alert_count":1,"request_count":1,"received_data":155569,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"amaitallian.ink","ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":22,"request_count":22,"received_data":531304,"sent_data":12206,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":6,"received_data":241241,"sent_data":3302,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":67862,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13625eeeee517f18024de37616c17b8","sha1":"22d5c530662b9a672f2a8fc35f104e01462d65d5","sha256":"d845f92187b02c4e9831ac75798bdd0385153719fad7965e212a78e4d109ff8c","sha512":"ae2b16ae6fa71c161a4d5bd64818864def5a7c4c53caeef41121fb9487649bccc1ee1e95c3f6182dcb68892196e2029f9fbf2203aac97f69b0268749150ba676","ssdeep":"","tlshash":"a3e0a7fda0e91131b167207c36bb03e03933609779413529be6dc3801f6156b9100ac9","size":316,"data":"","first_seen":"2026-03-01T09:27:42.801147Z","last_seen":"2026-06-01T17:53:42.205542Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee4735dc2b01aee5c5af3238956e9c31","sha1":"ea15c097c57160b8eff7af4aeb7d34cb44145b78","sha256":"7980494d34e625c3dedca75f6b11be68376ddaf19c1b4073d3558d27bf036686","sha512":"2df78467901ba629b8f62a4a4704b3decc8ee8a6c913868c2d013cfbb9d2b5bfa449c718df1604257362c4a67a5269d07129eea2efc8e60633aabfe3be0b2626","ssdeep":"","tlshash":"0411c068da6600773072720e1b9f2b2231269ef30290ca063f9e3e4f2fc254781817dd","size":967,"data":"","first_seen":"2026-03-01T09:27:42.803996Z","last_seen":"2026-06-01T17:53:42.206127Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8337f57b47023bfc9b59df18a53c0de1","sha1":"ba6481a997f8e22dbc41662e724e24665517c582","sha256":"060d5ed4527d553185d25c114fa86dabe33a301a5e2ae6f38256653861e8c533","sha512":"5370cfc827d52ec445d290b1805a23379db7499f8c649f9711db19d8b62dc0196e0a8a1a47c5ea0921bf454f25b0402531a20fe595c3ab86dcbd18b26bc03bd8","ssdeep":"","tlshash":"f041df0aaeea20b7707370585e0f6110352f96b74284d9453fed6b6e1fd3168c24e6cc","size":2061,"data":"","first_seen":"2026-04-21T09:49:10.617972Z","last_seen":"2026-04-21T09:49:10.617972Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f16d5c461c383c7738afa8cfadf7ce5c","sha1":"0705f4655fe223fc8741d9089f838d3bcd5a029e","sha256":"1a2cff8f6a1e68f2aa344c5e44ad607f198c74bb539ace1874a7b5babbc4993a","sha512":"3892259196c1d70f33fda41abecfe515ad4141da8a7ff0d8a1495a04d1522303532af53045a9c56f9a30596a4593262d874061e8c72a8fe15f7d299de01767f9","ssdeep":"","tlshash":"fef026bba4313371d563e12cb07fb38774a6100f28815540b85d5ca89f90e04057bd9d","size":565,"data":"","first_seen":"2026-04-21T09:49:10.618935Z","last_seen":"2026-04-21T09:49:10.618935Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4104338f53af67b5d57b2aa9cd77c4fc","sha1":"a1aee51dfad11799ad4bc25e5840f442ed26ec1d","sha256":"1d7ff706347e1b7474c6d7ecbd49e5a0ace911aef0c9f81557294832f07cee67","sha512":"e304728d32d61acce271495d700e4f85d5c4e870f53f06882f8fba4f63ffc848a127ee267c144066b5b1ce5e1008cd52c6aa490ce6a364b95e2ccc9a9a40bf86","ssdeep":"","tlshash":"dbf02e6e0aaa11308b13702926ae7b9279a22013207ad440fd1dd848efe0b4c00baad8","size":550,"data":"","first_seen":"2026-03-14T05:28:32.795906Z","last_seen":"2026-05-15T02:32:18.75231Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be70ab3a4893c48d3811ef52e29b9503","sha1":"ebc69f4715b1367c2b5183de43103f094dc85c3d","sha256":"3ef1da1b3ed48a4a6908063b030ec50ae50ba7945981bfa825f76a122ceab362","sha512":"fab4585d8e5dd75eb3706733be0d342fe6fed09a24b2e25190647d102dd5e85df53dda29faa98fd40ceeccfdc477aed45faab77e15dade869c486ebfaf8b30dd","ssdeep":"","tlshash":"41216da89a7f22554a6fc1a7bddd669a31b0010f5004c38a7c2c849b0ff4f6725f56e5","size":1254,"data":"","first_seen":"2024-12-28T15:19:53.586052Z","last_seen":"2026-05-15T02:32:18.753078Z","times_seen":289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/assets/green/js/script.js?v=43.9.2","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf476bfd361bd1968b8faca737c561eb","sha1":"f2fed6bbedd0350d5aac965a1db3c49c623949b7","sha256":"2c56edcebd0c683da4b509cb9a320aa5c4b030d42396bbe75a5fd9e99bbae2d2","sha512":"31f181d79f8571b23b2ae3c3eabd9ee2d21ae446e594662599c6e622b02090aa57677fb1620231c27ad33847307723465815c71a792096fb95e6243c3190b9b8","ssdeep":"384:Pia5nuka6lO9sr8eTb8s8lyYL1lB5BYrW8fWbXOyaj:PiajlkeTb8s+9YHj","tlshash":"5852425a13fa05345573a0ba9f8b0e413120901f2847da293d9c45c96fc6e3a99fdffa","size":13382,"data":"","first_seen":"2026-01-27T03:23:56.523321Z","last_seen":"2026-07-11T23:55:04.703588Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/assets/green/js/main.min.js?v=43.9.2","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"855709edbd6bfe94ad30ae9b1ee276de","sha1":"15e9b49babcab5550d9096ab2f29b8597b3bcabf","sha256":"276639eab25ba4b044c1eae646fecaa316f952608f9ff248b188df3cdba8efcb","sha512":"859c4fa5e00569e94a45a28967b46fce8ac448847f16b602b9b045feb6b490bfc6e02b940e26a90d589ea6f67b231eedc1350d02b8bcd9051848510f1cb61802","ssdeep":"768:pPwc9QRfOd+w4wp30z9+3ZbarJQNKlPQjOnZTFy4/OTHWvNk2ZZfaV5v4HZrJR5f:tw9tSp/MlnZTYR0kgy41NMtJTe","tlshash":"8cf24c7f91a6773c17d8a68de7365f003e1a08aadf4091b499d82e8678bdd4b0007b77","size":36423,"data":"","first_seen":"2026-04-21T09:49:10.614424Z","last_seen":"2026-04-26T13:05:06.941074Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amaitallian.ink/assets/green/img/star-full.png","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /assets/green/img/star-full.png HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 176\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\netag: \"69a82edc-b0\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXShq%2BXK6fOn39BKoFlrOhsQMf9HOFm0wY27MkTtI7oYzKTxCkJ%2F%2FOAnt0xBzf2MLOTVkJ0dW70CwjqC9R805oDubTxadbvJ8UULjqVGh7F46vn51%2B3KduuX6DtJD4b3DXQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79891d441a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit gray+alpha, non-interlaced","md5":"3e031ab0a5a09974b011daa845aa667a","sha1":"0548289c9bc925c76bbfca859d65a5da4541fa64","sha256":"38ec1d8b7d4b66f131f79489feca40ff46a74bd2e6500c2d1dc2cceb737a4ef5","sha512":"7afa86e05dae180805234eebfd98c8c3f2967250b7bb6dd9831340d36a3536e90c38a8a77dc38c70c214217ea99011ad75aff0f089f8e16bd6cce3ea86221ee4","ssdeep":"","tlshash":"e1c022e504789d28ca43416142804870e970008f2041d9452149232c040230c00887d3","first_seen":"2023-05-29T14:41:10Z","last_seen":"2026-07-24T09:20:54.422884Z","times_seen":199,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/analytic/Ov4Ygp2TXuzPYJ8v","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /analytic/Ov4Ygp2TXuzPYJ8v HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Authorization\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-download-options: noopen\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-language: en-US\r\netag: W/\"156-Tcc6ty3DBvohOcv82uXlu8fgH3E\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BvF4VXWIs3%2Fx5grhfj2K3J9Tu5ymEgSqlf%2Baepb%2BR996DrFTZo6H4SuBCnKKTrO86H357X4a30uFYBKCvmdlm4AyKuOcEHijllgiOfkcwG%2BlCtYQpg%2BOWOg58tT21u9S6c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb798d1dea1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f55d51a75be381f6e46d0257bae68420","sha1":"4dc73ab72dc306fa2139cbfcdae5e5bbc7e01f71","sha256":"8d0443a2ed97c0dc0887236baf3b8ff2126bd2cfe24b280070c6f1fc5524125a","sha512":"f15af4e3e038e729163ddcb109ca559fa63fec48667339d8bf1e17478cd95a8d1d28c84b8ddf420095fa0645405048259b376359dd460fc4dab19221950102b8","ssdeep":"","tlshash":"09e08626519e0766fb6413987c4e3a0f368ee65299cdd8e1c70c1f9404d75fc614138a","first_seen":"2026-04-21T09:49:10.599869Z","last_seen":"2026-04-21T09:49:10.599869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/image-1774180586392-05wc_375x667.webp","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/image-1774180586392-05wc_375x667.webp HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36436\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-8e54\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CWM0LWf50BWqWTWzF4gNYoPAYaXO29r4yIZ79S0Q0W%2Bk%2F6ik18%2Fh8asgxqaT9bGCHdsqaoDbMk%2F6ApWFRhvFDOFJEzZ0PLNx1TtAnyHm7KZwZkyHScbnOhZy85e%2FM4o6I%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb798d3ded1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36436,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 375x667, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07596e7937ca9328672f15fb2c226efe","sha1":"1da9e17733017f3ec24601aaae9a611e581a0af3","sha256":"9a300819864f9c7318cbc573ca13dd90fca402bad4cefd9c41a37cb3e5bb6634","sha512":"aa9bd9c93bad7a356a678dd4ecf30c6035a7a787aa11f49938441cab349a7c8a6f6a8fcf95516e8a9b0eac809cbfea8583e80f55e3bb2b05369efde1dbd595a0","ssdeep":"768://I5lmp6ODpWM4DRmtncAu7dwyUyeDT7chHYKTFb88dGZyygJtax2Iz:/aAcwpJ0Mtn9weU4KN88d6yyT9z","tlshash":"28f2f1e09399f578a3d8be959a0148ebc1596b1af1238e9578cdfbe138703d20c45475","first_seen":"2026-04-21T09:49:10.600799Z","last_seen":"2026-04-21T09:49:10.600799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amaitallian.ink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 21 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 26697\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-08T14:42:40.708334Z","times_seen":257223,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":85,"dns":4,"connect":27,"send":0,"wait":24,"receive":6,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/service-worker.js?v=43.9.2","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /service-worker.js?v=43.9.2 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:45 GMT\r\netag: W/\"69a82edd-119b\"\r\ncache-control: max-age=14400, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9DpPWG4BkMZjumZtq9u55%2BB7Z%2FWZCo74aEZoCF8Q8%2B5SDs3%2BfRTWlMMeB%2BpBxp64C93Jo99B6pfcImGs29%2B%2Bg0gB7N%2FiwAznmBOeX%2BqGC0iIkRxx8dxjV%2BFLmiUznc7p9c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79891d3d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4507,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"86cc00269f504c69a5522d969a7163cb","sha1":"32ef340a83bf54ab58b19e3b162854b170dacfed","sha256":"468a60231a67800713bdc7f40428f191c212c6e3e9041015401009a4ae26b31c","sha512":"b247afe3e2d8ea868b034e5f350250a7c45f9502236db14b1f91e5897e66635ba3d0e5d2eecd948ac1fc39050bed482704fcce593031f76938af423ada64bb6a","ssdeep":"96:/dMKYwHN9+zwwfOwwwTK1ktDEkVbumgZOVRl6uAsaWLRLNHbuesaWC6JuEsaUBBn:/dzYwHqzwCOwwM7tDEkVbBfoRWFLxDWO","tlshash":"949101fb1d6817570ae7d179951e1227e27601073f4ab865b2ac09d81fcd54c83bf6c4","first_seen":"2026-03-01T09:27:42.786226Z","last_seen":"2026-07-24T14:00:33.055185Z","times_seen":66,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/assets/green/img/user.png","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /assets/green/img/user.png HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 148\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\netag: \"69a82edc-94\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjEB0YCT%2BCA6CvZIKtV1h2%2FH48diSkUakZv16c%2BZqyJq8y2l0zZdQnLbvGiuxvBjVZx2RtBc3Gs9mGG4XXI6FcX1osVQRKqOIN9Bzmdvukp06KzJJgkTCf55GZuIksB51LE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79891d451a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"6a82d2ed501108b93ae141c24ec8ff31","sha1":"0fa770617167b0445abca473adf6ad119282e028","sha256":"9137b07942abada9db72a2a5596506a46532a071339fd07f7434a76017bbacd0","sha512":"ad9d427f163998e028457bbc5d61a869c122f85a31f3167245280b744a9a468c40a3c9b629ae797eafa4a8f46cfe810ade182849013467a8b448139970af759f","ssdeep":"","tlshash":"6ec02bc317c47f7ec6ef03239d18ce157a2280b8168826100c428019753214e647dac1","first_seen":"2023-05-15T07:31:55Z","last_seen":"2026-07-24T09:20:54.425588Z","times_seen":221,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/image-1774180589229-4b8k_375x667.webp","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/image-1774180589229-4b8k_375x667.webp HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59654\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-e906\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5M28U4ru%2BQitcDO2e4wk4be6xTP4Qr0zVwiTZtI6wGtmaNP60s1zVI8EnkIHlXtd3W5WapFgPg%2FDp5iBRXPrdP9eRjhgGvbP%2BfuzBfgsljYd%2By77Mhh%2Ft2532Y5HJNK9BBA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb798d3df01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59654,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 375x667, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b495dd853cc12e7f139ec5324aaebe0","sha1":"84f81c2154a87851a02d45801944275600eb45a6","sha256":"7c9cb286a20fc3ebba4a397d5978f0f9ab9b5037fab69799631ef337091b3531","sha512":"fe08b870cbf35e8e264e704698f26696a23c8dc98adb2330147a64300ead8e656555db0b05a7cda3921999a14ddf29e51c9242edb01416180d55e76e0c790753","ssdeep":"768:4Gngnh+anMx2SRU6WedchYydOZsRm7Mq3wzlqPH9v9oS5m5WsgSi8LaoQUvDcIis:4GnAhKdMh/dOCsP/8ESi8WoQUvIIf7R","tlshash":"7c4302502e93ccb02e65cb6a910377b82f0af7e3a78e8b7497d95e68f567b5c1403244","first_seen":"2026-04-21T09:49:10.603365Z","last_seen":"2026-04-21T09:49:10.603365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amaitallian.ink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 18:54:16 GMT\r\nexpires: Sat, 17 Apr 2027 18:54:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 312869\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-08-08T14:29:13.743214Z","times_seen":31013,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/image-1774180587218-qlty_375x667.webp","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/image-1774180587218-qlty_375x667.webp HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34938\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-887a\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2Fz%2B%2FjBZ3uM8HkqVAk1s%2BOidxvpUlV1ZGuSyqHXZdPIwrNvU4Dd%2BqT%2BsJ8uk0AJDhuKQ1YOZOMWRhQZ5tqVa%2Bwp1Xv8D8PRCezI5xIt6xFECwLzBI9TTk1FJe1XmBGIsvQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb798d3dee1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 375x667, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6c29950abf21b7b9134aac4fd5e46458","sha1":"60ab8538880cf93fdc1e13061eee135de9e38654","sha256":"e28fdaef43efc0a88f451cc53c9302d737aa6318837c446fc62a809d942fd7b0","sha512":"1e05f581a0ac8edfd3056a54d2e4d6fa3732a2c5cbd522f1ff28778469fdfa064787238d830604aea46002653df0cd6f6af6721a85b30f66d924b6431cd5f57a","ssdeep":"768:N3uUADllaRnErxjAROQSkgvjT+uMyK6InhsNc3QHmUuCp8xxez:NJADmwxZke+MrGTmmcq+","tlshash":"dcf202cc99115e20593d2682edf31d30b5437294fe06bba95ed05b380f15a7f3ad54e8","first_seen":"2026-04-21T09:49:10.605079Z","last_seen":"2026-04-21T09:49:10.605079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/P6KPOL5b3Y4W.webp?v=1768592442895","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/P6KPOL5b3Y4W.webp?v=1768592442895 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1966\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-7ae\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wCB5WwAl05NVbQYgKKvIhy1NkNTW4Rlb0iTZsr4Vajbrd6%2FmbBJ4%2B2L61I5nPSSz0txIttCVCkWcjrIOVQSbX8EBEs%2FjJY9SvXC6pY7nm1hRhriIVQ6YrMH3ah28IsFntgI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb798d4df41a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3b03fcea89a5f1423f02a05be37376ad","sha1":"4c8e26f86b9d0d552ba8b782a1156cccaffda354","sha256":"2f6d5e0b29c63f9779bb0a60c32da73043bcb3793f3b0b60ec96090ca38a44aa","sha512":"ab1243292becefead3c29653332e62fec7f5326f2a511dc181300633e2c82d5de3d455a750c7a9ed35ce91d4b5ababf6335777cc06df8123c2aadd211e2e147f","ssdeep":"","tlshash":"d9412a8a2df04171927c2f1d05b9fb75cc5227aad720c3a612623521c2c30626e86730","first_seen":"2026-04-21T09:49:10.60591Z","last_seen":"2026-04-21T09:49:10.60591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/manifest.json","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: application/manifest+json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wIHxJkicclepK1AnamP0Nvn%2BgmBwISsE4sBXxQLdwIJR5ycaG9ZnnrUHWrOZZ%2FxMeDvGUvKlXBcmaR3UVusNZJvH0miA7ryUaMOecIMbyFDDCz6BSDyBNSRlWU1EU1xwydE%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Authorization\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-download-options: noopen\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-language: en-US\r\netag: W/\"557-fFE1O90ePy93+I9JBbewmHbdNn8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79891d3e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1367,"size_decoded":0,"mime_type":"application/manifest+json; charset=utf-8","magic":"JSON text data","md5":"c6b012b064226e8b50d54f4ed84cc21b","sha1":"7c51353bdd1e3f2f77f88f4905b7b09876dd367f","sha256":"132510659af62180db888591fd89e6e3f6d33bd6b0e4085e1e0b8abdb1535728","sha512":"c1b60e1b96df5a2d216108718710e420be02597ca51bbdeb161aea15a25e9536db11e84478bb2ce06ddbd4098c239abe69434e9a03759bd64dcea04441ca2dc2","ssdeep":"","tlshash":"392144ab06be59baef75465820bf65ccc7ba303508c1b901fe846c2c96d599c1129616","first_seen":"2026-04-21T09:49:10.606777Z","last_seen":"2026-04-21T09:49:10.606777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/logo-1772368123304_512x512.webp?s=180x180","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/logo-1772368123304_512x512.webp?s=180x180 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7186\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-1c12\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZPEPJ%2BaQsqab1CPeZX5YH8ccpYa0mU1danB794IapK2iJ%2Bmg7ikBjcXEXcSmYafIKifcato%2FlLSJIx538n5dwfjB5iJxMHlwSqawTl%2BpRVB3jptYo9Bw9wMY529QL03tqM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79891d3f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"536bca887923cb6fb46ecaa98ac31678","sha1":"1edce23079e15da93549246d3bed1ee71c46c47e","sha256":"d0f56b49f08d24479ad06fc8a017c3d8faefde91e3867cc2a375511c607edf88","sha512":"a6fd4639454c870692332b3d10eb869f1b62ea254c7f6ec5ed961e55cd5c7f85a2cc3fb43455d9de49bd9856382f926afdd1f71ba503064a1086052e173bb6ac","ssdeep":"192:S5+y1NQCuGF3tgZ8N5wJxivA5MvzTYzIJrzF:S5fztgC5wTivZbTYmPF","tlshash":"0be19fca9b01400d5f8557e12c30d5d1765a625cdbcc0ff36df7763a512f12d662ba09","first_seen":"2026-04-21T09:49:10.607599Z","last_seen":"2026-04-21T09:49:10.607599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/logo-1772368123304_512x512.webp?s=192x192","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/logo-1772368123304_512x512.webp?s=192x192 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7186\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-1c12\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RalCIrVPuHNGihRZuWwYzVFD6lON870dfOZ%2B7KjWpzmxiJOqeott89PudQb3WbsBed4EO6mCgA%2FBAWiUqMuUJfKllJTNMVCvdC4VqccfuiyG2yT1B7GHsX7fJ%2F3WzVGYN3Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79891d401a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"536bca887923cb6fb46ecaa98ac31678","sha1":"1edce23079e15da93549246d3bed1ee71c46c47e","sha256":"d0f56b49f08d24479ad06fc8a017c3d8faefde91e3867cc2a375511c607edf88","sha512":"a6fd4639454c870692332b3d10eb869f1b62ea254c7f6ec5ed961e55cd5c7f85a2cc3fb43455d9de49bd9856382f926afdd1f71ba503064a1086052e173bb6ac","ssdeep":"192:S5+y1NQCuGF3tgZ8N5wJxivA5MvzTYzIJrzF:S5fztgC5wTivZbTYmPF","tlshash":"0be19fca9b01400d5f8557e12c30d5d1765a625cdbcc0ff36df7763a512f12d662ba09","first_seen":"2026-04-21T09:49:10.607599Z","last_seen":"2026-04-21T09:49:10.607599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/assets/green/img/choise.png","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /assets/green/img/choise.png HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 218\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\netag: \"69a82edc-da\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uvBGyOdDsOEceBvSHOBHL8KLy0pDHN7%2Fm5Wd1TlyARn54ce3C8px5YCxbJq3pwrMqNFrZxhaRuAQrbBqYuC4vCqG635KsO7ctBBNlUtZJM9EMdQVnpRnd88dgqt5oLDHtjI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79891d431a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 14, 4-bit colormap, non-interlaced","md5":"d76b357bdf86c3bde77124fe200cbb0f","sha1":"01fbbdb6193cc2452993a3315e99b5de0a2b0a6e","sha256":"3d1510bb842ca08d4529ada5711e0bd4724153439efe49c5ff6f2f8d36c23027","sha512":"976fef7cb7c754418201de38dc4b62fe625aa18f8827a584ab5a0c7b61510c802d44669697bcefbc1b5d37efe38bd483c2233d0caaf2d435f02755c1efd6b9d1","ssdeep":"","tlshash":"0dd023e7dd459d311400d157db9c1e4088d1473d1417531acbbaf51f5f6248cd3d05c5","first_seen":"2023-05-29T14:41:10Z","last_seen":"2026-07-24T09:20:54.444027Z","times_seen":219,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amaitallian.ink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 21 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 26697\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-08T14:42:40.708334Z","times_seen":257223,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":129,"dns":0,"connect":9,"send":0,"wait":8,"receive":2,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/logo-1772368123304_512x512.webp?s=16x16","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/logo-1772368123304_512x512.webp?s=16x16 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7186\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-1c12\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XM0LFu5WVQX1NEpTqb4VchL4wIn1fDs4ezOOfTkcv2ME6Qd%2BUdXkRBYhHTlJLwpH2fdGioQSRtTyY9DO%2BN%2F43rsozDrkGbzzYIwuufQMOoTDQsuznALPMdceZlkUAO39Yi0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79915ea21a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"536bca887923cb6fb46ecaa98ac31678","sha1":"1edce23079e15da93549246d3bed1ee71c46c47e","sha256":"d0f56b49f08d24479ad06fc8a017c3d8faefde91e3867cc2a375511c607edf88","sha512":"a6fd4639454c870692332b3d10eb869f1b62ea254c7f6ec5ed961e55cd5c7f85a2cc3fb43455d9de49bd9856382f926afdd1f71ba503064a1086052e173bb6ac","ssdeep":"192:S5+y1NQCuGF3tgZ8N5wJxivA5MvzTYzIJrzF:S5fztgC5wTivZbTYmPF","tlshash":"0be19fca9b01400d5f8557e12c30d5d1765a625cdbcc0ff36df7763a512f12d662ba09","first_seen":"2026-04-21T09:49:10.607599Z","last_seen":"2026-04-21T09:49:10.607599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T09:48:43.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Authorization\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-download-options: noopen\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-language: en-US\r\nset-cookie: pwauid=Ov4Ygp2TXuzPYJ8v; Max-Age=31536000; Path=/; Expires=Wed, 21 Apr 2027 09:48:43 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4bx0gP5ifNgBTCtkiBoyOUMW9qiNgKN4uT%2Fei8cYWLpyBz262TEbWUsuQJnbyYsWTivqMZwnjjq8ypRBOXK11dnbaDF1D%2BtY%2F0llR7BYZ6jcj4CZi0RQwCrRwJ0cif0CSY%3D\"}]}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9efb79852e31b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":153954,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (991)","md5":"431fcc085ed29156684500b606e25c92","sha1":"9d62cbe534a7864c05f60f1aaefcafd76665c442","sha256":"4ac2d27b1b357bbc051992d224d2d293287e3344ba8c36123d44fb459dd4f5d9","sha512":"1e17422fe7cbe0b82a25edd65d9b1d856d703b3a16cad39983e38e9534dca1c07c126085ba34a46c51756d8015085c067a9b0c24177b0a5b090ee0667b2a5242","ssdeep":"768:IU8IRD0yZKpXWY5oSiNVoSiN1oSiNYoSiN9oSiNCaoSiNCoSiNfLoSiNDyoSiNEV:IU8IRD0cKpXWYk6rh69+cc+nHv","tlshash":"bce3dca150f621a240ebe1d0ba669a0736d2fb07d54ac64cb7ed96944fc3db1fc1329c","first_seen":"2026-04-21T09:49:10.608846Z","last_seen":"2026-04-21T09:49:10.608846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":38,"dns":19,"connect":1,"send":0,"wait":440,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/logo-1772368123304_512x512.webp?s=180x180","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/logo-1772368123304_512x512.webp?s=180x180 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7186\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-1c12\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVQwgWxh3zPDi0K2%2BRxVTEINNEDSppSqDoX6CiVgVi34cdRhnNb%2F6bnELMptgACyUd%2F9mAEq5sV2f4duCeZfqtM0OrhlXM8nX3MO8Ssiez8VBVQ0cMZyERd%2B%2FNyNmkhptVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79915ea01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"536bca887923cb6fb46ecaa98ac31678","sha1":"1edce23079e15da93549246d3bed1ee71c46c47e","sha256":"d0f56b49f08d24479ad06fc8a017c3d8faefde91e3867cc2a375511c607edf88","sha512":"a6fd4639454c870692332b3d10eb869f1b62ea254c7f6ec5ed961e55cd5c7f85a2cc3fb43455d9de49bd9856382f926afdd1f71ba503064a1086052e173bb6ac","ssdeep":"192:S5+y1NQCuGF3tgZ8N5wJxivA5MvzTYzIJrzF:S5fztgC5wTivZbTYmPF","tlshash":"0be19fca9b01400d5f8557e12c30d5d1765a625cdbcc0ff36df7763a512f12d662ba09","first_seen":"2026-04-21T09:49:10.607599Z","last_seen":"2026-04-21T09:49:10.607599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/assets/green/img/right-arrow.svg","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /assets/green/img/right-arrow.svg HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5itVquWPiFjaRcCel%2Fuxk%2Fq8y96JC%2Fb5ojDpMOOHfV0b4fOrvQMzWVhxacBLMXfurDJVsxyrDXYMTa7VZkF2engNJx6sNnEq1sobVdyTGZXBigCFNBhHxk1u0JWOe5TqbI%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\netag: W/\"69a82edc-e2\"\r\ncf-ray: 9efb79891d461a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdc8c4dfb326d61e002af3717a6ba6b8","sha1":"1cd5de8164afc52d01339fc90c67cb28c2caaeec","sha256":"e83c7215bc8fc58ea06d5e459ee3c3823cb9a556f967326884189f281699e33e","sha512":"1dd538575a6d85ea30915995f05e545488673e7d022d481faf660a6d5f6ad43c9c647cc487d62bfb8429a0f2b6070de895bf3b1b498710bbecd33e282f081247","ssdeep":"","tlshash":"c8d02361d15c5e88df0cc2609f7cbd6312e9f1b60a4901cfe400d3116505467dc47edc","first_seen":"2023-06-12T09:53:26Z","last_seen":"2026-07-24T09:20:54.446052Z","times_seen":197,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Apr 2026 09:48:45 GMT\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ab850d710cb8d2c822eca52fcb39630d","sha1":"6b1016a61cb54834b42380de194088a39d0673b5","sha256":"acbf6e2b73bf91ea123df383211a180d57eb23c883a466afdec45a80fd03587d","sha512":"75908bb4facb97dbdbb3df2cdd51b28165d7d9c0dbd60997f507c7e79d44709c97566f25b5249bae201225d5fb83877c43734052ebfe858a19edfd9ba4ef471f","ssdeep":"768:yDdD9DADNDgBDUKD7DnDWHncXgLUahdPuOJ+gaULUIIV1ClghUULPy7bYLgXU+l5:GyDSegtxyllff","tlshash":"6b630e91041b5440ab834ce223cebf35fe1f92507151d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T23:42:18.856088Z","last_seen":"2026-08-08T14:16:14.927654Z","times_seen":10677,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":118,"dns":0,"connect":27,"send":0,"wait":49,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/VsdPRxafKwcA.webp?v=1768592439866","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/VsdPRxafKwcA.webp?v=1768592439866 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2418\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-972\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6dI%2BQpeEWM4jrVsqSyK600fq5K%2BwfJkrH2UhAkJg2cVtu0SVTtaXyHCtnC3DcNju9KgZkpXM45SnF35cR0PPsyggTE7UjYrq5WAb7xCCTbx7hakfkvFz6KP6Tx68WwTQ1k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb798d3df31a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c00a9213432e350f7acc99b6548a1489","sha1":"a8119ddc3b1005ddc9222891a3e4c7a8d6cb3638","sha256":"7ce37954b16a1caf3139506167ab51293d2f54542641dae716418908ab756caa","sha512":"b06b807ca1a1810bc0c38ede6c42e6317bced5ab27f04261f49ad54e310a1ffaf2d951d454feb2780cca19fc8b579e19799b21e7d7e5665eee0979313b5021ca","ssdeep":"","tlshash":"7f413acf487f328dbe3028faae30d6355a8e552061805a2f2f2729631bb782c7d58156","first_seen":"2026-04-21T09:49:10.611548Z","last_seen":"2026-04-21T09:49:10.611548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazonitelian.ink/","fqdn":"amazonitelian.ink","domain":"amazonitelian.ink","tld":"ink"},"ip":{"addr":"172.67.218.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T09:48:43.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonitelian.ink","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:19:28 GMT","end":"Sat, 20 Jun 2026 11:19:27 GMT"},"fingerprint":{"sha1":"C7:E3:A9:36:F6:11:56:CB:33:ED:91:AB:F2:36:3B:D5:19:45:C2:7A","sha256":"55:23:34:7C:67:8F:23:04:FA:DE:C1:32:B5:2A:39:CE:73:4C:68:6F:1E:16:3D:65:11:07:EB:09:58:C2:26:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amazonitelian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 21 Apr 2026 09:48:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Authorization\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-download-options: noopen\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-language: en-US\r\nset-cookie: pwauid=Ov4Ygp2TXuzPYJ8v; Max-Age=31536000; Path=/; Expires=Wed, 21 Apr 2027 09:48:43 GMT\r\nvary: Accept\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4I6rHfOjwE939DR13CXx8lKRSzPM9xJJNcn159zQMlrOXEXEhkVTAS%2FZIr61p152%2FsMikyTSVFyLOVFKwsq8qQXI3QTcpqwPPQsXbODef9aPhp73OnClZI5h0eBeuNBD6PYgFQ%3D%3D\"}]}\r\ncf-ray: 9efb79830e1f56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153954,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":37,"dns":24,"connect":1,"send":0,"wait":288,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amazonitelian.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/image-1774180588085-r88h_375x667.webp","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/image-1774180588085-r88h_375x667.webp HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43334\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-a946\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UO5zYtAx7Uzal%2FgvdkjG12L%2FKTqnlntGfgx7bW4nNbUJJ%2FHBFm4hV7qNz7bs07cKSZ20oKM6X1kd5b2%2FHEkee7CTF%2FC0J1GZadxUFTuJ%2FRRXDrUKTm5E6SaH5GPKdxQ7FwM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb798d3def1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 375x667, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5e209ca507a00b9e327df101f1f68534","sha1":"bea7e2824e0ea09e3cece4fbabf4dcae6bf72d00","sha256":"9c1b34a8446d8d27ab9144f2f20e93cb730c55b80730a316fff1f9808b725c70","sha512":"a49f0f7d9a540cf18ac71c5dfbddd63411c245c1f35bc1915ed7a833a0a050361d7df1660ea3022329b45470efd90e67693597e5f133d80e28bcd40aaffb64ef","ssdeep":"768:DmEh57A3UgLODXLRleKVSN64JhZVQgw/eZNb/Or85YJIAChDjVwEa:R5A3UlXLRoKVSN64fQg6eZNKlIACFa","tlshash":"141301bb403ad202cc40eec5410fa3073ed556b0a16e62b6bee47d56e443bd7ed4e529","first_seen":"2026-04-21T09:49:10.612802Z","last_seen":"2026-04-21T09:49:10.612802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/uploads/pwas/4Y2TzP8vNVz/f2IQ08bNcN41.webp?v=1768592434918","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /uploads/pwas/4Y2TzP8vNVz/f2IQ08bNcN41.webp?v=1768592434918 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1980\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 22 Mar 2026 11:58:44 GMT\r\netag: \"69bfd974-7bc\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8tKsW7rXwIhLUXZ1gGf3kNkERBgjj5FdC0wmuJjYIogHjgQnLlvZjcfJlrDjeuLqWIMYjiydMyGKUyc1Adu6JG1rxI8IDPrqL%2FC%2BTLuv7FvMcTn2jPYVYW40MbOyuHOE2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb798d3df11a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1980,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"03f89cc96124ef1a29929cf6d625ae93","sha1":"d0a31ac7d0a5668b7cf3d6b22ad6eb9092ee46e7","sha256":"ec4e1bc5df2a7ed633b5bab8be4c95577cfc31048b92b845acba938c74b9fe57","sha512":"703bd9260f04635bede251cf869ff05486d504dfdc76d2a67d9194e580eb08790b26d3e0e5ad0342e6fa32491407e672dc7e68fdcad9da9b1221f52ef04b23e6","ssdeep":"","tlshash":"f3414aef48ac808606916df1a0b261cf6fe372348f50211043ac4386f1ce8fcdb42a12","first_seen":"2026-04-21T09:49:10.613676Z","last_seen":"2026-04-21T09:49:10.613676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amaitallian.ink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 21 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 26697\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-08T14:42:40.708334Z","times_seen":257223,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":73,"dns":1,"connect":7,"send":0,"wait":21,"receive":9,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/assets/green/js/main.min.js?v=43.9.2","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /assets/green/js/main.min.js?v=43.9.2 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 17 Apr 2026 08:29:40 GMT\r\netag: W/\"69e1ef74-8e47\"\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=7200\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5aBLfR%2Bwx9qE99PLoDT6pK585woEMmXhii%2BsEjDelDCS7K66Vzqi3eeJfzKTPFpLYIJMnGBEYpICgLyP%2B7eW5nrtAgUTF2zeKZKIS%2BipJahlcbhUI2RMddwCQ00dyGoR3o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79892d481a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36423,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35127), with no line terminators","md5":"855709edbd6bfe94ad30ae9b1ee276de","sha1":"15e9b49babcab5550d9096ab2f29b8597b3bcabf","sha256":"276639eab25ba4b044c1eae646fecaa316f952608f9ff248b188df3cdba8efcb","sha512":"859c4fa5e00569e94a45a28967b46fce8ac448847f16b602b9b045feb6b490bfc6e02b940e26a90d589ea6f67b231eedc1350d02b8bcd9051848510f1cb61802","ssdeep":"768:pPwc9QRfOd+w4wp30z9+3ZbarJQNKlPQjOnZTFy4/OTHWvNk2ZZfaV5v4HZrJR5f:tw9tSp/MlnZTYR0kgy41NMtJTe","tlshash":"8cf24c7f91a6773c17d8a68de7365f003e1a08aadf4091b499d82e8678bdd4b0007b77","first_seen":"2026-04-21T09:49:10.614424Z","last_seen":"2026-04-26T13:05:06.941074Z","times_seen":3,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/assets/green/js/script.js?v=43.9.2","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /assets/green/js/script.js?v=43.9.2 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\netag: W/\"69a82edc-345a\"\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=7200\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmezsYoHj8%2FtWjWq5x9VhsycTTxqOpLAZ%2Bdnbl0%2BKdJEACgZiFZPhEvcWOB1QrC1dBoAxfAR3uWVGF%2BcWTIWe2zx0pEVq54ax%2FrF5NRCE0DIIsX71otorTdvKaDqlPUS8DA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79892d471a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13402,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"cf476bfd361bd1968b8faca737c561eb","sha1":"f2fed6bbedd0350d5aac965a1db3c49c623949b7","sha256":"2c56edcebd0c683da4b509cb9a320aa5c4b030d42396bbe75a5fd9e99bbae2d2","sha512":"31f181d79f8571b23b2ae3c3eabd9ee2d21ae446e594662599c6e622b02090aa57677fb1620231c27ad33847307723465815c71a792096fb95e6243c3190b9b8","ssdeep":"384:Pia5nuka6lO9sr8eTb8s8lyYL1lB5BYrW8fWbXOyaj:PiajlkeTb8s+9YHj","tlshash":"5852425a13fa05345573a0ba9f8b0e413120901f2847da293d9c45c96fc6e3a99fdffa","first_seen":"2026-01-27T03:23:56.523321Z","last_seen":"2026-07-11T23:55:04.703588Z","times_seen":34,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amaitallian.ink/assets/green/css/style.min.css?v=43.9.2","fqdn":"amaitallian.ink","domain":"amaitallian.ink","tld":"ink"},"ip":{"addr":"104.21.39.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:44.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amaitallian.ink","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 11:04:16 GMT","end":"Sat, 20 Jun 2026 11:04:15 GMT"},"fingerprint":{"sha1":"38:A5:32:63:9B:EF:DC:F3:78:95:FD:09:E5:14:03:78:41:12:69:09","sha256":"7A:B3:C9:43:7B:1B:31:38:B5:CD:58:6A:B3:CA:65:CB:8F:3D:CA:AB:BB:FF:E2:B6:E1:09:99:AA:BC:48:97:3E"}}},"request":{"raw":"GET /assets/green/css/style.min.css?v=43.9.2 HTTP/1.1\r\nHost: amaitallian.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=Ov4Ygp2TXuzPYJ8v\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 09:48:44 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\netag: W/\"69a82edc-1379b\"\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=7200\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vm6ytPD8JNP4XlajjW5UGPPBkifmQKsFPPl8l0oE8InrIJ9cxXsyAKwuA2c0G5F46wM22umhDusCZuM9R%2FWr6ItNxqCrSFNJbQLMqXbmvsSpJK6QbARh%2FGC4iQcA%2B4G%2BkSY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb79891d421a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79771,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"823d49a0f6beefe8874089f871457e99","sha1":"0fec4b75b867a4d7847181e017055f922943a9d3","sha256":"697a6cf629039092f08215048be01b67598c6b0b991302fb982a5b232ac216f9","sha512":"df1183c8329c4e3a5e26f50ac8f62bd83869dc14521ff72d392747d0bd19053c30bf14bea49c674dc53d56bc6d295a0a41041a8d99ad2201b33e136f01d3fbba","ssdeep":"1536:SQGdpFwVk5MPMJMuSS02Pqj7mquj/Kmm+zpRvhGPf7vVP:SQGqTfP","tlshash":"cd73ea219a55312eb077c26aa5d2554e233cd503f6236beefa94b529c7c7783223378c","first_seen":"2026-03-14T05:28:32.78929Z","last_seen":"2026-07-11T23:55:04.699666Z","times_seen":28,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"amaitallian.ink","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amaitallian.ink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 21 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 26697\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-08T14:42:40.708334Z","times_seen":257223,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":74,"dns":0,"connect":33,"send":0,"wait":29,"receive":8,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amaitallian.ink/?pwauid=Ov4Ygp2TXuzPYJ8v\u0026pwasid=69bfdd1d33311f9c575cc542","date":"2026-04-21T09:48:45.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amaitallian.ink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 21 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 26697\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-08T14:42:40.708334Z","times_seen":257223,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":88,"dns":2,"connect":21,"send":0,"wait":19,"receive":2,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}